0000100)="295ee1311f16f477671070") readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/1, 0x200000c1}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) 01:11:51 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x90000, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={r1, 0x6, 0x1, 0xdf9, &(0x7f0000000100)=[0x0, 0x0], 0x2}, 0x20) setsockopt$inet6_tcp_buf(r2, 0x6, 0x16, &(0x7f0000000180)="abead2d8c45113a4ee1537860392d9a485989944b5dd01b153629abaa5a40f8b2ef9fe287a4e3963e8fdb5b30f0f95223ac64cb00210a8224ad5088b612609927567038a", 0x44) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000000c0)={0x0, 0x5, 0x3f, 0x7}) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000200)=0x9) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000002c0)=""/156) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffffffffffd, @dev={0xfe, 0x80, [], 0xa}, 0x200}, 0x1c) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000240)={{0x62, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e21, 0x2, 'sed\x00', 0x1, 0x6, 0x5b}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e20, 0x3, 0x8, 0x1000, 0xfc6b}}, 0x44) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x66a}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000004c0)={r3, 0x20}, &(0x7f0000000500)=0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r0, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000380)=0x3e, 0x0) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2}}, 0xffffffffffffffff, 0x40000000000001f4, 0xfffffffffffffffd}, 0x18) 01:11:51 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x80000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fdatasync(r0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) r3 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x48, 0x309000) accept$nfc_llcp(r3, &(0x7f0000000180), &(0x7f0000000200)=0x60) close(r0) getsockopt$inet_dccp_buf(r3, 0x21, 0x0, &(0x7f0000000240)=""/73, &(0x7f00000002c0)=0x49) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r4 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0xfff, 0x8001, 0x101, 0x4, 0x585, r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:51 executing program 3: mq_open(&(0x7f0000000000)='/wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:11:51 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) userfaultfd(0x0) socket$inet_sctp(0x2, 0x1, 0x84) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semop(r0, &(0x7f0000000000), 0x177) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4440, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000200)=0x8, 0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e23, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff80000001}}}, 0x84) semctl$IPC_RMID(r0, 0x0, 0x10) 01:11:51 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)=ANY=[@ANYBLOB="020300091000000000000000000000000200130002000000000000000000000005000600000000000a000000000000000000000000000800000000000000000000000000000008000200010000000000000000020000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x80}, 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 124.760453] sg_write: data in/out 37054/1 bytes for SCSI command 0x8-- guessing data in; [ 124.760453] program syz-executor2 not setting count and/or reply_len properly [ 124.780195] binder: BINDER_SET_CONTEXT_MGR already set [ 124.787280] binder: 10843:10854 ioctl c0306201 2000dfd0 returned -11 [ 124.788145] binder: 10845:10852 ioctl 40046207 0 returned -16 01:11:51 executing program 3: mq_open(&(0x7f0000000000)='./lan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:51 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="1efa0c28f8f08534"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 124.819156] binder: 10843:10854 unknown command 536907575 [ 124.826504] binder: 10843:10854 ioctl c0306201 20008fd0 returned -22 [ 124.840195] binder: 10845:10857 tried to acquire reference to desc 0, got 1 instead [ 124.854975] binder: 10845:10852 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:11:51 executing program 3: mq_open(&(0x7f0000000000)='.w/an1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000080)={0x14, 0x0, 0xb03}, 0x14}, 0x1}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) r2 = semget(0x0, 0x1, 0x8) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f00000001c0)=0x9) 01:11:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 125.032388] binder: 10868:10874 ioctl c0306201 2000dfd0 returned -11 [ 125.032396] binder: 10868:10873 unknown command 536907575 [ 125.032413] binder: 10868:10873 ioctl c0306201 20008fd0 returned -22 01:11:52 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4500, 0x0) readlinkat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/123, 0x7b) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xffffff87, 0x0, &(0x7f0000000140)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 125.084307] binder: 10871:10875 unknown command 671939102 [ 125.090810] binder: 10871:10875 ioctl c0306201 20008fd0 returned -22 [ 125.099630] binder: 10871:10875 ioctl c0306201 2000dfd0 returned -11 [ 125.110336] binder: 10871:10875 unknown command 536907575 [ 125.116433] binder: 10871:10875 ioctl c0306201 20008fd0 returned -22 [ 125.265525] binder: BINDER_SET_CONTEXT_MGR already set [ 125.271336] binder: 10879:10883 ioctl 40046207 0 returned -16 [ 125.314388] binder: BINDER_SET_CONTEXT_MGR already set [ 125.323707] binder: 10890:10891 ioctl 40046207 0 returned -16 [ 125.330789] binder: 10890:10891 Acquire 1 refcount change on invalid ref 0 ret -22 01:11:52 executing program 1: ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000)) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(0xffffffffffffffff, &(0x7f0000000140)='|', 0x1) 01:11:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname(r1, &(0x7f0000000100)=@nfc, &(0x7f0000000000)=0x80) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:52 executing program 2: socket$inet6(0xa, 0x0, 0x1000) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='cgroup2\x00', 0x400, 0x0) 01:11:52 executing program 3: mq_open(&(0x7f0000000000)='.wl/n1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:52 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='children\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x40, @mcast1={0xff, 0x1, [], 0x1}, 0x2}}, 0x6, 0x7ff, 0x8d73, 0x80000001, 0x7}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x3, 0x1, 0x4, r2}, &(0x7f00000001c0)=0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(0xffffffffffffffff, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:11:52 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) userfaultfd(0x0) socket$inet_sctp(0x2, 0x1, 0x84) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semop(r0, &(0x7f0000000000), 0x177) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4440, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000200)=0x8, 0x4) semctl$IPC_RMID(r0, 0x0, 0x10) 01:11:52 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x122) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth0\x00', 0x59) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='[1'], 0x4) sendmsg(r0, &(0x7f0000000600)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x3, @broadcast=0xffffffff}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="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", 0xff}, {&(0x7f0000000040)="9750568241ac882e7acc99705f44ce11a660c4275e203c92f3dcd54fc9bfbba3d61dc943c523", 0x26}, {&(0x7f0000000140)="239ab00df5a7be07561f7d376c688e5a4051cde8caf3326fb1a18a73991fec07936d5042", 0x24}, {&(0x7f0000000340)="e576f380b4bb0c9912fdfc4c9fa6361f261477c1613e33f1b1409e0bae44ae87607133bc3263ccde1404fb2087256b1b8833f1bfce274bf8110669bea06e2ac031d86870c8f80cb943a2279be4842142532ff106557dc377b419de62a39946c7cb30", 0x62}, {&(0x7f00000003c0)="7dba83d59c13eee39be80ba2875a8031c11aac9133620ee81928e13650a68918b13c0faed6af41a24aa33797256d7108c4c1401d6ecdb080138b9f3bd5daacf2a666a26d19780b58c4acb587afe2cd628f5ca7d3dfb7fff5454b75127be5301a3ab1654da61b01265164e84d2416eb6601bec9cdd77278cd23b8e622d7ab4f5c2271da50001b3744590316f723f81844a102f89a0204d496402d82fcf72a9cdc8bcdadf724805ebd6797ecd08f3b08d15977ff27362bdb048100082ccaff75f1b9a66a111d230307c4fdbe0af3ae16a6d8874d39092e4be058a1b255359079af7ceb630029e49c06eaf3c872bab464a92d", 0xf1}, {&(0x7f00000004c0)="21b8da8ebec26f88fbf4c8df2d299d0cb940b73dc0e92167439384d82f9d6314f209895c512a781965b43e47f5913798edb25bbe3247efbda3f76174cdb441975fa3ddf5c8b637d26858fee070f86f7cd9300fc6454e867083e5f1e016ce26922b1b7ed22cc33dbb9eb080d82d51836579d1baf998740ce0b3870137a412c45319aac2217666c4c39fe5f7f683914cd454e6cf05b986416827649835798c8519bffc0404d4a425", 0xa7}], 0x6, 0x0, 0x0, 0x4004000}, 0x0) 01:11:52 executing program 3: mq_open(&(0x7f0000000000)='.wla/1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB="0c6380f2"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:52 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x6, 0x1e, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @rand_addr, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x81, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000040)=0x81) dup3(r1, r2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 01:11:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ftruncate(r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x8001, 0xa65) ioctl$KVM_NMI(r1, 0xae9a) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x7, 0x7fff, 0x4}) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$LOOP_SET_DIRECT_IO(r0, 0x127a, 0x6fffff) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80200) openat$cgroup_procs(r2, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) dup3(r1, r0, 0x80000) 01:11:52 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x4, {0x2, 0x4e24, @multicast2=0xe0000002}, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e22}, 0x20, 0x9, 0x4, 0x3, 0x80, 0x0, 0x0, 0x9, 0x5e}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) r3 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000080)={{0x0, 0x3, 0x3, 0x1, 0x6344b96e}, 0x101, 0x7f}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000000)=0xfff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9719be2bcf9005282b58d5aab95ab0105b3d892b8635b1a444196f75773fad929bb474560db622803f32c5b00d416915660aee6eb80fe6de8b73b94e414e5fd3dcdfbc077f1ca3331137ca854f9244396e88ede1ad5547f080c77bc0d67845170dd89971955a92f9"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 125.934583] binder: BINDER_SET_CONTEXT_MGR already set [ 125.950299] binder: 10910:10920 ioctl 40046207 0 returned -16 [ 125.963853] binder: 10910:10920 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:11:53 executing program 3: mq_open(&(0x7f0000000000)='.wlan/\x00', 0x0, 0x0, &(0x7f0000000040)) [ 126.155481] binder: 10928:10937 unknown command -226467060 [ 126.166990] binder: 10928:10937 ioctl c0306201 2000dfd0 returned -22 [ 126.182302] binder: 10933:10939 ioctl 40485404 20000080 returned -22 [ 126.189796] binder: 10933:10939 ioctl 400454d8 20000000 returned -22 [ 126.196897] binder: 10933:10939 unknown command 733878679 01:11:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000100)="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") close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x100008}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000f4d)}) 01:11:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0xfffffffffffffc79) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") finit_module(r0, &(0x7f0000000000)='pagemap\x00', 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x0, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xf9, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r3, 0x6, 0x101, 0x1}, &(0x7f0000000240)=0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)={0x303, 0x33}, 0x4) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000e77ffc), 0x4) sigaltstack(&(0x7f0000141000/0x1000)=nil, &(0x7f0000000380)) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) [ 126.202875] binder: 10933:10939 ioctl c0306201 2000dfd0 returned -22 [ 126.211090] binder: BINDER_SET_CONTEXT_MGR already set [ 126.216857] binder: 10933:10939 ioctl 40046207 0 returned -16 [ 126.227513] binder: 10933:10939 ioctl 40485404 20000080 returned -22 [ 126.234908] binder: 10933:10943 ioctl 400454d8 20000000 returned -22 [ 126.325885] binder: 10949:10950 ioctl 41009432 20000100 returned -22 [ 126.339479] binder: 10949:10950 unknown command 0 [ 126.344728] binder: 10949:10950 ioctl c0306201 20008fd0 returned -22 [ 126.358062] binder: 10949:10950 ioctl 41009432 20000100 returned -22 [ 126.957190] QAT: Invalid ioctl 01:11:53 executing program 1: ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000)) r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(0xffffffffffffffff, &(0x7f0000000140)='|', 0x1) 01:11:53 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:53 executing program 3: mq_open(&(0x7f0000000000)="2e776c616e3102", 0x0, 0x0, &(0x7f0000000040)) 01:11:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x8}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000400)={r3, 0x5b}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0xffffffffffffffef, @mcast1={0xff, 0x1, [], 0x1}, 0x8001}}, 0x20, 0x5, 0x8, 0x7, 0x5}, &(0x7f0000000000)=0x98) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000240)=""/178, &(0x7f0000000300)=0xb2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000440)={'team0\x00', 0x200}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={r5, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0x80}]}, &(0x7f0000000200)=0x10) 01:11:53 executing program 2: socketpair(0xa, 0x1, 0x40, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000001c0)=""/251, &(0x7f00000002c0)=0xfb) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x18000, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r1, r2, 0xd, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a6bd19ca420f4836db"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000300)=0xff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x2}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 01:11:53 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 01:11:53 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) userfaultfd(0x0) socket$inet_sctp(0x2, 0x1, 0x84) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semop(r0, &(0x7f0000000000), 0x177) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4440, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) semctl$IPC_RMID(r0, 0x0, 0x10) [ 126.979971] QAT: Invalid ioctl 01:11:53 executing program 7: ioctl(0xffffffffffffffff, 0x8911, &(0x7f0000000000)="025cc83d6d345f8f760070") r0 = socket$inet6(0xa, 0x803, 0x100000001) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000002c0)={@mcast1={0xff, 0x1, [], 0x1}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x18, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}}, 0x14) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x4, 0x80000000, 0x52738cb4c73bfec4, 0x1, 0xd0, 0x7, 0x1349, 0x9, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r2, 0x101, 0x99, "a6fe151ddd2faaf31b1a5ea072b0ee7b60d13dc6c0fada01ca78da4dd77a26984a0435eebbe631f20f7169de944e3cb4dfe25ed052fb2e3f0a626e14cfdf43f930b29a48fd1599dbe0a213c05642305a111ae8e1227229c9eb646c199e5be80c56ffba45d26a422197501945267d3d02108bdce02ff23238075dc9815aadcec3a19135823fb6cd39567b7d38e4d982f353a9b5a3c4191f5127"}, 0xa1) [ 127.060626] binder: 10970:10976 unknown command 0 01:11:54 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) [ 127.083498] binder: 10970:10976 ioctl c0306201 20008fd0 returned -22 [ 127.094160] binder: 10968:10979 unknown command 536907575 [ 127.101551] binder: 10968:10979 ioctl c0306201 20008fd0 returned -22 [ 127.113918] binder: 10970:10976 ioctl c0306201 2000dfd0 returned -11 01:11:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:54 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c633437af0000"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:54 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101800, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e20, 0x100000001, @loopback={0x0, 0x1}, 0x1ff}, @in6={0xa, 0x4e23, 0x100000000, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}], 0x58) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, r1, r3]) 01:11:54 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x1, 0x10000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x8, 0x10000]) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x41, &(0x7f0000c86000), &(0x7f00000007c0)=0x39b) [ 127.129996] binder: 10970:10986 unknown command 0 [ 127.136392] binder: 10970:10986 ioctl c0306201 20008fd0 returned -22 01:11:54 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) [ 127.308985] binder: 10997:11002 Acquire 1 refcount change on invalid ref 0 ret -22 [ 127.311356] binder: BINDER_SET_CONTEXT_MGR already set [ 127.323747] binder: 10997:11002 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 127.333354] binder: 10996:11001 ioctl 40046207 0 returned -16 [ 127.334159] binder: 10997:11002 unknown command 926180108 [ 127.345644] binder: 10997:11002 ioctl c0306201 2000dfd0 returned -22 [ 127.347214] binder: 10996:11004 Acquire 1 refcount change on invalid ref 0 ret -22 [ 127.356940] binder: 10996:11009 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 127.369581] binder: 10997:11002 Acquire 1 refcount change on invalid ref 0 ret -22 [ 127.384326] binder: 10997:11008 unknown command 926180108 [ 127.400157] binder: 10997:11002 unknown command 536907575 01:11:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0xffffffffffffff9c, 0x2, 0x1, 0x7f, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2f, 'cpu', 0x20}, {0x2d, 'rdma', 0x20}]}, 0xb) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000000)=0x21e) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000002c0)={0x7, 0x7, 0x189, 0x3, '\x00', 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)={0x6, 0x0, [{0x20, 0x3, 0x0, 0x0, @irqchip={0x8, 0x1}}, {0x8, 0x2, 0x0, 0x0, @irqchip={0x47, 0x9}}, {0x80000000, 0x2, 0x0, 0x0, @sint={0x2, 0x10000}}, {0x0, 0x7, 0x0, 0x0, @msi={0xffffffff, 0x100000000, 0x8}}, {0x400, 0x3, 0x0, 0x0, @msi={0x0, 0x1, 0x5}}, {0xfffffffffffffa5e, 0x78870d1391dfb109, 0x0, 0x0, @adapter={0xffffffff, 0xfffffffffffffff8, 0x10001, 0x8, 0xfff}}]}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) 01:11:54 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9fc4, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() setresgid(r3, r4, r5) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000140)=""/66, &(0x7f00000001c0)=0x42) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl(r7, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x0, 0x7000, 0x2000, &(0x7f0000009000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xc0}, 0x1c) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 127.406882] binder: 10997:11002 ioctl c0306201 20008fd0 returned -22 [ 127.409604] binder: 10997:11008 ioctl c0306201 2000dfd0 returned -22 01:11:55 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:55 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x200000, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x4, {0xa, 0x4e21, 0xf911, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, r4}}, 0x38) close(r0) r5 = accept(0xffffffffffffffff, &(0x7f0000000080)=@sco, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_int(r3, 0x6, 0x15, &(0x7f00000003c0)=0x7f, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000100)={'raw\x00', 0xdd, "b49a53ae4b90f4950152222f1723aebbb09034e86921ad48418c0c2e7cd6ce9d26fe10e3694cb57a5fce651fe1047fcb28f784cc151016478558b58578a0c47cac95bc92a9a939089c3f3c579b6a08178f9954660131fa0546d5ee5c86f85e4fc1593eb56bdab02152b12693109fd79f6cc8bae377948ee636718548cf6253efaafc9f7b2ad88982a52f1b33993b4d5fc99e7260535faa96f31948a6cea947dfbc7d0346abf05b9f881134c6f41d68b1acbc030c3ee9e9057125b90cdb7d5b71d624bdf1760cd228b0b2c9d4dd9191e5457aa33b9920a61ba15850b20c"}, &(0x7f0000000240)=0x101) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="5aca530e630c4000"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000180)=[{0x10, 0x29, 0x4}], 0x10}}], 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @remote={0xfe, 0x80, [], 0xbb}, 0x800}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x10000) 01:11:55 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:11:55 executing program 7: ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r0 = timerfd_create(0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) sysfs$3(0x3) r1 = dup2(r0, r0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000240)={{0x0, r2+30000000}, {0x0, 0x989680}}, &(0x7f0000000280)) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) timerfd_gettime(r1, &(0x7f0000000100)) 01:11:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 01:11:55 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) userfaultfd(0x0) socket$inet_sctp(0x2, 0x1, 0x84) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semop(r0, &(0x7f0000000000), 0x177) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4440, 0x0) semctl$IPC_RMID(r0, 0x0, 0x10) 01:11:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) sync_file_range(r1, 0x9, 0xfffffffffffffff7, 0x2) close(r0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r2, &(0x7f0000000080)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:55 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x101000, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000140)=""/177) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000100), 0x330) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1, 0x4b564d02]}) 01:11:55 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-cast6-avx\x00'}, 0x58) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="0a0775b005e381e5b3b60ced5c54dbfe0200bee3e781190e433b9b60b7295df0df", 0x21) 01:11:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bond0\x00'}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="597858acc9d09b2bc4ab54c4d8de70ac9b9c340eb31f89a38924c5109abd9e76a0eb92b521e4e14d0787a669941807b561c769c0025551588154a04faa444d2765a4e74ada5b76c83f34bd5777d5212868918deaf58b4f0b9916fb9f0a75f2fd4a72d8ed9cbcf1225aa8b3f074fc33d4eee3e80df34e001240e9772c92d124a7a2841c2e93dc48"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 128.173449] binder: 11042:11050 unknown command 240372314 [ 128.179473] binder: 11042:11050 ioctl c0306201 20008fd0 returned -22 [ 128.187897] binder: 11042:11050 ioctl c0306201 2000dfd0 returned -11 01:11:55 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x567c0, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e630c4000000000fd380ce15d18b20b7890d3a191e3eb441ddd41b4d2d3a85130a375c5c2e43e9710b0b3c287db5c83a9f42db6b667e6b8e8ce919938265f4100b5f28673e1c366a5218cf6ca569cb8414aee995f0cc8065258aeaa6abb466045026b362ac0c2e3dde872948c767008f5d4ca63694267de256f91581d723a6caa04000000000000006ff8812a6b570ed89881225b7b29417c8a120e0420ca82833b2dbff4f2c52706f3a4485fedd406aa532bdeb276d51429a4baed4e076e7f73db274a07b9adb398ac7cc3b9a4308ec9ca29e0f3f90cb10d3c9154f8af36b11075485cd340003fcfa739b7b96a35a09a5e0af24077fec1"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 128.225182] binder: 11042:11050 unknown command 536907575 [ 128.231249] binder: 11042:11050 ioctl c0306201 20008fd0 returned -22 01:11:55 executing program 3: mq_open(&(0x7f0000000000)="2e776c616e3104", 0x0, 0x0, &(0x7f0000000040)) [ 128.407291] binder: 11066:11071 ioctl 400454d9 20000000 returned -22 [ 128.419448] binder: BINDER_SET_CONTEXT_MGR already set [ 128.430212] binder: 11069:11073 ioctl 40046207 0 returned -16 [ 128.442565] binder: 11066:11071 unknown command -1403488167 [ 128.449285] binder: 11069:11075 tried to acquire reference to desc 0, got 1 instead 01:11:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000014c0)="2ba75e2556057f82c8cd17f5b17d80047f233bbfd229499ea02a2f4728874ef22c10799b326f07f25e422ffb352e0893ff057309be87d99ca513d1990ff1a4762e6b973ceb59295ea114e868483e221a5032feb049b7886a59b2adbbd31a2153d613093c3b15b3cd6e225b7a740a8cb37b4baca5d225c8928e57ef27c7a1bf47", 0x80}], 0x1, &(0x7f0000000100)}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") recvmsg(r1, &(0x7f00000012c0)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000001240)=""/87, 0x57}, 0x0) [ 128.461504] binder: 11066:11071 ioctl c0306201 20008fd0 returned -22 [ 128.470015] binder: 11066:11071 ioctl c0306201 2000dfd0 returned -11 [ 128.478565] binder: 11069:11073 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 128.488787] binder: 11066:11081 ioctl 400454d9 20000000 returned -22 01:11:55 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x48830, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:55 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") modify_ldt$write(0x1, &(0x7f00000000c0)={0x6, 0x20101800, 0x4000, 0x5, 0x800, 0xd4d, 0x4, 0x95f, 0x5, 0x6}, 0x10) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000300)=""/115) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x202842, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23}, {0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x42, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 'syzkaller1\x00'}) msgget$private(0x0, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000040)=0x1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x0, @multicast1=0xe0000001, 0x4e24, 0x4, 'lblcr\x00', 0x3d, 0xffffffffffffffff, 0x2a}, 0x2c) 01:11:55 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x80) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x400c00, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000540)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8) recvfrom$packet(r1, &(0x7f00000001c0)=""/92, 0x5c, 0x10000, &(0x7f0000000680)={0x11, 0x19, r2, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000000)=0x54) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x6) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c655e118453e9eeeab4d0f6ae062e630000"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) 01:11:55 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) [ 128.517712] binder: 11066:11071 unknown command -1403488167 [ 128.528342] binder: 11066:11071 ioctl c0306201 20008fd0 returned -22 [ 128.660558] binder: 11089:11095 ioctl c0306201 2000dfd0 returned -11 [ 128.706556] binder: 11094:11102 unknown command 291398924 [ 128.740224] binder: 11094:11102 ioctl c0306201 2000dfd0 returned -22 [ 128.774657] binder: BINDER_SET_CONTEXT_MGR already set [ 128.780583] binder: 11094:11112 ioctl 40046207 0 returned -16 [ 128.794657] binder: 11094:11102 unknown command 291398924 [ 128.800781] binder: 11094:11102 ioctl c0306201 2000dfd0 returned -22 01:11:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4d, 0x4000) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000000c0)=""/3) read$eventfd(r0, &(0x7f0000000040), 0x8) 01:11:56 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:56 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:56 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:11:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000001}, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {@in=@loopback=0x7f000001, @in6=@local={0xfe, 0x80, [], 0xaa}}, {{@in=@rand_addr, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x3c}, 0x0, @in=@multicast1=0xe0000001}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x3c}, 0x0, @in=@broadcast=0xffffffff}]}]}, 0x1ac}, 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:56 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) userfaultfd(0x0) socket$inet_sctp(0x2, 0x1, 0x84) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semop(r0, &(0x7f0000000000), 0x177) semctl$IPC_RMID(r0, 0x0, 0x10) 01:11:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 01:11:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SET_MCE(r2, 0x4004ae99, &(0x7f0000000140)) 01:11:56 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000000000008030c2606a40f4000000000"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) r3 = geteuid() r4 = getgid() fchown(r2, r3, r4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 129.295383] binder: 11129:11133 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 129.325507] binder: 11129:11133 ioctl c0306201 2000dfd0 returned -11 01:11:56 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x8000) r1 = memfd_create(&(0x7f00000000c0)='/dev/net/tun\x00', 0x2) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x41) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000001c0)=""/208) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0\x00'}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'ip_vti0\x00', 0x400}) socket$pptp(0x18, 0x1, 0x2) fanotify_init(0x10, 0x181c00) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)={0x303, 0x33}, 0x4) 01:11:56 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TTUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/133) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x1ffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000200)={{0x9, 0x101, 0x2, 0x8, 0x9, 0x5}, 0x7}) write$tun(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="ffff83ff0000000000004600001c000000000000907800000000e000000100009078e0000001"], 0xfdef) 01:11:56 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x804) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 129.348015] binder: 11129:11141 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 129.483944] binder: 11149:11154 unknown command 14 [ 129.500071] binder: 11149:11154 ioctl c0306201 20008fd0 returned -22 01:11:56 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) [ 129.525655] binder: 11157:11162 Acquire 1 refcount change on invalid ref 0 ret -22 [ 129.535903] binder: 11149:11154 ioctl c0306201 2000dfd0 returned -11 [ 129.564465] binder: 11157:11162 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:11:56 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) r3 = fcntl$dupfd(r2, 0x406, r1) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100)=0xb9e3, 0x4) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000140)=0xffffffffffff0000, 0x4) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0xfffffffffffffffb}) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000080)={0x54, 0x7, 0x100000001, {0x8, 0x1000}, {0x4, 0x3}, @period={0x5b, 0xffffffffffffff80, 0x0, 0x6, 0x4, {0x9, 0x3, 0xffffffffffffff25, 0xad7}, 0x6, [0x4, 0x1, 0x7f, 0x5b1, 0x7, 0xfffffffffffffffd]}}) 01:11:56 executing program 2: r0 = dup(0xffffffffffffff9c) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000040)=""/4096) syz_mount_image$nfs(&(0x7f0000001040)='nfs\x00', &(0x7f0000001080)='/\x00', 0x3, 0x6, &(0x7f0000001540)=[{&(0x7f00000010c0)="5a385c1d74465d78852c15c112d04fedf7aff540d6614c802fe9cb55fc44381da10c7c5e1ed609f2cad851c99bbfc981bf3643ebe08d1aae4ce82854dd2c0bf8d60abe4addf9ef575fb04d7fe98e7d701b1c3eff64ac5bafd850cd73b7b684e87ae69523c33f8db05ee2cd59e3c9a4bf8b30f4465eeffd869c9635c7688cb19e87bc81519fb772cffe86e6046c4b839f0a396c9861ddda460679951e8955e70c04e5ada6ca58f42dcffad79ff3d7a86cff5d548744d98314c865214875ddd825edd5e678db1f2cfaf2b3f09b65afd9ad11628fc641ee15218eb8689bbd14bf1023075066eca41d281ac07347b9", 0xed}, {&(0x7f00000011c0)="6923176372e1da784e43ae3d1ec2c96e0e78748f2260324f3e", 0x19, 0x4}, {&(0x7f0000001200)="e3e6d978e2ee9236cd9eb44db6347d183034646a6fc3b8a39686cb099e71599fee86521b43bc6f53dd48b2346b6b99320e7db79bde618874ed3b03ebeb37b0854e1fafceb0c65100149ddc4fe73516b4cb42a1b9e96edc48e758f5545ade73f8c2295da961df95e9f7c46db2feff96aba4e02503ab10d6a0c4b2943c41200db0ed0aee24c305cc28c8fa457092ec87e216a918460f79f8189aec79e366b68ea005219cc2ac01d4f2598ef21c4a68f7bbe59dce2e7085a991191f081b69c0c874398e60cbc4a0d4ee248998e426ada33f22667609607554999ffce578dd7909fc678546fab352", 0xe6, 0x79b9}, {&(0x7f0000001300)="4c282af3131eb15e96f4e4feeee6cf562410be6b4413909bdc9e316f1eee883e0e12b87ef6366c9930fbd2f588b54d2572bf8fab", 0x34, 0xe85c}, {&(0x7f0000001340)="ffc24c4f30f76b2374f7a65b75623d3997f1816f3650775b73906a35295d23485524cbab9734fac68763d1638bd3ffdd76ed1618c3d1a3b5c4d88c20769661d73c92cfcc1b2781b2a930a8c0462de942eb7739be8f72ebd364b3ccd0ab6b47ff6beaa9dd614dd51184b6b7456b608cd0eceb8e7258f196dcedb0ce1fd5f3cafcda51e093d1faa47a5ab8bbfd4d7e4d3faf55abe2236bc4a64d111dcabd90d8eb12682cab5d5f51aaa5413aa828a21d9345041dfcac7c82f693ddee8708ea5e8b20d4555cb315f48af21af1d5277d5150023c0ed03df3593567273b6e19d1d4d55faa76510ab01f34aff54ab64c42d1aeb4c9", 0xf2, 0x277bae70}, {&(0x7f0000001440)="0bf5fdd91c39ca90e7a96cae08ddcab8b37cd5b409182c7067936a4dfded45e90ab380ff0305fffae4c672d88dc3cee4b13325012e380ba5237a228cfd540286b042077df6a6217b8232945b585a5f58291407bb762b1821e75fe4f10586785bf5b1988274f9f4f0596dd4734852eecfbb96a3f784b90a58ab12142612995493955396a285b82e302c425f7325d509c37430d23df59d7b3d3c33da3964527d29b04c7de4ea5336d1e6cf7b9a4612c4b207ffb0e59b00721ad021641ed36e3c8018ba8fa5755cae3543bcf67b0e2eca686b6fa1ec2c26f5f11e6016c97d4ba9e3f272e6480ce7dadcfeae7803c68046", 0xef, 0x3}], 0x40000, &(0x7f0000001600)='ppp0\x00') setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000001640), &(0x7f0000001680)=0x4) r1 = semget(0x1, 0x3, 0x400) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f00000016c0)=""/53) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001700)='/dev/dsp\x00', 0x280, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001980)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001940)={&(0x7f0000001780)={0x19c, 0x2a, 0x2, 0x70bd2b, 0x25dfdbfd, {0xf}, [@nested={0xc4, 0xa, [@generic="f3b82ca384abf2f107067ec37b4819538359e8abe2eebd32eb3074f5682a40d1c94804b288172ddfdef81b5064a18da5d89b8ae4fcdf6795310c8f9cd0f201cff7234bb2f57f5ad5070fcfc4699765bee583690c13c456998e695b2312c543d1a3df4e13e26f1d4efe1cd045ded368a632e9d58ab3a8e0a48b7b9104ce0726da99e42cdd4ea05c356b7b3e0cbac7ecc3da71823949f6623fb1969eb7cafe48c354c615e34b04d4626ea405764396356e7af7355e7ca785b806367a0ad3"]}, @generic="895069e7f92e7ec77490db2be173267f26eeaeba0bc0c5fefffa0af6267e4abdb01843e702fbfbbdcef9f9cc79216e845d89f8bd21ae43267dd6776b607e0a5b7982b8d31d5bca7913148f6df94d5a936bfc96f65c3828c7a6111fab33e3db83a080472e95eda13d32ee3673ef4cf0b2a9570bd297394b52e00d3126f6881baf32d5f08d6bad216f1227b3b0175224952b507dab0b1f9461917e3ae8e551f749afeb0ae2680875ef1c036250146c3318", @typed={0x8, 0x4, @ipv4=@multicast2=0xe0000002}, @typed={0xc, 0x7a, @str='eth1\x00'}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_mount_image$hfsplus(&(0x7f00000019c0)='hfsplus\x00', &(0x7f0000001a00)='./file0\x00', 0x1, 0x2, &(0x7f0000001bc0)=[{&(0x7f0000001a40)="f6fac6fc3ec4ff62f942df249cead588b1cdc35e9ad8d996520385470aa5779113b7998d4d6572de9562145d7c9228401698162c987e3450649d1fb3a0b7d01d00d33d48a33a579efd33", 0x4a, 0x4}, {&(0x7f0000001ac0)="252dc3c17798892b8d7f8d5b199132a296f0bf78815d77a0bb21339b6bada70e8e12c6e872f4de6785443a80e9994e7d83e9562734312f3e09e720958e676002985e8c9f4c1529587ee63c8d88154c315575cab41dc26ed3eb096eff1f497cea1aa2cc3e58024061e7e619c4b59119613e10184e58f40256fe119c680f41b530ffa47aa39797ecd0253b611f91f8ca7b553dfc60499ebb540f7de5ba61d43b7c2a2fbe1857297e0886de2d84d6ad04b236ca40a99871afb5fb98d73d43258251afb4e04a654bd7c3b993d14980c0fc9acc8271", 0xd3, 0x10}], 0x200822, &(0x7f0000001c00)={[{@type={'type', 0x3d, "bf39ed8f"}, 0x2c}, {@decompose='decompose', 0x2c}]}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001c80)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001d40)={@broadcast, @multicast1, 0x0}, &(0x7f0000001d80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001dc0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000001ec0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001f40)={'bond_slave_1\x00', 0x0}) getsockname(r0, &(0x7f0000001fc0)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000002040)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002080)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000020c0)={'ip6gretap0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002140)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000002240)=0xe8) accept4$packet(r0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000022c0)=0x14, 0x800) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000026c0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000002680)={&(0x7f0000002300)={0x35c, r3, 0xc02, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x1bc, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xffffffffffffffff}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r10}, {0xf8, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7}}, {0x8, 0x7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r11}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0xc041}, 0x4004800) semctl$SEM_STAT(r1, 0x2, 0x12, &(0x7f0000002700)=""/232) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000002800), &(0x7f0000002840)=0x8) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000002880), 0x4) stat(&(0x7f00000028c0)='./file0/file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000002980)=[r12]) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000029c0), 0x10) r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002a00)='/proc/self/net/pfkey\x00', 0x42000, 0x0) ioctl$FS_IOC_GETFSLABEL(r13, 0x81009431, &(0x7f0000002a40)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffff9c, 0x84, 0xc, &(0x7f0000002b40), &(0x7f0000002b80)=0x4) [ 129.584486] binder: 11149:11167 unknown command 14 [ 129.600793] binder: 11149:11167 ioctl c0306201 20008fd0 returned -22 [ 129.611672] binder: 11157:11162 ioctl c0306201 2000dfd0 returned -11 [ 129.615244] binder: 11149:11154 ioctl c0306201 2000dfd0 returned -11 01:11:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="9aa282c6f136c574b243fee5a6d8345967aa20705b31eeff7662c61eaccca13fef68b7d25ff26b84f391ee4490780322a4e8de0263996cec396ca33df8741179d042117adc5d43b7980e80bf752df2b73a76a948ce399f5045920d0906140117703e2a9f3e947c9f69c33ebc14f7470ab623adde749f89f70c64c59e24ed34219042019e30a2da3e7cd0"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000100)={[{0x2, 0x6, 0x8, 0x2, 0x3f, 0x4, 0x0, 0x20, 0x1f, 0x2, 0x101, 0x4, 0x80000000}, {0xfffffffffffffff8, 0x2, 0x4, 0x5, 0x7, 0x2, 0x5, 0x6, 0xde43, 0x20, 0x400, 0x1ff, 0x3}, {0x80000000, 0x70, 0x5, 0x3f, 0x8, 0xd04, 0xfffffffffffffc01, 0x100000001, 0x80000000, 0x2, 0x6, 0x6, 0x1}], 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:56 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffff9c, 0x0, 0x1, 0x40, &(0x7f0000000000)=[0x0], 0x1}, 0x20) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40000, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r2) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0686b6d31e4a0c9f637e653d559c25da06f1fbc1fa0aa0d5ea8f1a4a908b4a3ebf2e3061898aa745bd1e715729bf3224609ae81681cae614408036ec3918ea3f050000007e00000000000000000000000000000000000000000000009e08eb516c588c217416ecd3da559e2dbab4f29aab4185b2d3"], 0xfffffdd0, 0x0, &(0x7f0000012fc7)}) close(r2) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="20aa808f21707de24df5c735cca9d1e00764da7066b76e8c063b5f563113c014fa95f006880c7d8d3851b43bc1678bc2851b43cc707f9f2268402109430052dbc9806be64d2cf7df0bde479cfb235257df3534c606dba7326c421eda662d32320e34cf9748fccf2c213e63b517c4cfe90c107fbafb3920280fb27e3d8fdbe927b5b6adb0814ddc61894a33e6d6a3919d98fd2b830ad3bcc19715a2d23e3e5ec59dde1d1deac7d8a2d4d2cd370223421b1be989fb90898322913d9682e1442088370cea7a86038eb9901085ee549dbb6469773ce147f8c8e01f9565ac021d39370101a87c7d7de9443cf9"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x5}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={r4, 0x6}, 0x8) [ 129.635081] binder: 11157:11162 Acquire 1 refcount change on invalid ref 0 ret -22 [ 129.647618] binder: 11157:11162 unknown command 536907575 [ 129.653548] binder: 11157:11162 ioctl c0306201 20008fd0 returned -22 [ 129.790048] binder: 11181:11186 unknown command -964517222 [ 129.808940] kvm: apic: phys broadcast and lowest prio [ 129.830446] binder: BINDER_SET_CONTEXT_MGR already set [ 129.831863] binder: 11181:11186 ioctl c0306201 20012000 returned -22 [ 129.840999] binder: 11187:11194 ioctl 40046207 0 returned -16 [ 129.850901] binder: 11187:11194 unknown command -743012858 [ 129.853145] binder: 11181:11186 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 129.872263] binder: 11187:11194 ioctl c0306201 20012000 returned -22 [ 129.878849] binder: 11181:11186 ioctl c0306201 2000dfd0 returned -11 [ 129.894377] binder: 11181:11186 unknown command -964517222 [ 129.903136] binder: 11181:11186 ioctl c0306201 20012000 returned -22 [ 129.912290] binder: 11181:11198 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 129.917230] binder: 11187:11194 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 129.933346] binder: 11187:11194 unknown command -1887393248 [ 129.942224] binder: 11187:11194 ioctl c0306201 2000dfd0 returned -22 [ 129.961298] binder: 11187:11194 unknown command -743012858 [ 129.969533] binder: 11187:11194 ioctl c0306201 20012000 returned -22 [ 129.981685] binder: 11187:11202 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 129.993377] binder: 11187:11194 unknown command -1887393248 [ 130.001320] binder: 11187:11194 ioctl c0306201 2000dfd0 returned -22 01:11:57 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') times(&(0x7f0000000080)) poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 01:11:57 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:57 executing program 7: syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="b100485caa2aaaaaaaaaaabb08004500001c000000000002907800000000ffffffff12009078e00000011684eb13c4ae11064d2d017d48f56df66c09bc1d90dac77be31ea7cec353798f81b9efc3684ccbf8bf20dc768f58898ae90fa65237d7013a9a87e9a933b648ad80cd3d705d4cc7569ef741357950d1309b077a7c74ebb4f5c920ee"], &(0x7f00003b5000)) 01:11:57 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:57 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:11:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x204000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x7fffffff, 0x4}, 0x10) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@mcast2, 0x0}, &(0x7f0000000240)=0x14) connect(r1, &(0x7f0000000280)=@hci={0x1f, r2, 0x3}, 0x80) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000044000000000"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000340)={@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, r2}, 0x14) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) pause() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:57 executing program 0 (fault-call:5 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:11:57 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) userfaultfd(0x0) socket$inet_sctp(0x2, 0x1, 0x84) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:11:57 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000e80)={0x5}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) close(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x3a, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="00000000020000"], @ANYRES64, @ANYBLOB="000000000000000004630440000000220e630caa2d7ad940030000000400000000002dcb7e54cd9efd3e1fe97496d84bb8cbb8627bac3fc7e63dda9f8b1f0ac0f364f7098a6493e56ffaea71d5f2340f36e851119b9a3b733fe4d057eeba5aa96879d15ba4", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB]], 0x0, 0x0, &(0x7f0000000400)}) 01:11:57 executing program 3: mq_open(&(0x7f0000000000)="2e776c616e31ff", 0x0, 0x0, &(0x7f0000000040)) 01:11:57 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x121, 0x0, &(0x7f0000000080)="baca90ed18ecd8402eb2e4eaa6dee354e33161b2291b9d42e7b8be520ae435826d2ff54928e8a59c8e016fc5a728cd78102e6a685baaf50903392891a9c041b37345a8bc20f024653813077d8822c456747025d5ba48cde5cf0e0837bb79d26b5d1192e4652bd46bf4cc9dd777598610b4d659f7db26d31e36d0"}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/llc\x00') ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 130.382570] binder: 11220:11226 unknown command 9 [ 130.388524] binder: 11220:11226 ioctl c0306201 20012000 returned -22 [ 130.407240] binder: 11220:11226 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:11:57 executing program 3: mq_open(&(0x7f0000000000)="2e776c616e31c0", 0x0, 0x0, &(0x7f0000000040)) 01:11:57 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x3b, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e22, 0x1, 'dh\x00', 0x2, 0x5, 0x7a}, {@empty, 0x4e20, 0x2, 0x7, 0x6, 0x3}}, 0x44) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0xa000000]}, 0x6) 01:11:57 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) sysfs$2(0x2, 0x1, &(0x7f0000000000)=""/61) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23}], 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630cae8c614000000000000000000000"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 130.564547] binder: BINDER_SET_CONTEXT_MGR already set [ 130.570535] binder: 11241:11248 ioctl 40046207 0 returned -16 01:11:57 executing program 3: mq_open(&(0x7f0000000000)="2e776c616e31fe", 0x0, 0x0, &(0x7f0000000040)) [ 130.805739] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002 [ 130.835817] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002 01:11:57 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000140)={0x2, 0xad, 0xfffffffffffffffb}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x2, 0x3}, 0xc5, 0x9, 0x3}) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 130.860971] binder: 11258:11260 unknown command -1374919922 [ 130.867191] binder: 11258:11260 ioctl c0306201 20008fd0 returned -22 [ 130.881087] binder: 11258:11260 ioctl c0306201 2000dfd0 returned -11 [ 130.892455] binder: 11258:11260 unknown command -1374919922 [ 130.896133] binder: 11258:11261 ioctl c0306201 2000dfd0 returned -11 [ 130.898407] binder: 11258:11260 ioctl c0306201 20008fd0 returned -22 [ 131.202706] Process accounting resumed [ 131.297893] binder: 11220:11270 unknown command 9 [ 131.302946] binder: 11220:11270 ioctl c0306201 20012000 returned -22 [ 131.310702] binder: 11220:11270 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 131.372249] Process accounting resumed 01:11:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x4008000, 0x0, 0xfffffffffffffe83) recvmmsg(r1, &(0x7f0000003780)=[{{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003700), 0x0, &(0x7f0000003740)=""/30, 0x14}}], 0x1, 0x0, &(0x7f0000000000)={0x77359400}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xfff) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001300)=""/209, 0xd1}, {&(0x7f0000001400)=""/118, 0x76}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x3, &(0x7f00000024c0)=""/53, 0x35}}, {{&(0x7f0000002f40)=@alg, 0x80, &(0x7f0000003000), 0x0, &(0x7f0000003040)=""/93, 0x5d}}, {{&(0x7f00000030c0)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003440)}}, {{&(0x7f00000034c0)=@nl, 0x80, &(0x7f0000003600), 0x0, &(0x7f0000003640)=""/83, 0x53}}], 0x4, 0x0, &(0x7f00000036c0)={0x0, 0x989680}) 01:11:58 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\b'], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB="0c631002"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:58 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:11:58 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000140)={0x2, 0xad, 0xfffffffffffffffb}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x2, 0x3}, 0xc5, 0x9, 0x3}) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:11:58 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) userfaultfd(0x0) socket$inet_sctp(0x2, 0x1, 0x84) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:11:58 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:11:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r3 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x112, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x33d, 0x0, &(0x7f0000000240)=[@clear_death={0x400c630f, 0x2, 0x1}, @increfs={0x40046304, 0x3}, @exit_looper={0x630d}, @free_buffer={0x40086303, r3}], 0x4, 0x0, &(0x7f0000000200)="0034b0fd"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000100)={0x100, 0x1, {0x1, 0x0, 0x5, 0x3, 0x7}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done={0x40086310, 0x2}], 0x61, 0x0, &(0x7f0000000280)="9d4ff007cad5d13f0d647f55523f8f4e1360b637cd589f4333c10d38c6cfe7fe1954c41e638668cae0455a6f5e1b536aef71c7137f2e8534552c07a12bfd0f54a3cee9b4aae98fdfcb6bc5cfc56c26f37439022decb608bd3aec50a4dde9655cd3"}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x2) 01:11:58 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:58 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000140)={0x2, 0xad, 0xfffffffffffffffb}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x2, 0x3}, 0xc5, 0x9, 0x3}) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 131.567237] binder: 11285:11290 unknown command 2048 [ 131.573698] binder: 11285:11290 ioctl c0306201 20012000 returned -22 [ 131.581109] binder: 11285:11290 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 131.589427] binder: 11285:11290 unknown command 34628364 [ 131.596402] binder: 11285:11290 ioctl c0306201 2000dfd0 returned -22 [ 131.606268] binder: 11285:11290 unknown command 2048 01:11:58 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8800, 0x2) getsockopt$inet6_dccp_buf(r2, 0x21, 0x8d, &(0x7f00000000c0)=""/158, &(0x7f0000000180)=0x9e) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x8100, 0x4) r3 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x8a052, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r3}], 0x5a, 0x0, &(0x7f0000000280)="db4d176a6889949cb821ed6b81979edb16d51f24eed2f444bfb4c8a8f10407d21c87981bc316b6975b7c6a92d2c01d116ffdc59eade5b3a59adbab113ff28df31eece2348baf7a06397b9877d2c8bc013e6ef065af35c3ba2ee0"}) close(r2) setns(r2, 0x4c000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 131.611568] binder: 11285:11290 ioctl c0306201 20012000 returned -22 [ 131.611742] binder: 11285:11293 unknown command 536907575 [ 131.624194] binder: 11285:11294 unknown command 34628364 [ 131.625439] binder: 11285:11293 ioctl c0306201 20008fd0 returned -22 [ 131.629965] binder: 11285:11294 ioctl c0306201 2000dfd0 returned -22 01:11:58 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x100, 0x240200) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={"6272696467653000e900000400", &(0x7f0000000000)=@ethtool_cmd={0xe}}) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) [ 131.829148] binder: 11297:11300 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 131.836216] binder: 11297:11300 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 131.845764] binder: 11297:11300 BC_FREE_BUFFER u0000000000000000 no match [ 131.853084] binder: 11297:11300 unknown command 0 [ 131.859522] binder: 11297:11300 ioctl c0306201 2000dfd0 returned -22 01:11:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) r2 = fcntl$getown(r1, 0x9) syz_open_procfs(r2, &(0x7f0000000180)='net/ip6_flowlabel\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 131.875118] binder: 11297:11305 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 131.882167] binder: 11297:11305 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 131.890575] binder: 11297:11305 BC_FREE_BUFFER u0000000000000000 no match [ 131.897701] binder: 11297:11305 unknown command 0 [ 131.902734] binder: 11297:11305 ioctl c0306201 2000dfd0 returned -22 01:11:58 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000140)={0x2, 0xad, 0xfffffffffffffffb}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x2, 0x3}, 0xc5, 0x9, 0x3}) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:11:58 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) [ 132.047636] binder: 11312:11316 BC_FREE_BUFFER u0000000020ffb000 no match [ 132.055266] binder: 11312:11316 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 132.063693] binder: 11312:11316 ioctl c0306201 2000dfd0 returned -11 [ 132.077195] binder: BINDER_SET_CONTEXT_MGR already set [ 132.082737] binder: 11312:11316 ioctl 40046207 0 returned -16 01:11:59 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x4, 0x8, 0x7, 0x8, 0x4}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 132.092740] binder: 11312:11316 BC_FREE_BUFFER u0000000020ffb000 no match [ 132.097114] binder: 11312:11320 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:11:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x100, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0xa34aeec4fc308130}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x4) geteuid() ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080)=0x4, 0x4) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 01:11:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e24}, @in6={0xa, 0x4e21, 0x9, @empty, 0xbea}, @in6={0xa, 0x4e24, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0xffff}, @in6={0xa, 0x4e22, 0x1, @empty, 0x8}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in6={0xa, 0x4e22, 0x36, @loopback={0x0, 0x1}, 0x8b}, @in6={0xa, 0x4e20, 0xe14, @empty, 0x3}, @in={0x2, 0xffff, @multicast1=0xe0000001}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e23, 0x8, @empty, 0xe0}], 0xe8) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:59 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000140)={0x2, 0xad, 0xfffffffffffffffb}) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 132.421828] binder: 11334:11340 ioctl c0306201 2000dfd0 returned -11 [ 132.445841] binder: 11334:11341 Acquire 1 refcount change on invalid ref 0 ret -22 [ 132.456595] binder: 11334:11340 unknown command 536907575 [ 132.459303] binder: 11334:11341 ioctl c0306201 2000dfd0 returned -11 [ 132.462825] binder: 11334:11340 ioctl c0306201 20008fd0 returned -22 01:11:59 executing program 2: gettid() r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x200000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x3) 01:11:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs(r2, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:59 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x20000589, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) [ 132.792842] binder: 11360:11363 unknown command 536907575 [ 132.798562] binder: 11360:11363 ioctl c0306201 20008fd0 returned -22 01:11:59 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:11:59 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:11:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000006040)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005e40)=[{{&(0x7f00000000c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/207, 0xcf}, {&(0x7f0000001340)=""/14, 0xe}, {&(0x7f0000001380)=""/218, 0xda}, {&(0x7f0000001480)=""/31, 0x1f}], 0x6, &(0x7f0000001540)=""/9, 0x9}, 0x1c00000}, {{&(0x7f0000001580)=@alg, 0x80, &(0x7f0000002880)=[{&(0x7f0000001600)=""/66, 0x42}, {&(0x7f0000001680)=""/128, 0x80}, {&(0x7f0000001700)=""/34, 0x22}, {&(0x7f0000001740)=""/252, 0xfc}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/10, 0xa}], 0x6, 0x0, 0x0, 0x1}, 0xffffffffffffff48}, {{&(0x7f0000002900)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002980)=""/188, 0xbc}, {&(0x7f0000002a40)=""/36, 0x24}], 0x2, &(0x7f0000002ac0)=""/216, 0xd8}, 0x1}, {{&(0x7f0000002bc0)=@nfc_llcp, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002c40)=""/124, 0x7c}, {&(0x7f0000002cc0)=""/36, 0x24}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/170, 0xaa}, {&(0x7f0000003e40)=""/67, 0x43}, {&(0x7f0000003ec0)=""/109, 0x6d}], 0x7, &(0x7f0000003fc0)=""/178, 0xb2, 0x10000}, 0xfffffffffffffffe}, {{&(0x7f0000004080)=@llc, 0x80, &(0x7f0000004200)=[{&(0x7f0000004100)=""/229, 0xe5}], 0x1, &(0x7f0000004240)=""/197, 0xc5, 0x3f}, 0x4}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000004340)=""/42, 0x2a}, {&(0x7f0000004380)=""/136, 0x88}, {&(0x7f0000004440)=""/155, 0x9b}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/177, 0xb1}], 0x5, &(0x7f0000005640), 0x0, 0x5}, 0x9}, {{&(0x7f0000005680)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000005a00)=[{&(0x7f0000005700)=""/26, 0x1a}, {&(0x7f0000005740)=""/237, 0xed}, {&(0x7f0000005840)=""/53, 0x35}, {&(0x7f0000005880)=""/29, 0x1d}, {&(0x7f00000058c0)=""/132, 0x84}, {&(0x7f0000005980)=""/100, 0x64}], 0x6, 0x0, 0x0, 0x9}, 0x5}, {{&(0x7f0000005a80)=@hci, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000005b00)=""/193, 0xc1}, {&(0x7f0000005c00)=""/47, 0x2f}, {&(0x7f0000005c40)=""/127, 0x7f}, {&(0x7f0000005cc0)=""/197, 0xc5}], 0x4, &(0x7f0000005e00)=""/39, 0x27, 0x5}, 0x1}], 0x8, 0x120, &(0x7f0000006080)={r1, r2+30000000}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000060c0)={@empty, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @empty, 0x9, 0x3, 0x8, 0x100, 0x7, 0x0, r3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x10eff5bfca45c79e}, 0x20) 01:11:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000335920f0efcc66594000000"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2400, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_open_procfs(0x0, &(0x7f00000001c0)="737461636bb9") openat(r2, &(0x7f0000000140)='./file0\x00', 0x100, 0x88) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x15, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:11:59 executing program 3: mq_open(&(0x7f0000000000)="2e776c616e3103", 0x0, 0x0, &(0x7f0000000040)) 01:11:59 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c630000b95ebc39373941000000000006347230c6ca46f0f3b988d48fc4e00a3dd7b7ad84e6b8ae9ff845530000"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) r2 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) r3 = shmget(0x1, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil) r4 = geteuid() getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) r6 = geteuid() getresgid(&(0x7f00000004c0), &(0x7f0000000340), &(0x7f0000000500)=0x0) r8 = fcntl$getown(r1, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000003c0)=0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000400)={{0x101, r4, r5, r6, r7, 0x20, 0x1}, 0x1000, 0xea, 0x9, 0x4, r8, r9, 0x7f8}) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0xffffffffffffffff, 0x7, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f00000001c0)={r2, 0x5, 0x10000, "43b0d4bdd99c8d9ce196f2f40eb5b1a59c7d90d9c9f96c89c63844ae6a2b2b33afbc90e04621d32e32c0e925b48a37459647d557c8d8f1966a8984dce04e98681a487d6fbfcc0605a39a04fafa58f467068da5be0414417355c2e65d7d5d7be4"}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_eee={0x45, 0x2, 0x1, 0x4d1c6b26, 0x6, 0x80, 0x9, 0x5, [0x6, 0x591e1f66]}}) 01:11:59 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) userfaultfd(0x0) socket$inet_sctp(0x2, 0x1, 0x84) semctl$IPC_RMID(r0, 0x0, 0x10) 01:11:59 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:11:59 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:11:59 executing program 2: mkdir(&(0x7f0000001300)='./file0\x00', 0x191) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x0, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x8000, &(0x7f0000000480)={[{@uid={'uid', 0x3d, [0x34]}, 0x2c}]}) 01:11:59 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000200)="3d74b31da7ff01cde3a7b4bdb805e4cece0a9d55", 0x14, 0xfffffffffffffffd) keyctl$reject(0x13, r1, 0x9, 0x9, r2) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000f27d16270596845ac0c9daba4c011fbe6923e24bb6097ae96e2cb7ee4e3e1718ae1a3b340bd35259a1a45983c37cf8b8d22061c244bb9f3b3b81943c8cd0bac6f1982970aec6ab2df738413e7e2a02a3fefb6bbdcf4f36878363f67b170693eec73a000000000000030071614ab7387d3356d277afd8d4161a42ba765075ba4b4dfc38534fc8caf868b5dd7c49f5f81a9527487e9ea917792e8298a5cc76efa1252f55"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 132.923223] binder: 11368:11374 ioctl c0306201 2000dfd0 returned -11 [ 132.931929] binder: BINDER_SET_CONTEXT_MGR already set [ 132.937527] binder: 11368:11374 ioctl 40046207 0 returned -16 [ 132.942526] binder: 11368:11375 ioctl c0306201 2000dfd0 returned -11 01:12:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x3, 0x8000, 0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f0000000280)=[@exit_looper={0x630d}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000000), &(0x7f0000000080)=[0x28, 0x38, 0x38, 0x40]}, 0x6}}, @release={0x40046306, 0x4}, @free_buffer={0x40086303, r3}, @register_looper={0x630b}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x60, 0x50, &(0x7f0000000180)=[@ptr={0x70742a85, 0x1, &(0x7f0000000100), 0x1, 0x3, 0x14}, @fda={0x66646185, 0x8, 0x0, 0x15}, @flat={0x95075f3533f418e8, 0x10a, r4, 0x4}], &(0x7f0000000200)=[0x48, 0x20, 0x78, 0x38, 0x18, 0x70, 0x48, 0x30, 0x20, 0x20]}, 0xb8}}], 0x6e, 0x0, &(0x7f0000000340)="6bef29e15ebfebcec9147394d1196a7f40c0c261cb39a18e50ce8a08031aa325261f9fc0d014839daaf899d1b71f1f166848f0ae83e51750f66256c1f53c8f22c70e48ef5c0cc0541e447abb9633c07fd13d2992dea0166f6324ccac51ea42219c91bb045cec30a11371654c2c82"}) [ 133.082845] binder: 11382:11384 unknown command 50331648 [ 133.088506] binder: 11382:11384 ioctl c0306201 20012000 returned -22 [ 133.101520] binder: 11382:11384 ioctl c0306201 2000dfd0 returned -11 [ 133.116765] binder: 11382:11386 unknown command 50331648 [ 133.122546] binder: 11382:11386 ioctl c0306201 20012000 returned -22 01:12:00 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:12:00 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 133.255277] binder: 11396:11400 unknown command 0 [ 133.273922] binder: 11396:11400 ioctl c0306201 2000dfd0 returned -22 [ 133.298935] binder: 11396:11406 tried to acquire reference to desc 0, got 1 instead [ 133.312407] binder: 11396:11406 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:12:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x49) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:00 executing program 2: mkdir(&(0x7f0000001300)='./file0\x00', 0x191) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x0, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x8000, &(0x7f0000000480)={[{@uid={'uid', 0x3d, [0x34]}, 0x2c}]}) 01:12:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000100)={{0x22, 0x1}, 'port0\x00', 0x48, 0x10000, 0x1000, 0x1ff, 0x3, 0xcea, 0x0, 0x0, 0x3, 0xc19b}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) 01:12:01 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x2000000, 0x0, &(0x7f0000000040)) 01:12:01 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) userfaultfd(0x0) socket$inet_sctp(0x2, 0x1, 0x84) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:01 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:12:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = shmget(0x3, 0x3000, 0x1504, &(0x7f0000015000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/81) r2 = dup2(r0, r0) ioctl$KDSKBLED(r2, 0x4b65, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="f20f2d7e00c4e3bd40ce630f07f7cd0c000000660f01c90ff8cd0fc7588ab8ad6e00000f23d80f21f835000000c00f23f8c4e3cd6971f500f20f08", 0x3b}], 0x1, 0x0, &(0x7f0000000000)=[@dstype0={0x6, 0x6}, @cstype3={0x5, 0x1}], 0xffffead) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x7) [ 134.149430] binder: BINDER_SET_CONTEXT_MGR already set [ 134.154969] binder: 11441:11443 ioctl 40046207 0 returned -16 [ 134.172810] binder: BINDER_SET_CONTEXT_MGR already set [ 134.178439] binder: 11439:11447 ioctl 40046207 0 returned -16 01:12:01 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x4000000, 0x0, &(0x7f0000000040)) 01:12:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:01 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:12:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 134.193549] binder: 11439:11447 ioctl c0306201 2000dfd0 returned -11 01:12:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r1 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffc) r2 = request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)='vboxnet0*+\x00', 0xfffffffffffffff8) keyctl$search(0xa, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, r2) fcntl$setflags(r0, 0x2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x60, &(0x7f0000000100)=ANY=[@ANYBLOB='raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00'], &(0x7f0000000040)=0x24) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x200001, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000380)) 01:12:01 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x4, 0x0, &(0x7f0000000040)) 01:12:01 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x6400, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x9, 0x8, 0x7fff, 0x3f08000000000}, 0x8) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 134.418410] binder: 11461:11467 unknown command 536907575 [ 134.426863] binder: 11461:11467 ioctl c0306201 20008fd0 returned -22 [ 134.452750] binder: 11465:11469 unknown command 536907575 [ 134.458789] binder: 11465:11469 ioctl c0306201 20008fd0 returned -22 [ 134.623354] binder: 11477:11482 unknown command 536907575 [ 134.635079] binder: 11477:11482 ioctl c0306201 20008fd0 returned -22 01:12:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x100000000000000) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:02 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:12:02 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:02 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0xc0, 0x0, &(0x7f0000000040)) 01:12:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x600, 0x70bd29, 0x25dfdbff, {0x4}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:02 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000bfcffc), &(0x7f0000000000)=0x4) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r0, r2}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000001c0)={r3, 0x0, 0x4000000000010000, 0x4, 0x100000000}) r4 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x0, &(0x7f0000000080)=""/59) 01:12:02 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) userfaultfd(0x0) socket$inet_sctp(0x2, 0x1, 0x84) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:02 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x13, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:12:02 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x100000000000000, 0x0, &(0x7f0000000040)) 01:12:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e620c4000040000"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:02 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000040)="b873608488345c6953cf1d711700bc2e885409bdaff00a6e072018fb77e231d7d7893785b3b33395413fdf8c9a601e6ea74d30529c4bcbaef3a85e57428206faf4eb622f09e81da1a5234a9fe393d550eedbaae6aea52202f9305263bd4c6edc989971fcbc9a9fe819f28175a7481717c09bd65dacb66d1e11565d4e3718d2cad75ee0f7aeff0e555590485802b14ca1dd46904ebb88e7d1a5f6f0fbef91911adb1069b80805269c794d991cd406c33af5f9bccd7e9e1acf573fc7ae80c29dbd271b784acd973dbb") [ 135.343803] binder: BINDER_SET_CONTEXT_MGR already set [ 135.350998] binder: 11500:11511 ioctl 40046207 0 returned -16 [ 135.358390] binder: 11500:11511 Acquire 1 refcount change on invalid ref 0 ret -22 [ 135.367745] binder: 11500:11511 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 135.376006] binder: 11500:11511 ioctl c0306201 2000dfd0 returned -11 01:12:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:12:02 executing program 6: socketpair(0x2, 0x1, 0x80000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x80000) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x3, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="116348400000000000000000040019000000000000000000110000000000000000000000000000000000080000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000018000000000000003800000000000000"], @ANYBLOB="0400000000000000"], 0xfe7a, 0x0, &(0x7f0000000140)}) [ 135.414979] binder: 11500:11511 unknown command 536907575 [ 135.426065] binder: 11500:11511 ioctl c0306201 20008fd0 returned -22 01:12:02 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'vcan0\x00', 'bridge0\x00', 'sit0\x00', 'team0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x1d8, 0x1d8, 0x210, [@comment={'comment\x00', 0x100}, @statistic={'statistic\x00', 0x18}]}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}}, {{{0x7, 0x0, 0x0, 'team_slave_1\x00', 'irlan0\x00', 'irlan0\x00', 'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2}, [], @random="f646793b7b39", [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x3c0) 01:12:02 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0xc000000000000000, 0x0, &(0x7f0000000040)) [ 135.601794] binder: 11524:11529 unknown command 1074553358 [ 135.619153] binder: 11524:11529 ioctl c0306201 20008fd0 returned -22 [ 135.633299] binder: 11524:11529 ioctl c0306201 2000dfd0 returned -11 [ 135.640158] binder: 11530:11533 transaction failed 29189/-22, size 2251799813685248-137438953472 line 2852 [ 135.648889] binder: 11524:11534 unknown command 1074553358 [ 135.656496] binder: 11524:11534 ioctl c0306201 20008fd0 returned -22 [ 135.657133] binder: 11530:11533 unknown command 536871232 [ 135.670844] binder: 11530:11535 transaction failed 29189/-22, size 2251799813685248-137438953472 line 2852 [ 135.676130] binder: 11530:11533 ioctl c0306201 20008fd0 returned -22 01:12:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x4900000000000000) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:12:03 executing program 2: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0xa4b, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000200)="050100000500000000001e00ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e7725f58a55afce0b86f61f7402810c3aae5dafadc57d0f699e3014e1e17b85812f29508c008e26575efe5eb24bdba7eac1bcd4f8ff185bd1f8affe65972ea77ef356844", 0x6e, 0x0, &(0x7f0000000000)={0xa, 0x100200000800, 0x8000000000005, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x400000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000100)={0x80, 0x7fffffff, 0x6}) 01:12:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0563044900000000002593537bf21facf5da7fb24d6dadca9d6e7e0c7f9836f9033f9f8d75d1ef5ade5decc66a5262d00ea9684c5d355b06cd99391739713bebaa85d6f29b4c5d2385112fc3509162697eabc5462d300832711b496f89b777fc03237cd147e75d4dfaa1d0dbca4ed86981160a07fddfe99fe0ceffffffff00000000f236960446f2c10615936d99dda4d79c9d3e32fe1924e24d8b7f336f58da9b23e12d22"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB='\f#\x00\x00'], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:03 executing program 6: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$midi(&(0x7f0000000480)='/dev/midi#\x00', 0x200003f, 0x82) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000001c0)=0x7) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000280)=0x54) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f00000002c0)=[@exit_looper={0x630d}], 0x1a, 0x0, &(0x7f0000000300)="979c8c2b725c8a237eeb51e00f7fb41f711bc0b64f4dfb7bdc4a"}) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ftruncate(r1, 0xffffffffffffff46) close(r2) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x100, 0x50) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f00000000c0)={{0x7f, 0x4}, 'port0\x00', 0x44, 0x1000, 0x400, 0x0, 0x4, 0x3, 0x1, 0x0, 0x2}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x620000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, r4, 0x208, 0x70bd2b, 0x25dfdbfd, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x805}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e98b23a40600007881133197bfc3e5c4ca78c603e66ea65c318187aa79334f98f91ecfa83e73113405762feee5ab974ae9aa21eee4ffcdb8cbc11ea4bf938a"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0xff}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000400)={r5, 0x8, 0x7, 0x3, 0x4}, 0x14) 01:12:03 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0xffffffff00000000, 0x0, &(0x7f0000000040)) 01:12:03 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:03 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) userfaultfd(0x0) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:03 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 136.992247] binder: 11562:11566 unknown command 1225024261 [ 137.001774] binder: 11562:11566 ioctl c0306201 20012000 returned -22 [ 137.008775] binder: 11561:11568 unknown command -1541174295 [ 137.024110] binder: 11561:11568 ioctl c0306201 20008fd0 returned -22 [ 137.032585] binder: 11562:11566 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:12:03 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x400000000000000, 0x0, &(0x7f0000000040)) 01:12:04 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 137.038363] binder: 11561:11568 ioctl c0306201 2000dfd0 returned -11 [ 137.043625] binder: 11562:11566 unknown command 8972 [ 137.050817] binder: 11561:11568 Acquire 1 refcount change on invalid ref 0 ret -22 [ 137.051782] binder: 11562:11566 ioctl c0306201 2000dfd0 returned -22 [ 137.065267] binder: 11561:11572 unknown command -1541174295 [ 137.069854] binder: 11562:11566 unknown command 1225024261 [ 137.072748] binder: 11561:11572 ioctl c0306201 20008fd0 returned -22 [ 137.078688] binder: 11562:11566 ioctl c0306201 20012000 returned -22 01:12:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@local={0xfe, 0x80, [], 0xaa}, 0x933, 0xe19daf9bb5409e1d, 0x0, 0x6, 0x9, 0x6, 0xffffffffffffff81}, &(0x7f00000000c0)=0x20) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101800, 0x0) ioctl(r0, 0x4000008913, &(0x7f0000000000)='0') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630e}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 01:12:04 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630c6c544afcb993ffff000000e0fb590d1b9ea175ff314481330f7e0080b4ebc326bfdb6bd97798bbd30584b032ae8c2314ca110b64fe6f44fa15a107bdbba97766f47e63348d22f99585dfb9557289ca6c48e1c311d79122625229becb234fba251b4992d6c9a3038d1a7a6bf9854b12f96e085eacc100090000000020000010d8556f168d0f22ac67146029b6d84b8308b134fd90a1e97402e467678dcf44dbbea450b9d6f33e88266699bafb97ff4e4beebc60c19032cab7243a0000000000"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 137.085814] binder: 11561:11568 ioctl c0306201 2000dfd0 returned -11 [ 137.093511] binder: 11562:11574 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:12:04 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x300, 0x0, &(0x7f0000000040)) 01:12:04 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 137.344601] binder: 11580:11590 ioctl 8913 20000000 returned -22 [ 137.356430] binder: 11580:11590 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 137.369628] binder: 11585:11592 unknown command 1812751118 [ 137.375254] binder_alloc: 11585: binder_alloc_buf, no vma [ 137.375563] binder: 11585:11592 ioctl c0306201 20008fd0 returned -22 [ 137.382295] binder: 11580:11590 transaction failed 29189/-3, size 0-0 line 2967 [ 137.388813] binder: 11585:11592 ioctl c0306201 2000dfd0 returned -11 [ 137.403214] binder: 11587:11593 Acquire 1 refcount change on invalid ref 0 ret -22 [ 137.410476] binder: 11580:11594 ioctl 8913 20000000 returned -22 [ 137.414320] binder: 11585:11592 unknown command 1812751118 [ 137.423558] binder: BINDER_SET_CONTEXT_MGR already set [ 137.429901] binder: 11587:11593 ioctl 40046207 0 returned -16 [ 137.435928] binder: 11585:11592 ioctl c0306201 20008fd0 returned -22 [ 137.440229] binder: undelivered TRANSACTION_ERROR: 29189 [ 137.442974] binder: 11587:11597 Acquire 1 refcount change on invalid ref 0 ret -22 01:12:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x1000000) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:04 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000140)={0x0, 0x1c9c380}) 01:12:04 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500fdbb0429b1000000000000"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080)=0x2, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), 0x484, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x2da, 0x0, &(0x7f000000cf68), 0xfffffffffffffe53, 0x0, &(0x7f0000008f37)="c2"}) socket$nl_xfrm(0x10, 0x3, 0x6) 01:12:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x3, 0x1, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000240)={'veth1_to_team\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r2, 0x300, 0x70bd29, 0x25dfdbff, {0x1}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4}}, {0x8, 0x6, r5}}}]}}]}, 0xa4}, 0x1}, 0x4) ioctl$KVM_NMI(r1, 0xae9a) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:04 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0xc000, 0x0, &(0x7f0000000040)) [ 137.701591] binder: 11609:11612 unknown command -1141047291 [ 137.710122] binder: BINDER_SET_CONTEXT_MGR already set [ 137.717135] binder: 11609:11612 ioctl c0306201 20012000 returned -22 [ 137.720113] binder: 11608:11614 ioctl 40046207 0 returned -16 [ 137.725289] binder: 11609:11612 ioctl c0306201 20000100 returned -11 [ 137.737848] binder: 11608:11614 Acquire 1 refcount change on invalid ref 0 ret -22 [ 137.739455] binder: 11609:11612 unknown command -1141047291 [ 137.752198] binder: 11609:11612 ioctl c0306201 20012000 returned -22 [ 137.754379] binder: 11608:11614 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 137.769952] binder: 11609:11612 ioctl c0306201 20000100 returned -11 [ 137.771479] binder: 11608:11614 ioctl c0306201 2000dfd0 returned -11 [ 137.801039] binder: 11608:11614 unknown command 536907575 [ 137.808383] binder: 11608:11614 ioctl c0306201 20008fd0 returned -22 01:12:05 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x2, 0x0, &(0x7f0000000040)) 01:12:05 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:12:05 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x400000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:05 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:05 executing program 2: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) 01:12:05 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="f645dbdc3a00"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) fcntl$getflags(r0, 0x3) [ 138.840376] binder: 11637:11644 unknown command -589609482 [ 138.848654] binder: 11637:11644 ioctl c0306201 20012000 returned -22 [ 138.855417] binder: BINDER_SET_CONTEXT_MGR already set [ 138.859906] binder: 11637:11644 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 138.868971] binder: 11637:11644 ioctl c0306201 2000dfd0 returned -11 [ 138.878619] binder: 11637:11644 unknown command -589609482 01:12:05 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x3000000, 0x0, &(0x7f0000000040)) 01:12:05 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 138.885203] binder: 11637:11644 ioctl c0306201 20012000 returned -22 [ 138.894677] binder: 11636:11645 ioctl 40046207 0 returned -16 [ 138.901889] audit: type=1326 audit(1529457125.859:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11638 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455b29 code=0xffff0000 [ 138.902556] binder: 11637:11648 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 138.927319] binder: 11636:11645 Acquire 1 refcount change on invalid ref 0 ret -22 01:12:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x242, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/162) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000080)=0x1f24, 0x4) 01:12:05 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x49000000) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:05 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = semget$private(0x0, 0x0, 0x8) semctl$IPC_INFO(r2, 0x7, 0x3, &(0x7f0000000080)=""/174) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB="0c630a05"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 138.931534] binder: 11637:11644 ioctl c0306201 2000dfd0 returned -11 [ 138.937540] binder: 11636:11645 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 138.966237] binder: 11636:11645 ioctl c0306201 2000dfd0 returned -11 [ 138.978240] binder: 11636:11645 unknown command 536907575 [ 138.984172] binder: 11636:11645 ioctl c0306201 20008fd0 returned -22 01:12:06 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0xc0000000, 0x0, &(0x7f0000000040)) 01:12:06 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 139.165706] Unknown ioctl 19465 [ 139.174162] Unknown ioctl -2147203708 [ 139.181461] Unknown ioctl 19465 [ 139.190289] Unknown ioctl -2147203708 [ 139.203759] binder: 11666:11668 unknown command 84566796 01:12:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0529050000008040"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x558, 0x358, 0x140, 0x140, 0x470, 0x470, 0x470, 0x4, &(0x7f0000000000), {[{{@arp={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0xff000000, 0xff, @empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, 0x174, 0x0, 0x4, 0xdc, 0x7f, 0x10000, 'veth1\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x0, 0x6}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1=0xe0000001, 0x4, 0x1}}}, {{@arp={@local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}, 0xffffffff, 0x0, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xe8ca7141b493cddf, 0xff, 0x0, 0xff]}, 0x200, 0x0, 0x1, 0x3ff, 0x2, 0x9, 'irlan0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x60}, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x24e1, 'system_u:object_r:modules_object_t:s0\x00'}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x6}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x5a8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x80000000, 0x7, 0x1, 0x500, 0xfffffffffffffffd, 0x40000, r4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000080)={0x4, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:06 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000a, 0xfffffffffffffff9, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0xfffffffffffffdc7, 0x0, &(0x7f0000000080), 0x275, 0x0, &(0x7f0000008f37)="c2"}) [ 139.212392] binder: 11666:11668 ioctl c0306201 2000dfd0 returned -22 [ 139.225185] binder: 11666:11669 unknown command 84566796 [ 139.230902] binder: 11666:11669 ioctl c0306201 2000dfd0 returned -22 01:12:06 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0xfffffffe, 0x0, &(0x7f0000000040)) 01:12:06 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x2ff, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)='vboxnet0usersystemppp0vboxnet1em0em1]\x00', 0xffffffffffffffff) [ 139.364370] binder: 11675:11678 unknown command 338181 [ 139.369798] binder: 11675:11678 ioctl c0306201 20012000 returned -22 [ 139.379794] binder: 11675:11678 unknown command 0 [ 139.384929] binder: 11675:11678 ioctl c0306201 20008fd0 returned -22 [ 139.391902] binder: 11675:11678 ioctl c0306201 2000dfd0 returned -11 01:12:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) socket$inet6(0xa, 0x803, 0xd7f8d88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 139.410250] binder: 11675:11678 unknown command 338181 [ 139.416225] binder: 11675:11678 ioctl c0306201 20012000 returned -22 [ 139.425347] binder: 11675:11681 unknown command 536907575 [ 139.431230] binder: 11675:11681 ioctl c0306201 20008fd0 returned -22 [ 139.439228] binder: 11675:11681 ioctl c0306201 2000dfd0 returned -11 [ 139.466511] binder: 11679:11683 ioctl c0306201 2000dfd0 returned -11 [ 139.482642] binder: 11679:11683 ioctl c0306201 2000dfd0 returned -11 01:12:06 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x3, 0x0, &(0x7f0000000040)) 01:12:06 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) [ 139.638201] audit: type=1326 audit(1529457126.596:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11638 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455b29 code=0xffff0000 01:12:07 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:07 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x14, 0x80000) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback=0x7f000001, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e23, 0x0, 0x4e20, 0x7fc000000000000, 0xa, 0x80, 0x0, 0x3b, r2, r3}, {0x8, 0x5, 0x8, 0x0, 0x893, 0x9, 0x10000, 0x7f}, {0x8, 0x72, 0x30000000, 0x8}, 0xb6c, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4d3}, 0xa, @in=@multicast2=0xe0000002, 0x3501, 0x4, 0x3, 0x101, 0x8001, 0x2, 0x4}}, 0xe8) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x401, 0x240) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000140)={@ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x14) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r5 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$FICLONE(r5, 0x40049409, r5) close(r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x269, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f630c40010000000400000000000000076304400100000003630840", @ANYRES64=r6, @ANYBLOB="046304400200000000634040000000000000000000000000000000000000000000000000000000000000000040000000000000001800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000001000000000000000100000000000000852a62770b010000", @ANYRES64=r6, @ANYBLOB="0300000000000000"], @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="20000000001300fa2f00e4ffffff0000380000000000b800"], @ANYBLOB="03630840", @ANYRES64=r6, @ANYBLOB="08631040", @ANYRES64=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x69, 0x0, &(0x7f00000009c0)="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"}) 01:12:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000080)='./file0\x00', 0xf020, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9522a00bf56248490c3378d1281e5a12086e992e3b01826ca253968b545bccc88fd9bd5305e0861c32ea16aaa67c0802f04a7dc2b3b626d2"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB="96630100"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:07 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@remote={0xfe, 0x80, [], 0xbb}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000280)=0x5e, 0xffffff46) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f00000000c0)={@multicast1, @broadcast, @broadcast}, &(0x7f0000000100)=0xc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000080)="2957e1311f16f477671070") socket$netlink(0x10, 0x3, 0x8000000004) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYRES16], 0x100c6) 01:12:07 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0xfeffffff00000000, 0x0, &(0x7f0000000040)) 01:12:07 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x2ff, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'irlan0\x00'}, 0x18) 01:12:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x4900) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:07 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x200000000000000, 0x0, &(0x7f0000000040)) 01:12:07 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) [ 140.645690] binder: 11720:11725 unknown command 195043989 [ 140.648402] binder: 11717:11727 Acquire 1 refcount change on invalid ref 0 ret -22 [ 140.672465] binder: 11720:11725 ioctl c0306201 20008fd0 returned -22 [ 140.687806] binder: 11717:11727 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 140.694864] binder: 11717:11727 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 140.699383] binder: 11720:11725 unknown command 91030 [ 140.703072] binder: 11717:11727 BC_FREE_BUFFER uffffffffffffffff no match [ 140.708917] binder: 11720:11725 ioctl c0306201 2000dfd0 returned -22 [ 140.715059] binder: 11717:11727 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 140.727829] binder: 11720:11731 unknown command 195043989 [ 140.729773] binder: 11717:11727 transaction failed 29189/-22, size 64-24 line 2852 01:12:07 executing program 2: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x2, 0x2ff, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 01:12:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000680)=0x5, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x14) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x1a8010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x14, 0x0, &(0x7f0000000640)=[@increfs_done={0x40106308, r3}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000000100)="c0"}) getpid() readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/181, 0xb5}, {&(0x7f0000000200)=""/172, 0xac}, {&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000300)=""/187, 0xbb}, {&(0x7f00000003c0)=""/151, 0x97}, {&(0x7f0000000480)=""/95, 0x5f}, {&(0x7f0000000500)=""/152, 0x98}], 0x7) [ 140.735279] binder: 11720:11731 ioctl c0306201 20008fd0 returned -22 [ 140.753216] binder: 11717:11732 Acquire 1 refcount change on invalid ref 0 ret -22 [ 140.765342] binder: 11717:11732 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 140.772694] binder: 11717:11732 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 140.781175] binder: 11717:11732 BC_FREE_BUFFER uffffffffffffffff no match [ 140.788364] binder: 11717:11732 IncRefs 0 refcount change on invalid ref 2 ret -22 01:12:07 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = gettid() ptrace$getenv(0x4201, r1, 0x81, &(0x7f0000000000)) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 140.797159] binder: 11717:11732 transaction failed 29189/-22, size 64-24 line 2852 01:12:07 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x300000000000000, 0x0, &(0x7f0000000040)) 01:12:07 executing program 5: semop(0x0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x10) 01:12:07 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x6002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) pread64(r1, &(0x7f0000000100)=""/204, 0xcc, 0x0) [ 140.992238] binder: BINDER_SET_CONTEXT_MGR already set [ 140.999402] binder: 11743:11750 ioctl 40046207 0 returned -16 [ 141.040593] binder: BINDER_SET_CONTEXT_MGR already set [ 141.046447] binder: 11749:11753 ioctl 40046207 0 returned -16 01:12:09 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x1000000, 0x0, &(0x7f0000000040)) 01:12:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xc}) 01:12:09 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:09 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$int_in(r1, 0x0, &(0x7f0000000000)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:09 executing program 5: semop(0x0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x10) 01:12:09 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x10000000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 01:12:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={"626f6e645f733da976655f30001f00", 0x0}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) 01:12:09 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x6002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) pread64(r1, &(0x7f0000000100)=""/204, 0xcc, 0x0) 01:12:09 executing program 5: semop(0x0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x10) 01:12:09 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x1000000000000, 0x0, &(0x7f0000000040)) 01:12:09 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x6, 0x209e20, 0x8000000001}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000280), &(0x7f0000000300)}, 0x20) 01:12:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="75803b430b8e50bc82b550eb2899936399112efe1000"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000002006b0c5446469fe1dd5e2c8a83f4c507e3f5d58ce4f6d1e6391bacae72734f757a2e0974c5903904edc62881ecb2013397a1ec896544fee7fccbeb7b064befa44f1863fe251ed518e6eabae97b4ca7fd9fdf7386f1c012537ab7763feae1da000e1ba55e408a6ac57be7b6807dabbdb7dcb265850c88"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 142.423073] binder: 11788:11793 ioctl 0 20000000 returned -22 [ 142.461557] binder: 11788:11793 ioctl 0 20000000 returned -22 01:12:09 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000002c0)) r2 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0xfffffffffffffd2a, 0x0, &(0x7f0000000000), 0x264, 0x0, &(0x7f0000000080)}) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/212, 0xd4}], 0x4, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 142.663457] binder: 11811:11812 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 142.673645] binder: 11809:11814 unknown command 1127972981 01:12:09 executing program 5: r0 = semget$private(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) [ 142.704208] binder: 11809:11814 ioctl c0306201 20012000 returned -22 [ 142.724456] binder: 11811:11812 ioctl c0306201 20000080 returned -11 [ 142.734450] binder: 11809:11814 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 142.748963] binder: BINDER_SET_CONTEXT_MGR already set 01:12:09 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0xfeffffff, 0x0, &(0x7f0000000040)) 01:12:09 executing program 7: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000004200170f000000000000000000000000ea799c78c7c1edb88416b7332fc7743964351bdd786346fe2f5e42365a83d262a7e0d622e469b642c2b51951715c2bbaafd44f5902523fcf7c233360217c21a1e005b39f7bbfd06ee9bbf5d90209610fa571a776caf10e39a6f6385f4b02ed60b6dc93c9b8f9f95c7f906749"], 0x1}, 0x1}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001200010300000000000000000a72633332000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7565b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}, 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000440)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/174, 0xae}, {&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000580)=""/35, 0x23}, {&(0x7f00000005c0)=""/25, 0x19}, {&(0x7f0000000600)=""/40, 0x28}, {&(0x7f0000000640)=""/230, 0xe6}], 0x6}, 0xb3b6612746267a18) [ 142.757057] binder: 11809:11814 unknown command 131072 [ 142.768465] binder: 11811:11812 ioctl 40046207 0 returned -16 [ 142.775341] binder: 11809:11814 ioctl c0306201 2000dfd0 returned -22 [ 142.785417] binder: 11809:11819 unknown command 1127972981 [ 142.791647] binder: 11809:11819 ioctl c0306201 20012000 returned -22 [ 142.800859] binder: 11811:11817 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 142.814552] binder: 11809:11814 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:12:09 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8), 0x169, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$sock_bt_hci(r3, 0xc00448f7, &(0x7f00000001c0)="8a0df27e6cb800fed2c6c47c1c2674556ed468cd9c42cd4bd186353d10e11314db96ecc3c1da2eb20734eb7336ba5e3d45085c9a21c2a4ef80e5a698fbe1fbe9a439e75b96fd531b48c0fea4d0e24c6819418a286ec634dc42ec6a7161c3d3bd19c810ab5cc7a976cbbf5be37463138169630efeb27751ce5d1869a695e426edd49119a446edae0bd7a83af55939779a79f5c952d9f169bf041d843c45855ed20756d89a5dc1febb806768aaf1c5df0cc92ef6560846e8d2ed0e46b382c938fb074b625e334b4338c8489b90cf2e40e49a51a11b988ffdd6dda7f4d15d5669aa06e0584d6933e9d6de025b78c357dcee") r4 = syz_open_procfs(r2, &(0x7f0000000180)='net/icmp\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) fcntl$addseals(r4, 0x409, 0xf) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 143.053857] binder: 11831:11834 Acquire 1 refcount change on invalid ref 0 ret -22 [ 143.063204] binder: 11831:11834 unknown command 0 [ 143.068355] binder: 11831:11834 ioctl c0306201 20008fd0 returned -22 [ 143.076530] binder: 11831:11834 ioctl c0306201 2000dfd0 returned -11 [ 143.094599] binder: 11831:11834 Acquire 1 refcount change on invalid ref 0 ret -22 [ 143.108508] binder: 11831:11834 unknown command 536907575 [ 143.114565] binder: 11831:11834 ioctl c0306201 20008fd0 returned -22 01:12:10 executing program 2: clone(0x8200, &(0x7f0000000800), &(0x7f0000000500), &(0x7f00000007c0), &(0x7f00000001c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000440)) r0 = getpid() sched_setaffinity(r0, 0x6, &(0x7f0000000080)=0xb4a2) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') pread64(r1, &(0x7f0000001980)=""/4096, 0x1389, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000280), 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) 01:12:10 executing program 5: r0 = semget$private(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:10 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x200000000000000, &(0x7f0000000040)) 01:12:10 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000080)=""/223, &(0x7f0000000180)=0xdf) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000000)={0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:10 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:10 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) 01:12:11 executing program 5: r0 = semget$private(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:11 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x4000000, &(0x7f0000000040)) [ 144.099573] binder: BINDER_SET_CONTEXT_MGR already set [ 144.108848] binder: 11851:11862 unknown command 536907575 [ 144.113131] binder: 11850:11863 ioctl 40046207 0 returned -16 [ 144.116579] binder: 11851:11862 ioctl c0306201 20008fd0 returned -22 [ 144.131808] binder: 11850:11866 Acquire 1 refcount change on invalid ref 0 ret -22 01:12:11 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e080c4000000200a6bd88441cceb2562c380cb9a84d9d3a869e5b7af26568c223bb1221db4ef4b0af4a4b5283a53579c6ec45b2d634312574c0823fb359812ee5deee4242904975c7bb3960a1bab410b8a38b235ec48991a33d2cb65256dc4e01ce713fdaaf86ce0833898261ee3376ef5a864b149d5b633a46a2b2099c89efeba1941140ee178e9b3b8a4de58c2070748dd0d8743653fbcbd899b0120282ca84a97bd810bc2d6d5fb6c52fa69f0e84fa43e592"], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = memfd_create(&(0x7f0000000000)='/dev/binder#\x00', 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x9, 0x0, [{0x951, 0x0, 0xac}, {0xfff, 0x0, 0x10001}, {0x400000b0, 0x0, 0x4f1}, {0xbfb, 0x0, 0x863}, {0xa39, 0x0, 0xffff}, {0xbff, 0x0, 0x2a6a}, {0x34b, 0x0, 0xb26}, {0x385, 0x0, 0x81}, {0xada, 0x0, 0x1}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:11 executing program 7: fcntl$getown(0xffffffffffffff9c, 0x9) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa}, 0x1c) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x2ff, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 01:12:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="63043b95cc973cf34047967696ab22564000000000"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="30b2f269e7e656af7dbcbe2eb402df71a2aa7aed42c3e9430d089800769baf68a25f0ecbc2fe3bcb8b4c38088655762114c211a1379f5f8f364ea1516527eb0223b8d948cef5794b9d8d2b4364af47b16ab60c5bef0348efc8944b57ac691f544de235490228230d677a4d46"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 144.147062] binder: 11850:11866 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 144.156290] binder: 11850:11866 ioctl c0306201 2000dfd0 returned -11 01:12:11 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(0x0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:11 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x1000000, &(0x7f0000000040)) [ 144.359202] binder: BINDER_SET_CONTEXT_MGR already set [ 144.362274] binder: 11883:11885 unknown command -1791294365 [ 144.364788] binder: 11882:11886 ioctl 40046207 0 returned -16 [ 144.371050] binder: 11883:11885 ioctl c0306201 20012000 returned -22 [ 144.382047] binder: 11882:11886 unknown command 1074530318 [ 144.388969] binder: 11883:11885 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 144.389270] binder: 11882:11886 ioctl c0306201 20008fd0 returned -22 [ 144.396658] binder: 11883:11885 unknown command 1777513008 01:12:11 executing program 7: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) [ 144.409414] binder: 11883:11885 ioctl c0306201 2000dfd0 returned -22 [ 144.419018] binder: 11882:11886 ioctl c0306201 2000dfd0 returned -11 [ 144.419286] binder: 11883:11885 unknown command -1791294365 [ 144.432523] binder: 11883:11885 ioctl c0306201 20012000 returned -22 [ 144.438388] binder: 11882:11886 unknown command 1074530318 [ 144.440925] binder: 11883:11890 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 144.445854] binder: 11882:11886 ioctl c0306201 20008fd0 returned -22 [ 144.453566] binder: 11883:11885 unknown command 1777513008 [ 144.467147] binder: 11883:11885 ioctl c0306201 2000dfd0 returned -22 01:12:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@exit_looper={0x630d}, @register_looper={0x630b}], 0xcb, 0x0, &(0x7f0000000100)="807c5f698e835d771d84a139ef45816a03c01c2d8c8e7ee3c6bbc84d4630fae6a234b0f73ff167a80dec5803c5bc6bb1ec8b7ef52c2bacbef9c514e4d8e5ffb06a47d4cb28667702f4b4dbb37ff10f36e6a0de3340e19051ed6d2ecded92253c16384d54f43662988f6850580415ea8148c887d0e1ecf9d641bb2535fe5911e0ce3e5139fd195c496a30e71fcd2c6679304000c3e494d7a80f31e19ab1c4bd885d737a0749c01b37b2660541025b6047dfe119e0d3dd97ea85bd0a7a9074a58ff334cb05f6d634328e537a"}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:11 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0xfffffffffffffe3c, 0x0, &(0x7f0000000080)="fe47668ef21ac5e7fc7cca6ea4d2e06914b00fd62078793ecda3667548709d5c63bc1eaac84b634e81b291a8deb2a6bc2946b4ecaa239286a3d1945db86a668c04bc5e86f3ef989b0a6efc13a0303f240381a4bc22"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:11 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(0x0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:11 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x3, &(0x7f0000000040)) 01:12:11 executing program 2: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x2, 0x2ff, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) [ 144.934411] binder: 11910:11914 ioctl c0306201 2000dfd0 returned -11 [ 144.942324] binder: 11909:11915 ERROR: BC_REGISTER_LOOPER called without request [ 144.951963] binder: BINDER_SET_CONTEXT_MGR already set [ 144.959546] binder: 11910:11914 ioctl 40046207 0 returned -16 01:12:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) socket$key(0xf, 0x3, 0x2) 01:12:12 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(0x0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:12 executing program 7: r0 = memfd_create(&(0x7f0000000180)='#em1#+\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}) 01:12:12 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x100000000000000, &(0x7f0000000040)) 01:12:12 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) pipe(&(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB="ffffffff"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:12 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000080)=""/223, &(0x7f0000000180)=0xdf) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x410, 0x1a0, 0xd0, 0xffffffff, 0x270, 0x1a0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, &(0x7f0000000100), {[{{@ip={@broadcast=0xffffffff, @dev={0xac, 0x14, 0x14, 0x1d}, 0xffffff00, 0xffffffff, 'bcsf0\x00', 'eql\x00', {0xff}, {0xff}, 0x0, 0x2, 0x13}, 0x0, 0x98, 0xd0}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff, @gre_key=0x1, @icmp_id=0x67}}}}, {{@ip={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'veth0_to_bridge\x00', 'ip6gretap0\x00', {0xff}, {}, 0x5e}, 0x0, 0x98, 0xd0}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x7, @loopback=0x7f000001, @dev={0xac, 0x14, 0x14, 0x11}, @gre_key=0x2, @gre_key=0x1}}}}, {{@ip={@local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff, 0xffffffff, 0xffffffff, 'yam0\x00', 'bpq0\x00', {0xff}, {}, 0xff, 0x2, 0x8}, 0x0, 0x98, 0xd0}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @loopback=0x7f000001, @empty, @icmp_id=0x68, @gre_key=0x2}}}}, {{@ip={@loopback=0x7f000001, @rand_addr=0x2, 0xffffffff, 0xffffffff, 'bond0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@inet=@socket2={0x28, 'socket\x00', 0x2, 0x3}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}, @ipv6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @port=0x4e23, @gre_key=0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x470) [ 145.743493] binder: 11909:11932 ERROR: BC_REGISTER_LOOPER called without request [ 145.752579] binder: 11909:11932 tried to acquire reference to desc 0, got 1 instead [ 145.766995] binder: 11909:11915 unknown command 536907575 [ 145.772645] binder: 11909:11915 ioctl c0306201 20008fd0 returned -22 01:12:12 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{}], 0x1) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@exit_looper={0x630d}, @register_looper={0x630b}], 0xcb, 0x0, &(0x7f0000000100)="807c5f698e835d771d84a139ef45816a03c01c2d8c8e7ee3c6bbc84d4630fae6a234b0f73ff167a80dec5803c5bc6bb1ec8b7ef52c2bacbef9c514e4d8e5ffb06a47d4cb28667702f4b4dbb37ff10f36e6a0de3340e19051ed6d2ecded92253c16384d54f43662988f6850580415ea8148c887d0e1ecf9d641bb2535fe5911e0ce3e5139fd195c496a30e71fcd2c6679304000c3e494d7a80f31e19ab1c4bd885d737a0749c01b37b2660541025b6047dfe119e0d3dd97ea85bd0a7a9074a58ff334cb05f6d634328e537a"}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:12 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x300, &(0x7f0000000040)) [ 145.825440] binder: 11935:11939 unknown command -1 [ 145.838714] binder: 11935:11939 ioctl c0306201 2000dfd0 returned -22 01:12:12 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x1) 01:12:12 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40401, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e22, 0x4, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}}, [0x6, 0x3d, 0xc0000000000, 0x9, 0x7, 0xfffffffffffffffe, 0x100000000, 0x2, 0x6, 0x100, 0x2, 0x10000, 0x2f, 0x10001, 0x2]}, &(0x7f0000000300)=0x100) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000000000068b1d4369f1e9dff9458ee733c1ad09e652c313b2843061c2a212fcd63b7c685e8063c2e533f72b5986424cf7a6f22926667cf06facca02702457a2913bd4064e8999d46ecb11fd524af3d2a6b96618ec818e6175779080f5501d68fcc3ef1b4061fdde4dbc30afc922421b4acaceca1187dcb702373802d7185ffed8131a3acf147a486bbc9d22f1c7756b7b6b11b2be7a573c8607125ac4f2d9d"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:13 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0xc0, &(0x7f0000000040)) 01:12:13 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{}], 0x1) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) [ 146.065905] binder: 11957:11963 ERROR: BC_REGISTER_LOOPER called without request [ 146.085536] binder: BINDER_SET_CONTEXT_MGR already set [ 146.091454] binder: 11959:11964 ioctl 40046207 0 returned -16 [ 146.098844] binder: 11959:11964 ioctl c0306201 2000dfd0 returned -11 [ 146.105817] binder: 11959:11964 ioctl 400454d4 20000000 returned -22 01:12:13 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b2b002523343420b43263833f707f067aa767f3a3a10100e781cee5685f0a994be86724be77b5cd067bf3a8a9275c2197"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x8001, 0x1, 0x0, 0xfffffffffffff001, 0x0, 0x7, 0x4000, 0x4, 0x7ff, 0x6, 0x2, 0x8, 0xffffffffffffd71a, 0x80, 0x80, 0x21, 0x6, 0xffffffff, 0x52c2d6e2, 0xff, 0x4, 0x1000, 0x7, 0x8, 0x0, 0x2, 0x80, 0x7fffffff, 0x9, 0x2, 0x8, 0x4, 0x3, 0x7, 0xffff, 0x1000, 0x0, 0x7a, 0x1, @perf_config_ext={0x20, 0x5}, 0x20080, 0x4, 0xfffffffffffffffb, 0x2, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x2, 0xffffffffffffff9c, 0x1) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000100)) [ 146.113659] binder: BINDER_SET_CONTEXT_MGR already set [ 146.119182] binder: 11959:11964 ioctl 40046207 0 returned -16 [ 146.127125] binder: 11959:11964 unknown command 536907575 [ 146.133221] binder: 11959:11965 ioctl c0306201 2000dfd0 returned -11 [ 146.140458] binder: 11959:11964 ioctl c0306201 20008fd0 returned -22 [ 146.209576] binder: BINDER_SET_CONTEXT_MGR already set [ 146.222314] binder: 11967:11970 ioctl 40046207 0 returned -16 [ 146.241642] binder: 11967:11970 unknown command 9 [ 146.247833] binder: 11967:11970 ioctl c0306201 20012000 returned -22 [ 146.264708] binder: 11967:11970 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 146.274735] binder: 11967:11970 ioctl c0306201 2000dfd0 returned -11 [ 146.311561] binder: 11967:11977 unknown command 9 [ 146.323096] binder: 11967:11977 ioctl c0306201 20012000 returned -22 [ 146.330497] binder: BINDER_SET_CONTEXT_MGR already set [ 146.339179] binder: 11979:11980 ioctl 40046207 0 returned -16 [ 146.348530] binder: 11979:11980 unknown command 620768011 [ 146.354749] binder: 11979:11980 ioctl c0306201 2000dfd0 returned -22 01:12:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/86) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:13 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{}], 0x1) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) [ 146.362085] binder: 11967:11970 unknown command 536907575 [ 146.369112] binder: BINDER_SET_CONTEXT_MGR already set [ 146.374493] binder: 11967:11970 ioctl c0306201 20008fd0 returned -22 [ 146.381394] binder: 11979:11980 ioctl 40046207 0 returned -16 [ 146.401529] binder: 11979:11980 unknown command 536907575 [ 146.403591] binder: 11979:11981 unknown command 620768011 [ 146.411008] binder: 11979:11980 ioctl c0306201 20008fd0 returned -22 [ 146.420100] binder: 11979:11981 ioctl c0306201 2000dfd0 returned -22 01:12:13 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = semget$private(0x0, 0x0, 0x8) semctl$IPC_INFO(r2, 0x7, 0x3, &(0x7f0000000080)=""/174) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB="0c630a05"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:13 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x4, &(0x7f0000000040)) 01:12:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x40000003}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x100) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x5) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:13 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800000000000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630c5aae5e622dc32f76a301c84e4f905c2d44f11df3bde04000000000120e63cd23ebe76a5d0ec743bfbe05275326118d1f34b3c596716c43372a9a39b12afd279a6d5460eba82dd4344133dae46d039aceda7ed70478279650291e8a40849c7882e606acf083dc244007134cb61f2d23879795684ef86232c1738d5b7f2e4e087d00f5a7236c5f2d64cb41bce28fd8de5c214ec96268cf6bd53c62b307cd60e9058d"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB="0e630000"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:13 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:13 executing program 2: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x3, 0x0, &(0x7f0000000040)) 01:12:13 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:14 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0xfffffffe, &(0x7f0000000040)) 01:12:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x242, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/162) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000080)=0x1f24, 0x4) [ 147.073147] binder: BINDER_SET_CONTEXT_MGR already set [ 147.079267] binder: 11999:12009 ioctl 40046207 0 returned -16 [ 147.085564] binder: 12000:12007 unknown command 1510761230 [ 147.091864] binder: 12000:12007 ioctl c0306201 20008fd0 returned -22 [ 147.096540] binder: 11999:12009 Acquire 1 refcount change on invalid ref 0 ret -22 [ 147.099748] binder: 12000:12007 unknown command 25358 [ 147.108684] binder: 11999:12011 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:12:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0400000000000000"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000300)={0x33, 0xc000000000000000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8da2d621b8e1c69c, 0x0, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000300)}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000440)={0x0, 0xfffffffffffffffc}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r3, 0x8, 0x6}, &(0x7f0000000500)=0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c6300006fa3c2763c0394979a81b7a30b4e99725814da0cab2bbe8366b8d1da22bb684bf82b79b80d27aee4dac01a3692b5ee34a8feb3c4b4d97d0269896bea22f6f838bfbbe78ecc646e56df2ae3fb3b7d8f3031e8c644065014ab16bb3f6c694aea8f91de5335ad95f9ca6d3ebda6eed92b5f94390618d49f0d1a183844044ae41282de337017366107b495"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x7c, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x2}, @dead_binder_done={0x40086310, 0x3}, @decrefs={0x40046307, 0x4}, @acquire_done={0x40106309, r4, 0x3}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1}], &(0x7f0000000100)=[0x78, 0x28]}, 0x1ff}}], 0xc9, 0x0, &(0x7f00000001c0)="01f1f023b1cde44b799b867e6f55c8a6f693c3786cb365a7ba95281e06a522aa06a259337b7719ad979d0ac83d7900dd03434edbaf1127a65023ec8ebb2d6c1409a1c21e9fe8399961fea10f48437562d399b5e95d44c69627edc5e19b518e3c1fa35d0b13bfe9daf50904399e2c42c16a4115ea50e106588aa8b88a56d2dc04ffdbbe83fde239ef008bf84ca1d7be8ffdc1f87d62f33f298a4431b828eee9d78041e7f07f60f7515125242be7641c6b18d359d757182b141f23333af77440a1474c12e0c7a460cafa"}) 01:12:14 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 147.112279] binder: 12000:12007 ioctl c0306201 2000dfd0 returned -22 [ 147.132402] binder: 12000:12007 unknown command 1510761230 [ 147.137222] binder: 12000:12013 unknown command 25358 [ 147.141679] binder: 12000:12007 ioctl c0306201 20008fd0 returned -22 [ 147.144384] binder: 12000:12013 ioctl c0306201 2000dfd0 returned -22 01:12:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@local={0xfe, 0x80, [], 0xaa}, 0x933, 0xe19daf9bb5409e1d, 0x0, 0x6, 0x9, 0x6, 0xffffffffffffff81}, &(0x7f00000000c0)=0x20) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101800, 0x0) ioctl(r0, 0x4000008913, &(0x7f0000000000)='0') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630e}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) [ 147.274306] binder: 12014:12018 unknown command 84566796 [ 147.286263] binder: 12014:12018 ioctl c0306201 2000dfd0 returned -22 01:12:14 executing program 2 (fault-call:2 fault-nth:0): preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:12:14 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x2, &(0x7f0000000040)) [ 147.325368] Unknown ioctl 19465 [ 147.329066] binder: 12021:12027 unknown command 4 [ 147.336200] Unknown ioctl -2147203708 [ 147.342230] binder: 12021:12027 ioctl c0306201 20012000 returned -22 [ 147.359279] binder: 12021:12027 unknown command 0 [ 147.364549] binder: 12021:12027 ioctl c0306201 20008fd0 returned -22 [ 147.371933] binder: 12021:12027 ioctl c0306201 2000dfd0 returned -11 [ 147.379717] binder: 12021:12028 unknown command 4 [ 147.384863] binder: 12021:12028 ioctl c0306201 20012000 returned -22 [ 147.394696] binder: 12021:12028 unknown command 0 [ 147.399779] binder: 12021:12028 ioctl c0306201 20008fd0 returned -22 [ 147.417433] binder: 12024:12030 unknown command 536907575 [ 147.424458] binder: 12024:12030 ioctl c0306201 20008fd0 returned -22 [ 147.525956] binder: 12034:12035 ioctl 8913 20000000 returned -22 [ 147.544138] binder: 12034:12035 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 147.552285] binder: 12034:12035 transaction failed 29189/-22, size 0-0 line 2852 [ 147.586266] binder: undelivered TRANSACTION_ERROR: 29189 [ 147.593403] FAULT_INJECTION: forcing a failure. [ 147.593403] name failslab, interval 1, probability 0, space 0, times 0 [ 147.604703] CPU: 1 PID: 12043 Comm: syz-executor2 Not tainted 4.18.0-rc1+ #109 [ 147.612077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.621451] Call Trace: [ 147.624061] dump_stack+0x1c9/0x2b4 [ 147.627715] ? dump_stack_print_info.cold.2+0x52/0x52 [ 147.632919] ? debug_check_no_locks_freed+0x310/0x310 [ 147.638127] ? debug_check_no_locks_freed+0x310/0x310 [ 147.643347] should_fail.cold.4+0xa/0x1a [ 147.647436] ? graph_lock+0x170/0x170 [ 147.651266] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 147.656397] ? graph_lock+0x170/0x170 [ 147.660214] ? lock_acquire+0x1e4/0x540 [ 147.664190] ? __fdget_pos+0x1bb/0x200 [ 147.668077] ? graph_lock+0x170/0x170 [ 147.671875] ? find_held_lock+0x36/0x1c0 [ 147.675941] ? check_same_owner+0x340/0x340 [ 147.680259] ? rcu_note_context_switch+0x730/0x730 [ 147.685185] __should_failslab+0x124/0x180 [ 147.689419] should_failslab+0x9/0x14 [ 147.693220] __kmalloc+0x2c8/0x760 [ 147.696757] ? kasan_check_read+0x11/0x20 [ 147.700899] ? rw_copy_check_uvector+0x361/0x3e0 [ 147.705644] ? rcu_is_watching+0x8c/0x150 [ 147.709787] rw_copy_check_uvector+0x361/0x3e0 [ 147.714364] import_iovec+0xcf/0x470 [ 147.718065] ? dup_iter+0x270/0x270 [ 147.721688] ? expand_files.part.8+0x9c0/0x9c0 [ 147.726266] vfs_readv+0xf5/0x1c0 [ 147.729722] ? compat_rw_copy_check_uvector+0x440/0x440 [ 147.735097] ? __fget_light+0x2f7/0x440 [ 147.739066] ? fget_raw+0x20/0x20 [ 147.742519] ? __sb_end_write+0xac/0xe0 [ 147.746486] do_preadv+0x1cc/0x280 [ 147.750029] ? do_readv+0x310/0x310 [ 147.753664] ? __ia32_sys_read+0xb0/0xb0 [ 147.757739] __x64_sys_preadv+0x9a/0xf0 [ 147.761704] do_syscall_64+0x1b9/0x820 [ 147.765583] ? syscall_return_slowpath+0x5e0/0x5e0 [ 147.770512] ? syscall_return_slowpath+0x31d/0x5e0 [ 147.775437] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 147.780795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 147.785633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 147.790819] RIP: 0033:0x455b29 [ 147.793988] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 147.813184] RSP: 002b:00007f103d1e5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 147.820888] RAX: ffffffffffffffda RBX: 00007f103d1e66d4 RCX: 0000000000455b29 [ 147.828157] RDX: 10000000000002a1 RSI: 0000000020000480 RDI: 0000000000000013 01:12:14 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4c, 0x0, &(0x7f0000000200), 0xeb, 0x0, &(0x7f0000000380)="40236d746f0c81d7568af21f68233b9eda0b8951b6b8025fdd313ef6c1c9b19eb9ffaf6f7c96bd44db85cc62905f756f26f42a17684ca0ac0000005590d650e95868d0939879f51c7833608a232025e2c69ede6e3d50f8649758332cd18e013633be9884e16f1c5212f6e59c09544774f759a0aae37d7ddd202c61298677d66f01755a6fa50a3373054efcd94a471a97912f9e9ee8c8fb8a16d3d514214b1a398ed6aeb4e03191e5b77f630f79a0ff913a544102b234730ee76eb5961485b686c196c8"}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xffffffffffffffc1, 0x141000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000100)={0x2, 0x3, 'client0\x00', 0x1, "0267647f524895a3", "0c00c5f8175e337f643937b1180b3cc2143f6c24bc06eca93857d01a06ac0962", 0xffffffffffffff1f, 0x9}) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\nc\f@\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c6300493bdfcc867100"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/208, 0xd0}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000380)=""/33, 0x21}], 0x4, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) 01:12:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) getsockopt$inet6_int(r1, 0x29, 0x5b, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6(0xa, 0x3, 0x7fffffff) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:14 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000608ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = memfd_create(&(0x7f0000000000)='[keyringvmnet0wlan0cpuset$md5sum\x00', 0x3) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) tkill(r0, 0x4000000000012) r2 = epoll_create1(0x0) tkill(r0, 0x9) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, &(0x7f00009d2000), 0x8) 01:12:14 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x300000000000000, &(0x7f0000000040)) 01:12:14 executing program 2 (fault-call:2 fault-nth:1): preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 147.835427] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 147.842706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 147.849969] R13: 00000000004c0762 R14: 00000000004d0168 R15: 0000000000000000 [ 147.930632] binder: 12049:12052 unknown command 1074553610 [ 147.932476] binder: 12048:12053 unknown command 0 [ 147.936482] binder: 12049:12052 ioctl c0306201 20008fd0 returned -22 [ 147.936661] binder: 12049:12052 unknown command 1224762124 [ 147.942469] binder: 12048:12053 ioctl c0306201 20012000 returned -22 [ 147.948125] binder: 12049:12052 ioctl c0306201 2000dfd0 returned -22 [ 147.949498] binder: BINDER_SET_CONTEXT_MGR already set [ 147.960980] binder: 12048:12053 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:12:14 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) [ 147.980009] binder: 12049:12052 ioctl 40046207 0 returned -16 [ 147.986530] binder: 12049:12054 Acquire 1 refcount change on invalid ref 0 ret -22 [ 147.998775] binder: 12049:12054 unknown command 1074553610 [ 148.004639] binder: 12048:12053 ioctl c0306201 2000dfd0 returned -11 [ 148.024696] binder: 12048:12053 unknown command 0 01:12:15 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:15 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000080)={0x9, 0x6, 0x6, 0x4, 0x1, [{0x9, 0x100000000, 0xfffffffffffffffb, 0x0, 0x0, 0xa41a58e9256633fc}]}) write(r0, &(0x7f0000000040)="c2", 0x1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x20400) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000000)) truncate(&(0x7f0000000140)='./file0/bus\x00', 0x0) 01:12:15 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000000c0)=@newtaction={0x64c, 0x30, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x4, 0x100}, [{0xf4, 0x1, @m_skbedit={0xf0, 0x5, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, [@TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x4}}, @TCA_SKBEDIT_PTYPE={0x8, 0x7, 0x5}]}, {0xb8, 0x6, "1a6b0d606b174a6089456cc463a2ff536852b913b7180dc9f9f14d13d2b47d28cf8f0fc0f13900ae661d57fd15ac21f07818c1717d46f6826d2c1ebc6e174ded819ab8b0876b929a05da35c7c42bad4cf7cbd3b6a58e4f3519d14af285cfe3808b0928cfd5b19a6154cfe3be43a44ae3dcfc3759a83269e8368c05361e0108aa6aff0ca1fb7f3b76efb6555d207bffae0dde86cfe3b4eca090d056e22e4b436dda8b85f72f7cebcad31e3a6830b31b58477f42"}}}}, {0x100, 0x1, @m_vlan={0xfc, 0x1f, {{0xc, 0x1, 'vlan\x00'}, {0x4c, 0x2, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x3ff, 0xffffffffffffffff, 0x8001, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0xcfd}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x20, 0x80, 0xf, 0x7fffffff, 0x5}, 0x2}}]}, {0x9c, 0x6, "160e3bd7547ab1f63ddb5a768a8696168c846e6b1fc2f78dba6695a6421bc099d51e310449b28cb54856465d284597f3e3b07ee01028d77c96aaa2fffc1be389bb21a8ea34216106b8d5adf0414c67e03f898bbe7d2e9dc21bbf45c8b52562a8465d07d12a0802afaae96ef33d29e28886c6385ae00280a5f3e700cbb42095b9fbf4d334d5cf5a52a12afa4234b85140c9ccbe53d5447232"}}}}, {0x8c, 0x1, @m_skbedit={0x88, 0xb, {{0xc, 0x1, 'skbedit\x00'}, {0x4c, 0x2, [@TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x4499}, @TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7fff}, @TCA_SKBEDIT_PTYPE={0x8, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0xffffffffffffffc1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x8, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xffe0}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x28, 0x6, "1f4c934010fc61e574345b98016bcc8c6bf1161cef327db6fdcefc1f853b8b27d617"}}}}, {0x48, 0x1, @m_csum={0x44, 0x7, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100000000, 0x3, 0x7, 0x10000, 0xd49c}, 0x7b}}}, {0x10, 0x6, "f5e6aceacbc1b1c8f2a6fe1b"}}}}, {0x44, 0x1, @m_skbedit={0x40, 0x3, {{0xc, 0x1, 'skbedit\x00'}, {0x14, 0x2, [@TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x80}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfffb, 0xffe0}}]}, {0x18, 0x6, "00e5080f189b7f6f679e7181dc9dc6cad18499be"}}}}, {0x14c, 0x1, @m_ipt={0x148, 0x1, {{0x8, 0x1, 'ipt\x00'}, {0x3c, 0x2, [@TCA_IPT_TABLE={0x14, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x14, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xfc, 0x6, "c13592784b4205f3bfa7ea7b5ea988bafb4434b98835c154d6e622abf60d94a13ab0bbcea24d41b411671d9d691b99536c7f9fdd693d513acac89ec77f8e3c8525b3355dbf880bd919b49138ffb8f83f351f13ec924236af140797978aaf1237d12c1f34ca3d78931283508a8d9d13e3ed1d35ceed30c80db0b4ec18e1b26e95ba103ab4e9e4072c35077e04440120e022342a664f7d37b4554bffd2253f90deccbf95f73c42f4b9c382d8b99499dc5e9d17821b7b3540f85734d86e228198a5e62c05056ddc321198eaa91b8656fc78fc757e3bf7d4f219fbc9dcafe2774a2a2751819a2a8c6a777a385d76fc210406271fb88764a7a3cb"}}}}, {0x140, 0x1, @m_gact={0x13c, 0xe, {{0xc, 0x1, 'gact\x00'}, {0x58, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x9fa}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffffffffb667, 0x249, 0x10000000, 0x0, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x208a}}, @TCA_GACT_PARMS={0x18, 0x2, {0x200, 0x7fff, 0x0, 0x401, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x32c, 0x3}}]}, {0xd0, 0x6, "d619df345c2a2292a152a95707b9023baa7c8d4cad856975bdfb840a7bb53fdd7621cc6cf854c311b52034ee8b524a5cf466e910df7b29302406b854be59c31a8af18295d0d6b81788d535cac0e4bd2dc9f5756008e40f866d4c5ce88ab28f6cf07db72a22b82cdc847e7fcf1e71375bdb9a3c836f72c9493262aa0a1b9eef048f0189664592caf4088d6fae68ef7e94aa3af4c21499e3c2a2d4e2c6ecd087c543433a4538ef9b394523fb802aed5803c123acf2bb1c0e59df2ad810dbdf02bc52c74630af519181a3"}}}}, {0xa0, 0x1, @m_nat={0x9c, 0x10, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x2, 0x8, 0x80, 0x10001}, @multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0xffffffff, 0x1}}}, {0x60, 0x6, "de37b623609aedb0e4db249542165e77538ff02bcc70d455641174a5231ed5fee80dec8aefa6c7f7c64da84234ce19fb467fa155144b1d8e39e980c3510254349b0824cb0d6b66d31ac0eb55e3722dc1c2aeb505a0f6901be7b81a"}}}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x5}, 0x840) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) close(r0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/cuse\x00', 0x400081, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, r3, 0x400, 0x70bd28, 0x25dfdbfe, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008011}, 0x4004000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="fb71c664f69d98e2"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0xfffffffffffffe4d, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="734068a8bd0c63e055"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) [ 148.029713] binder: 12049:12054 ioctl c0306201 20008fd0 returned -22 [ 148.030103] binder: 12048:12057 unknown command 536907575 [ 148.040747] binder: 12048:12053 ioctl c0306201 20012000 returned -22 [ 148.042299] binder: 12048:12057 ioctl c0306201 20008fd0 returned -22 [ 148.049134] binder: 12049:12056 unknown command 1224762124 [ 148.065248] binder: 12049:12056 ioctl c0306201 2000dfd0 returned -22 01:12:15 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0xc000000000000000, &(0x7f0000000040)) [ 148.229342] FAULT_INJECTION: forcing a failure. [ 148.229342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.241178] CPU: 0 PID: 12067 Comm: syz-executor2 Not tainted 4.18.0-rc1+ #109 [ 148.248545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.257940] Call Trace: [ 148.260528] dump_stack+0x1c9/0x2b4 [ 148.264153] ? dump_stack_print_info.cold.2+0x52/0x52 [ 148.269346] should_fail.cold.4+0xa/0x1a [ 148.273414] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 148.278528] ? debug_check_no_locks_freed+0x310/0x310 [ 148.283715] ? __lock_acquire+0x7fc/0x5020 [ 148.287959] ? __lock_acquire+0x7fc/0x5020 [ 148.292191] ? debug_check_no_locks_freed+0x310/0x310 [ 148.297392] ? debug_check_no_locks_freed+0x310/0x310 [ 148.302582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 148.308129] ? should_fail+0x223/0xbed [ 148.312008] ? graph_lock+0x170/0x170 [ 148.315808] __alloc_pages_nodemask+0x36e/0xdb0 [ 148.320463] ? graph_lock+0x170/0x170 [ 148.324251] ? lock_acquire+0x1e4/0x540 [ 148.328226] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 148.333233] ? find_held_lock+0x36/0x1c0 [ 148.337292] ? check_same_owner+0x340/0x340 [ 148.341606] cache_grow_begin+0x91/0x710 [ 148.345673] __kmalloc+0x688/0x760 [ 148.349212] ? rw_copy_check_uvector+0x361/0x3e0 [ 148.353969] rw_copy_check_uvector+0x361/0x3e0 [ 148.358652] import_iovec+0xcf/0x470 [ 148.362364] ? dup_iter+0x270/0x270 [ 148.365994] ? expand_files.part.8+0x9c0/0x9c0 [ 148.370575] vfs_readv+0xf5/0x1c0 [ 148.374048] ? compat_rw_copy_check_uvector+0x440/0x440 [ 148.379417] ? __fget_light+0x2f7/0x440 [ 148.383393] ? fget_raw+0x20/0x20 [ 148.386861] ? __sb_end_write+0xac/0xe0 [ 148.390865] do_preadv+0x1cc/0x280 [ 148.394406] ? do_readv+0x310/0x310 [ 148.398037] ? __ia32_sys_read+0xb0/0xb0 [ 148.402110] __x64_sys_preadv+0x9a/0xf0 [ 148.406085] do_syscall_64+0x1b9/0x820 [ 148.409963] ? finish_task_switch+0x1d3/0x890 [ 148.414452] ? syscall_return_slowpath+0x5e0/0x5e0 [ 148.419387] ? syscall_return_slowpath+0x31d/0x5e0 [ 148.424318] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 148.429674] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 148.434521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 148.439706] RIP: 0033:0x455b29 [ 148.442890] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 148.462113] RSP: 002b:00007f103d1e5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 148.469820] RAX: ffffffffffffffda RBX: 00007f103d1e66d4 RCX: 0000000000455b29 01:12:15 executing program 2 (fault-call:2 fault-nth:2): preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 148.477090] RDX: 10000000000002a1 RSI: 0000000020000480 RDI: 0000000000000013 [ 148.484363] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 148.491639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 148.498922] R13: 00000000004c0762 R14: 00000000004d0168 R15: 0000000000000001 01:12:15 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl(r1, 0x9, &(0x7f0000000080)="a111e3b1b4864e23b6387cbbbc71add5c14680e7b8f50aeec32e956ece48fc3dce0ce8c250f1872183187108d70c452f1518029a2c169e5bf2095de82a674a3e5c786c56bbe52a4674af0039202270f614e34cf926a2ed8ac27a067def97b14a7b1deb1a52104509be9e62e5bbc92fb71e4d45db6be08c99425769f9a258693df40f92d1e0d69382f73fee8f63f4c258542672cb8b304f43edf81449071bc852be28593ac337f0e40353e338e143640ea2b61b1cdba18194f23723dd4492b66ef0dfaa508c7118c7afa744564b20546c6ccfc8fc9b286c") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 148.620618] binder: 12071:12077 unknown command 536907575 [ 148.626477] binder: 12071:12077 ioctl c0306201 20008fd0 returned -22 [ 148.660237] binder: 12074:12084 unknown command 1690726907 01:12:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x800, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000100)={0x7f}) close(r0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:15 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0xffffffff00000000, &(0x7f0000000040)) [ 148.671955] binder: 12074:12084 ioctl c0306201 20008fd0 returned -22 [ 148.679203] binder: 12074:12084 ioctl c0306201 2000dfd0 returned -11 [ 148.691310] binder: 12074:12085 unknown command 1690726907 [ 148.697164] binder: 12074:12085 ioctl c0306201 20008fd0 returned -22 01:12:15 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x1a}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(blowfish-generic)\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendto$llc(r2, &(0x7f0000000080)="57860e17f91a8bf2", 0x8, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x282000, 0x0) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000000c0)={0x303, 0x33}, 0x4) [ 148.813420] FAULT_INJECTION: forcing a failure. [ 148.813420] name failslab, interval 1, probability 0, space 0, times 0 [ 148.825086] CPU: 0 PID: 12093 Comm: syz-executor2 Not tainted 4.18.0-rc1+ #109 [ 148.832466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.841847] Call Trace: [ 148.844436] dump_stack+0x1c9/0x2b4 [ 148.848073] ? dump_stack_print_info.cold.2+0x52/0x52 [ 148.853270] ? __mutex_lock+0x7e8/0x1820 [ 148.857328] ? __lock_acquire+0x7fc/0x5020 [ 148.861580] should_fail.cold.4+0xa/0x1a [ 148.865644] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 148.870757] ? debug_check_no_locks_freed+0x310/0x310 [ 148.875957] ? graph_lock+0x170/0x170 [ 148.879777] ? is_bpf_text_address+0xd7/0x170 [ 148.884280] ? find_held_lock+0x36/0x1c0 [ 148.888338] ? __lock_is_held+0xb5/0x140 [ 148.892394] ? check_same_owner+0x340/0x340 [ 148.896706] ? rw_copy_check_uvector+0x361/0x3e0 [ 148.901457] ? import_iovec+0xcf/0x470 [ 148.905348] ? rcu_note_context_switch+0x730/0x730 [ 148.910293] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 148.915660] __should_failslab+0x124/0x180 [ 148.919889] should_failslab+0x9/0x14 [ 148.923715] kmem_cache_alloc_node_trace+0x26f/0x770 [ 148.928831] ? find_held_lock+0x36/0x1c0 [ 148.932887] __kmalloc_node+0x33/0x70 [ 148.936685] kvmalloc_node+0x65/0xf0 [ 148.940409] seq_read+0xa47/0x1540 [ 148.943987] ? fsnotify_first_mark+0x350/0x350 [ 148.948578] ? __fsnotify_parent+0xcc/0x420 [ 148.952921] ? seq_file_path+0x30/0x30 [ 148.956821] ? security_file_permission+0x1be/0x240 [ 148.961852] ? seq_file_path+0x30/0x30 [ 148.965740] proc_reg_read+0x10a/0x190 [ 148.969634] do_iter_read+0x4a3/0x660 [ 148.973438] vfs_readv+0x175/0x1c0 [ 148.976967] ? compat_rw_copy_check_uvector+0x440/0x440 [ 148.982329] ? fget_raw+0x20/0x20 [ 148.985784] ? __sb_end_write+0xac/0xe0 [ 148.989777] do_preadv+0x1cc/0x280 [ 148.993328] ? do_readv+0x310/0x310 [ 148.996942] ? __ia32_sys_read+0xb0/0xb0 [ 149.000995] __x64_sys_preadv+0x9a/0xf0 [ 149.004967] do_syscall_64+0x1b9/0x820 [ 149.008844] ? finish_task_switch+0x1d3/0x890 [ 149.013347] ? syscall_return_slowpath+0x5e0/0x5e0 [ 149.018276] ? syscall_return_slowpath+0x31d/0x5e0 [ 149.023194] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 149.028568] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 149.033425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 149.038606] RIP: 0033:0x455b29 [ 149.041778] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:12:16 executing program 2 (fault-call:2 fault-nth:3): preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 149.060991] RSP: 002b:00007f103d1e5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 149.068699] RAX: ffffffffffffffda RBX: 00007f103d1e66d4 RCX: 0000000000455b29 [ 149.075963] RDX: 10000000000002a1 RSI: 0000000020000480 RDI: 0000000000000013 [ 149.083251] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 149.090510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 149.097782] R13: 00000000004c0762 R14: 00000000004d0168 R15: 0000000000000002 [ 149.197164] binder: 12096:12100 ioctl 9 20000080 returned -22 [ 149.212590] binder: 12096:12100 Acquire 1 refcount change on invalid ref 0 ret -22 [ 149.221007] binder: 12096:12101 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 149.224418] binder: 12096:12104 ioctl 9 20000080 returned -22 01:12:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x480000) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:16 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:16 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x1000000000000, &(0x7f0000000040)) 01:12:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) accept4$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x14, 0x80000) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0x1c}, r3}, 0x14) 01:12:16 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 149.438227] FAULT_INJECTION: forcing a failure. [ 149.438227] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.450092] CPU: 1 PID: 12119 Comm: syz-executor2 Not tainted 4.18.0-rc1+ #109 [ 149.457472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.466835] Call Trace: [ 149.469441] dump_stack+0x1c9/0x2b4 [ 149.473112] ? dump_stack_print_info.cold.2+0x52/0x52 [ 149.478322] ? print_usage_bug+0xc0/0xc0 [ 149.482413] should_fail.cold.4+0xa/0x1a [ 149.486480] ? find_held_lock+0x36/0x1c0 [ 149.490553] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 149.495682] ? lock_downgrade+0x8f0/0x8f0 [ 149.499861] ? find_held_lock+0x36/0x1c0 [ 149.503930] ? graph_lock+0x170/0x170 [ 149.507739] ? lock_acquire+0x1e4/0x540 [ 149.511713] ? lock_downgrade+0x8f0/0x8f0 [ 149.515876] __alloc_pages_nodemask+0x36e/0xdb0 [ 149.520546] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 149.525552] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 149.529960] ? __lock_is_held+0xb5/0x140 [ 149.534025] ? check_same_owner+0x340/0x340 [ 149.538355] cache_grow_begin+0x91/0x710 [ 149.542417] kmem_cache_alloc_node_trace+0x692/0x770 [ 149.547528] ? find_held_lock+0x36/0x1c0 [ 149.551610] __kmalloc_node+0x33/0x70 [ 149.555408] kvmalloc_node+0x65/0xf0 [ 149.559116] seq_read+0xa47/0x1540 [ 149.562662] ? check_same_owner+0x340/0x340 [ 149.567000] ? fsnotify_first_mark+0x350/0x350 [ 149.571583] ? __fsnotify_parent+0xcc/0x420 [ 149.575907] ? seq_file_path+0x30/0x30 [ 149.579794] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 149.585329] ? _copy_from_user+0xdf/0x150 [ 149.589475] ? security_file_permission+0x1be/0x240 [ 149.594792] ? seq_file_path+0x30/0x30 [ 149.598688] proc_reg_read+0x10a/0x190 [ 149.602580] do_iter_read+0x4a3/0x660 [ 149.606393] vfs_readv+0x175/0x1c0 [ 149.609921] ? compat_rw_copy_check_uvector+0x440/0x440 [ 149.615282] ? fget_raw+0x20/0x20 [ 149.618736] ? __sb_end_write+0xac/0xe0 [ 149.622710] do_preadv+0x1cc/0x280 [ 149.626239] ? do_readv+0x310/0x310 [ 149.629852] ? __ia32_sys_read+0xb0/0xb0 [ 149.633914] ? syscall_slow_exit_work+0x500/0x500 [ 149.638749] __x64_sys_preadv+0x9a/0xf0 [ 149.642721] do_syscall_64+0x1b9/0x820 [ 149.646605] ? finish_task_switch+0x1d3/0x890 [ 149.651091] ? syscall_return_slowpath+0x5e0/0x5e0 [ 149.656019] ? syscall_return_slowpath+0x31d/0x5e0 [ 149.660964] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 149.666323] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 149.671169] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 149.676346] RIP: 0033:0x455b29 [ 149.679528] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 149.698722] RSP: 002b:00007f103d1e5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 149.706424] RAX: ffffffffffffffda RBX: 00007f103d1e66d4 RCX: 0000000000455b29 [ 149.713685] RDX: 10000000000002a1 RSI: 0000000020000480 RDI: 0000000000000013 [ 149.720947] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 149.728215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 01:12:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) socket$nl_xfrm(0x10, 0x3, 0x6) 01:12:16 executing program 2 (fault-call:2 fault-nth:4): preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 149.735475] R13: 00000000004c0762 R14: 00000000004d0168 R15: 0000000000000003 01:12:16 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) [ 149.792628] binder: BINDER_SET_CONTEXT_MGR already set [ 149.798288] binder: 12125:12132 ioctl 40046207 0 returned -16 [ 149.798450] binder: 12123:12131 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 149.804686] binder: 12125:12132 Acquire 1 refcount change on invalid ref 0 ret -22 [ 149.812758] binder: 12123:12131 ioctl c0306201 2000dfd0 returned -11 [ 149.821172] binder: 12125:12132 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 149.830806] binder: 12123:12133 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:12:16 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0xfeffffff, &(0x7f0000000040)) 01:12:16 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 149.833803] binder: 12125:12132 ioctl c0306201 2000dfd0 returned -11 01:12:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r3 = getuid() ioprio_set$uid(0x3, r3, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)={r4}) 01:12:16 executing program 7: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="e4963e941789406db3c6e23d634626152e89bdf54c5cb6d53f8c899aacd94c9210abcf5006464e4cd09802f101047cc451935e5839de47e27892c7a3509a98c496325a449b1fe96334af0461e95daa04a34221d65f98c5e38ea2989726c30b5a45032b80a3b389c0e93a059e8d55f423930754815e2b61a489dfcce44ace0ccec4b3bbc6df74c300000002") mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc) r0 = dup(0xffffffffffffffff) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x4, 0x1, 0xffffffff, 0x6, 0x69, 0x8}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd) 01:12:16 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:12:17 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001040)=""/4096) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:17 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x3000000, &(0x7f0000000040)) 01:12:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x800, 0x7f, 0x81f, 0x2, 0x4, 0x8000, 0x8, {0x0, @in6={{0xa, 0x4e21, 0x7, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xfffffffffffff171}}, 0x1, 0x5, 0x4, 0x3ff, 0x6e1}}, &(0x7f0000000200)=0xb0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x404482, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r5, @in={{0x2, 0x4e21, @rand_addr=0x1}}, 0xfffffffffffffea4, 0x3}, &(0x7f0000000300)=0x90) close(r0) r7 = getpid() setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000340)={r4, 0x20, 0x1, [0x5]}, 0xa) r8 = syz_open_procfs(r7, &(0x7f0000000000)='net\x00') syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") getsockname$packet(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000440)={@mcast2={0xff, 0x2, [], 0x1}, 0x16, r9}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) read$eventfd(r8, &(0x7f0000000380), 0x9) [ 150.257991] binder: BINDER_SET_CONTEXT_MGR already set [ 150.263724] binder: 12171:12174 ioctl 40046207 0 returned -16 [ 150.270929] binder: 12171:12176 Acquire 1 refcount change on invalid ref 0 ret -22 [ 150.280327] binder: 12171:12174 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 150.284428] binder: 12172:12175 unknown command 536907575 [ 150.293502] binder: 12172:12175 ioctl c0306201 20008fd0 returned -22 01:12:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x3) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000080)={{0x2, 0x4, 0x5, 0x4, 0xffffffffffff0000, 0x3}, 0xfd58, 0x6, 0x0, 0x0, 0x3f, "1723fe06b88e8df1fd811d060e1c8a69d92223f679bc66ae372f9ba35ae620b4850747ba44caa1e5d3cdfe35cc6a8763f4f40e56a61c7d28a07be9b3f9d74dd9da927aa51110612632e396cda51155fb5b7afea120afc9e4384e1b67debc84a5c620dc0041360fcb4eb8b33ec51cbd4f90fcd7dc686e59806b133315d849cb69"}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x220000, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) 01:12:17 executing program 7: socket$kcm(0x29, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/178, 0xb2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4068aea3, &(0x7f0000000180)={"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"}) 01:12:17 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001a1, 0x0) 01:12:17 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0xc000, &(0x7f0000000040)) 01:12:17 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x77509211, 0x4) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000240)=0xe8) semget(0x2, 0x1, 0x200) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0500000000000000"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c630000655fe38615134d1f771ae1f7eb26da5661a24f4a3dbd8f9439404646f6034140dc8f517b90e4342a913e84aa5ac9baffc39e69128701202dbafbe39ad856a8cf62127ac00527a158b0145f869aa43fdb48057639328e510ac4eb86b9629b811e11d0b234714bdb661052ff40bf5a7ab66d59d36100312256f96c42e2e68daf12fd0ab0b25e3c2ea58641ae73643f733be7a121cdd70fcb2d8553f95c137bc72d72737a897c048393934f02624ec27e6c294123e51a5d37fa"], 0xffffffffffffff69, 0x0, &(0x7f0000008f37)="c2"}) r8 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x9, 0x80) bind$inet6(r8, &(0x7f00000003c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x1f}, 0x8}, 0x1c) 01:12:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @broadcast=0xffffffff}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x6, 0x9, 0x6, 0x8, 0x2}, &(0x7f0000000180)=0x14) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:17 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) [ 150.795120] binder: BINDER_SET_CONTEXT_MGR already set [ 150.805274] binder: BINDER_SET_CONTEXT_MGR already set [ 150.808540] binder: 12191:12197 ioctl 40046207 0 returned -16 [ 150.830524] binder: 12191:12197 unknown command 5 [ 150.833265] binder: 12189:12196 ioctl 40046207 0 returned -16 [ 150.836386] binder: 12191:12197 ioctl c0306201 20012000 returned -22 [ 150.850270] binder: 12191:12197 ioctl c0306201 2000dfd0 returned -11 [ 150.859265] binder: BINDER_SET_CONTEXT_MGR already set [ 150.865410] binder: 12191:12197 ioctl 40046207 0 returned -16 [ 150.877596] binder: 12191:12197 unknown command 5 [ 150.882761] binder: 12191:12197 ioctl c0306201 20012000 returned -22 [ 150.886150] binder: 12191:12204 ioctl c0306201 2000dfd0 returned -11 01:12:17 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:17 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x400000000000000, &(0x7f0000000040)) 01:12:17 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:17 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000af, 0x0) 01:12:17 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x443) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000280)=""/112) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000000), 0x4) 01:12:17 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:17 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x1ff, {{0xa, 0x4e23, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0xa565}}}, 0x88) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x1d6, 0x0, &(0x7f0000000f4d)}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x202001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:18 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0xfeffffff00000000, &(0x7f0000000040)) 01:12:18 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000214, 0x0) [ 151.072744] binder: 12218:12225 ioctl c0306201 20008fd0 returned -11 [ 151.105887] binder: 12218:12225 Acquire 1 refcount change on invalid ref 0 ret -22 [ 151.120798] binder: 12218:12228 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 151.123398] binder: 12222:12229 unknown command 536907575 [ 151.134530] binder: 12222:12229 ioctl c0306201 20008fd0 returned -22 01:12:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x2ce, 0x0, &(0x7f0000000080)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:18 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0xffffffffffffffe3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/246) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:18 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x200000000013) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="290008000000000000003fff58158e0004ffb391f20500000005000000000000000000000000000000", 0xfffffffffffffebb}], 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x400000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x9, &(0x7f0000000100)=0x4) 01:12:18 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0xc0000000, &(0x7f0000000040)) 01:12:18 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) time(&(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0xa0000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000000c0)=""/96) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000240)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000180)={0x1ff, 0x200, 0x7f, 'queue0\x00', 0xf7}) poll(&(0x7f0000000080)=[{r2, 0xe2}, {r2, 0x1080}, {r1, 0x4110}, {r1, 0x50ca}, {r2, 0x40}], 0x5, 0x8) 01:12:18 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000215, 0x0) [ 151.841192] binder: BINDER_SET_CONTEXT_MGR already set [ 151.846664] binder: 12251:12258 unknown command 0 [ 151.855574] binder: 12251:12258 ioctl c0306201 20000100 returned -22 [ 151.862648] binder: 12250:12260 ioctl 40046207 0 returned -16 [ 151.873789] binder: 12251:12258 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 151.881636] binder: 12251:12258 ioctl c0306201 2000dfd0 returned -11 [ 151.896082] binder: 12251:12258 unknown command 0 [ 151.901536] binder: 12251:12267 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 151.903933] binder: 12251:12258 ioctl c0306201 20000100 returned -22 01:12:19 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:19 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:19 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x2000000, &(0x7f0000000040)) 01:12:19 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000121, 0x0) 01:12:19 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_1\x00', 0x10) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf32(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000010020000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x58) 01:12:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x600000, 0x0) sendto$unix(r2, &(0x7f0000000080)="8d4540b18cd332f5d5680732b60a4933aacbccbde0188d0e7f7515e4376ccd5584b31b8c7fcc0c8cc45960a91ffbe3353e4904be2b8005", 0x37, 0x0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x6}, 0x6e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:19 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x200000) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000080)={0x0, 0x400, 0x7ff, 0x4, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b6c8cbdef387e5c4b012512b556cfaf531b92da580244897a1e41ca83f6d2219450d402bfd22e2fa6f71b9f044dc7a1e2f22cdce9d4f32bcace2e0e1ef15e342f0c2aa4a3736f4836d95815b39fceb37306e4526d7c107713a3476d8be5e2e41f88ceec6b6270b4ba092486aae42338f93217f897d6525210ba59fbaa0b718d50d2afb"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:19 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x100000000000000}) [ 152.232065] binder: BINDER_SET_CONTEXT_MGR already set [ 152.237858] binder: 12284:12291 ioctl 40046207 0 returned -16 [ 152.243953] binder: 12279:12288 Acquire 1 refcount change on invalid ref 0 ret -22 [ 152.251608] binder: 12284:12291 Acquire 1 refcount change on invalid ref 0 ret -22 [ 152.260307] binder: 12279:12292 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 152.268340] binder: 12284:12291 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 152.276332] binder: 12284:12291 unknown command -557070154 01:12:19 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d5, 0x0) 01:12:19 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x505000) ioctl$KDDELIO(r0, 0x4b35, 0x8) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="ad09c63d005942e713066475d42bed97774e71492a43ce009119a99d16d275ecd3051ecbfdcbcfdd8245128e4727a203dfd45f093ed4fc8fbf1861ab20e6389de9abab400ef5bf38b6281b5aebb63696ba4aa30d899fa02ace4ae12b74c82803d22e56f58820d00ce307dc65c3ba31b61bf7e62d7b6d77baab7b916c82783488239ac6586f27d82846a27360c0442891765b07dc3aa46b1072daffdfcd8f5c97d36d66e11a932c9eaf18a51b933d76ea378f", 0xb2}, {&(0x7f0000000100)}, {&(0x7f0000000140)="88d9a29f", 0x4}, {&(0x7f0000000180)="2e044230a01a23702b278bf1fc01dd86538956e6bfda5b46d86306c1328f31df76d3afdca162789247b92a94f8b1f244a42e0d9d9b0061b1c6f86565fcfd0cc809c1e5e126761033c055c70322de0bb475346b5aedb2a85492f47cd6ee6887", 0x5f}, {&(0x7f0000000240)="36cf76764432bb18371293b44ddf8812d9b463deefb913632a0b216463655f5de521c9adf25a6638dbe4fd63d6bcf4ad1fb4d049ce5299912a843c3b614086a14a5f0711d6208a8ab348c195b4e91b4d25f1148e61d790032d4df695233db7bfdd10cf4e091a19ff2ebaf9d52cdb5a0578896371fc7ceed296bf513aff3debe06e8c4dd8e7a0383c4a9738a2e0e42a56aca14cf42d4969a110ff24d83ffb81df", 0xa0}], 0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) socket$inet6(0xa, 0x1000000000002, 0x0) gettid() ioctl(r0, 0x4, &(0x7f0000000100)="1200b3e0d19ae61116a802") dup3(r1, r1, 0x0) 01:12:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setlease(r3, 0x400, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080), 0x85, 0x0, &(0x7f0000000100)="c2"}) [ 152.278917] binder: 12279:12288 ioctl c0306201 2000dfd0 returned -11 [ 152.282153] binder: 12284:12291 ioctl c0306201 2000dfd0 returned -22 [ 152.303122] binder: 12284:12291 unknown command 536907575 [ 152.303344] binder: 12284:12294 unknown command -557070154 [ 152.308961] binder: 12284:12291 ioctl c0306201 20008fd0 returned -22 [ 152.319927] binder: 12284:12294 ioctl c0306201 2000dfd0 returned -22 [ 152.469117] binder: 12303:12306 unknown command 0 [ 152.487884] binder: 12303:12306 ioctl c0306201 2000dfd0 returned -22 [ 152.506652] binder: 12303:12309 unknown command 0 [ 152.511901] binder: 12303:12309 ioctl c0306201 2000dfd0 returned -22 01:12:19 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pipe2(&(0x7f0000000000), 0x800) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:19 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x33d, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite\x00') setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req={0x44, 0x6, 0x2, 0x5}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:19 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x4000000}) 01:12:19 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000103, 0x0) 01:12:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x8001, 0x4d7d, 0x6, 0xffffffffffffff81, 0x20}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x7fffffff, 0x8000, 0x8, 0x7, r3}, &(0x7f0000000340)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 152.867071] binder: BINDER_SET_CONTEXT_MGR already set [ 152.882560] binder: 12321:12326 ioctl 40046207 0 returned -16 [ 152.889018] binder: 12321:12326 Acquire 1 refcount change on invalid ref 0 ret -22 [ 152.896857] binder: 12321:12326 unknown command 0 [ 152.902133] binder: 12321:12326 ioctl c0306201 20012000 returned -22 [ 152.911518] binder: 12321:12326 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 152.921225] binder: 12321:12326 ioctl c0306201 2000dfd0 returned -11 [ 152.931683] binder: 12321:12326 unknown command 0 [ 152.937256] binder: 12321:12326 ioctl c0306201 20012000 returned -22 01:12:20 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setlease(r3, 0x400, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080), 0x85, 0x0, &(0x7f0000000100)="c2"}) 01:12:20 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x1000000}) 01:12:20 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000053, 0x0) 01:12:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="92490e55de30daf0"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB='\rC\x00\x00'], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:20 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x80000000, 0x9f3, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x9, 0xc00000000000, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e21, 0x9, @loopback={0x0, 0x1}}}}, 0x84) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:20 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) [ 153.413422] binder: 12342:12348 unknown command 1426999698 [ 153.419368] binder: 12342:12348 ioctl c0306201 20012000 returned -22 [ 153.431185] binder: 12345:12350 ioctl 401870c8 20000000 returned -22 [ 153.433821] binder: BINDER_SET_CONTEXT_MGR already set [ 153.438419] binder: 12342:12348 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 153.446805] binder: 12347:12352 ioctl 40046207 0 returned -16 [ 153.453069] binder: 12342:12348 unknown command 17165 01:12:20 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000204, 0x0) 01:12:20 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0xc0000000}) 01:12:20 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05ff003600000000"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) r2 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 153.461745] binder: 12345:12350 ioctl 401870c8 20000000 returned -22 [ 153.468885] binder: 12342:12348 ioctl c0306201 2000dfd0 returned -22 [ 153.489948] binder: 12342:12348 unknown command 1426999698 [ 153.497340] binder: 12342:12348 ioctl c0306201 20012000 returned -22 [ 153.499092] binder: 12347:12352 Acquire 1 refcount change on invalid ref 0 ret -22 01:12:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x4000004) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) syz_open_procfs(r2, &(0x7f0000000140)="2f65786500000100000409004b5ed9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5aa4b7a199cbfba51aff269a2200b5d728555f2e260e7ba550009fa0b798c13ce6c782c2a15b131afa792fa7b9efea30e2c323c5d2d684a85fa3d4f428a443a539492a46d09cf120f06d5a55a6391dae108572ef77158b88b2772fd2d42ec8734a216400d5cefcfd0b232e2e89f205845d8579aaf050f50cdd65ba8094d75a4c46ecc04884d99d64183d7183880206d77b37cdfe637dd3b201d83e6ed29031c985e5cd38e7c19c221a1efa7c384470668b3477b6496f5fb7785b8985c70c7e") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0xfffffffffffffe97, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 153.512227] binder: 12342:12356 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 153.536523] binder: 12347:12352 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 153.545882] binder: 12347:12352 unknown command 0 [ 153.550959] binder: 12347:12352 ioctl c0306201 2000dfd0 returned -22 [ 153.644516] binder: 12359:12366 unknown command 906034949 [ 153.671122] binder: 12359:12366 ioctl c0306201 20012000 returned -22 [ 153.693499] binder: 12369:12373 ioctl c0306201 2000dfd0 returned -11 [ 153.707612] binder: BINDER_SET_CONTEXT_MGR already set [ 153.713768] binder: 12359:12366 ioctl 40046207 0 returned -16 01:12:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000000)={0x80000000}) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x8001, 0x4d7d, 0x6, 0xffffffffffffff81, 0x20}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x7fffffff, 0x8000, 0x8, 0x7, r3}, &(0x7f0000000340)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:20 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x300}) 01:12:20 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f8, 0x0) 01:12:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:21 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:21 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x8000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:21 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0xfeffffff}) 01:12:21 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000008b, 0x0) 01:12:21 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) poll(&(0x7f0000000040)=[{r1}, {r0}, {}], 0x3, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x7b) dup2(r0, 0xffffffffffffffff) 01:12:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x24a40) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r3, 0x4, 0x70bd26, 0x25dfdbff, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x44) close(r1) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000100000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c40000000008e72675f2209ee694f64c2625f8c7ecbd3279a8ac98f5793aca8e42a8e31c1b746ec000000000000007dd8cd7c4091230a3a2065e8794d77a43d88ef1a32745b29801078836bd9484181f62b8e4c2ce67074f559bec36ec48d81af019464b9a162bcedd2f06b19d8db5788a5752b6d207b91fb7a37c5d763334a"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:21 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:21 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f4, 0x0) 01:12:21 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x2000000}) [ 154.632470] binder: BINDER_SET_CONTEXT_MGR already set [ 154.644679] binder: BINDER_SET_CONTEXT_MGR already set [ 154.646835] binder: 12411:12418 ioctl 40046207 0 returned -16 [ 154.661117] binder: 12406:12416 ioctl 40046207 0 returned -16 [ 154.670120] binder: 12411:12418 ioctl c0306201 2000dfd0 returned -11 [ 154.677549] binder: BINDER_SET_CONTEXT_MGR already set 01:12:21 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1e, &(0x7f0000ad2000), &(0x7f0000000080)=0x23c) flock(r1, 0xa) 01:12:21 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) [ 154.683099] binder: 12411:12418 ioctl 40046207 0 returned -16 [ 154.830411] binder: 12440:12442 ioctl c0306201 2000dfd0 returned -11 01:12:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000040)) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00', 0x1, r4) r6 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a}, &(0x7f00003eb000)="b3", 0x1, r4) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r5}, &(0x7f0000000200)=""/5, 0x126, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha256\x00'}}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000000), 0x0, 0x0) 01:12:22 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet6_tcp_buf(r0, 0x6, 0x6, &(0x7f00000002c0)=""/122, &(0x7f0000000080)=0xb5) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffe01, &(0x7f0000000040)={0xffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x9958, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, {0xa, 0x4e24, 0x7, @empty, 0x9}, r2, 0x2}}, 0x48) 01:12:22 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x4}) 01:12:22 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8924, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x1, 0x2, @sync=&(0x7f0000000040)}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x100000000, 0x5, 0x4, 0x1, 0x0, 0x100000001, 0x4002, 0x1, 0x80000001, 0x8, 0x2, 0x1, 0x7, 0x8e2, 0x7, 0x7, 0x9, 0x3f, 0x0, 0x5, 0x252, 0x3, 0x100000001, 0x7f, 0xfffffffffffffff7, 0x7f, 0x0, 0x9, 0x4, 0x64, 0x100000001, 0x0, 0x4, 0x0, 0xff, 0x8, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x5}, 0x200, 0xc2f, 0x5, 0x7, 0x9, 0x7ff, 0x20}, r2, 0xe, r0, 0x3) 01:12:22 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000255, 0x0) 01:12:22 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0xfffffffe}) 01:12:22 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:22 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) shutdown(r0, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") connect$inet6(r0, &(0x7f0000001fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = dup(r0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) 01:12:22 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000023b, 0x0) 01:12:22 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:22 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:22 executing program 7: userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000ffc), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x6, 0x970, [0x20000280, 0x0, 0x0, 0x200003e8, 0x200007b0], 0x0, &(0x7f0000000040), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x0, 0x44, 0x881d, 'bridge_slave_0\x00', 'syzkaller0\x00', 'veth1_to_bond\x00', 'dummy0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x100, 0x100, 0x138, [@connbytes={'connbytes\x00', 0x18, {{0x3f, 0x10001, 0x2, 0x1}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0xff000000, 0xff000000, 0xff, 0xff], 0x4e21, 0x3c, 0x3, 0x4e22, 0x4, 0x14}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x7, 0x4, 0x600f, 'ip6_vti0\x00', 'lo\x00', 'ip6gre0\x00', 'ip6tnl0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1d}, [0xff, 0x0, 0x0, 0xff, 0xff], 0x128, 0x128, 0x160, [@limit={'limit\x00', 0x20, {{0x100000000, 0xffffffffffffffe1, 0x40, 0x4, 0x4, 0x2}}}, @stp={'stp\x00', 0x48, {{0xffffffffffff0000, {0x100000001, 0x8000, 0x5, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0x0, 0xff, 0xff], 0x0, 0xffffffff, 0x9, 0x7fffffff, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0xff], 0x4e24, 0x4e20, 0x20, 0x7, 0x3f, 0x7, 0x100000001, 0x101, 0x0, 0x8}, 0x200, 0x18}}}]}}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xffffffffffffffff}}}}, {{{0x5, 0x60, 0x88b5, 'ifb0\x00', 'bcsf0\x00', 'eql\x00', 'veth0_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0x0, 0x0, 0xff, 0x21dd7e4edbd1c4e0], 0x1c8, 0x200, 0x238, [@state={'state\x00', 0x8, {{0x3f}}}, @comment={'comment\x00', 0x100}]}, [@arpreply={'arpreply\x00', 0x10, {{@random="3a4bde16c0f6"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x4, 0x890d, 'veth1\x00', 'sit0\x00', 'bpq0\x00', 'bond_slave_1\x00', @random="40805d83af92", [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x35556b6ef7992f14, 0x0, 0xff, 0xff, 0xff], 0x70, 0x130, 0x168}, [@common=@ERROR={'ERROR\x00', 0x20, {"89e6fde2490e67d86f7b4d51d2303a11eae515b4229a404c60fd6d826aa8"}}, @common=@nflog={'nflog\x00', 0x50, {{0xfffffffffffff001, 0x7ff, 0x2, 0x0, 0x0, "019318e7eb69cbe6693827c85244b8487fdd2ceaeb71899706a0d19617df8578232d375c133efae8ff7421f1fd7ede1836e7c41a87e9331854dc71fd11ce0c7d"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x21}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x8, 0x600f, 'veth1_to_bond\x00', 'team_slave_1\x00', 'teql0\x00', 'ip6gretap0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}, [0x0, 0xff, 0xff, 0xff, 0xff], 0xf8, 0xf8, 0x130, [@realm={'realm\x00', 0x10, {{0x3ff, 0x5}}}, @helper={'helper\x00', 0x28, {{0x1, 'H.245\x00'}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xfffffffffffffffd}}}}, {{{0x11, 0x11, 0x6006, 'nr0\x00', 'team_slave_0\x00', 'ip6tnl0\x00', 'veth1_to_bond\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7443609f4a61c33b}, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0x118, 0x148, [@rateest={'rateest\x00', 0x48, {{'eql\x00', 'bond_slave_1\x00', 0x20, 0x2, 0x262, 0x3, 0x5, 0x1ec8000000, 0x200}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xffffffffffffffff}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x9e8) close(0xffffffffffffffff) 01:12:22 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@empty, 0x0, r2}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x7ff, 0x2000, 0x0, 0x1, 0xf60}) 01:12:22 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000025a, 0x0) 01:12:22 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x2}) [ 155.775550] binder: 12475:12485 Acquire 1 refcount change on invalid ref 0 ret -22 [ 155.777607] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 155.792449] binder: 12475:12485 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 155.817207] binder: 12475:12485 ioctl c0306201 2000dfd0 returned -11 01:12:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000000)="660f381ed33ef2263e672e0f32650f013564360f30ff45c30f89ab5bdf469f66b8010000000f01c19a03001900d97342", 0x30}], 0xaaaaaaaaaaaaae3, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 155.826313] binder: 12475:12488 Acquire 1 refcount change on invalid ref 0 ret -22 [ 155.836910] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 155.843711] binder: 12475:12488 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:12:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000000)) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:23 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400800, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={0x85, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e24, @broadcast=0xffffffff}, 0x21, 0x6, 0x73c90564, 0x8, 0x7, &(0x7f0000000080)='dummy0\x00', 0xe6, 0x9, 0x5f}) 01:12:23 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000038, 0x0) 01:12:23 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x3}) 01:12:23 executing program 4: r0 = getpgid(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xd9, 0x10100) kcmp(r0, r1, 0x7, r2, r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10080, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000080)) 01:12:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0xe000000000000000, 0x60000}, &(0x7f0000000240)=0x8) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv4_delroute={0x1c, 0x19, 0x8, 0x70bd2d, 0x25dfdbff, {0x2, 0x90, 0x0, 0x0, 0xfd, 0x7, 0xfe, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r3, 0x8736, 0x30}, 0xc) getsockopt$inet6_int(r0, 0x29, 0x52, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x84, 0x16, &(0x7f0000000000), &(0x7f0000000080)=0x68) close(r4) close(r2) 01:12:23 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0xc000000000000000}) 01:12:23 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e7, 0x0) 01:12:23 executing program 4: socketpair(0x8, 0x7, 0x1000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x5) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x80, 0x3) 01:12:23 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000080)=""/231) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x82000, 0x0) [ 156.384750] binder: 12516:12524 unknown command 536907575 [ 156.402422] binder: 12516:12524 ioctl c0306201 20008fd0 returned -22 [ 156.598561] binder: 12539:12545 unknown command 536907575 [ 156.604512] binder: 12539:12545 ioctl c0306201 20008fd0 returned -22 01:12:23 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:23 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x400000000000000}) 01:12:23 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028f, 0x0) 01:12:23 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x10000, 0x0) connect$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, {0x40, 0xa461, 0x28716b4b, 0x8a9d, 0x5, 0xf06}, 0x3f}, 0xa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:23 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="cf", 0x1}], 0x1, &(0x7f00000004c0)}, 0x0) sendmsg(r0, &(0x7f0000002ec0)={&(0x7f0000000700)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002b80)='x', 0x1}], 0x1, &(0x7f0000002cc0)}, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000007000000002000000000340be9f950ef947d3de870aeefcda02000000000000000000000000"], 0x20}, 0x0) 01:12:23 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:24 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r0, &(0x7f0000000000)=""/103, 0xfffffffffffffe0a, 0x40000000000) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:24 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x3000000}) 01:12:24 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000209, 0x0) 01:12:24 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x220100, 0x0) bind(r2, &(0x7f0000000100)=@in6={0xa, 0x4e23, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x80) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0xff, 0x8, 0x789, 0x1000, 0x6, 0x3, 0xffffffff80000001, 0xc74, 0x400, 0x7}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000f4d)}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180)=0x7fffffff, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:24 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:24 executing program 7: syslog(0x3, &(0x7f0000000600)=""/25, 0x19) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xd98, 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000180)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) ioctl$void(r1, 0x5450) getrandom(&(0x7f0000000000)=""/225, 0xe1, 0x1) 01:12:24 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x200000000000000}) 01:12:24 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000017d, 0x0) [ 157.540712] binder: 12581:12588 unknown command 0 [ 157.545815] binder: 12581:12588 ioctl c0306201 20008fd0 returned -22 [ 157.556412] binder: 12581:12588 ioctl c0306201 2000dfd0 returned -11 [ 157.578790] binder: 12581:12591 unknown command 536907575 01:12:24 executing program 7: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0xb) socketpair$inet(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x410, 0x70bd2d, 0x25dfdbfe, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x7, 0x6, 0x8, 0x0, 0x0, [{r1, 0x0, 0xffffffffffffff17}, {r0, 0x0, 0x7}, {r1, 0x0, 0x81}, {r1, 0x0, 0x1}, {r1, 0x0, 0x1}, {r4, 0x0, 0x4}, {r1, 0x0, 0x9}, {r4, 0x0, 0x1}]}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 01:12:24 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:24 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) [ 157.584812] binder: 12581:12591 ioctl c0306201 20008fd0 returned -22 [ 157.595694] binder: 12581:12591 ioctl c0306201 2000dfd0 returned -11 01:12:24 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x1000000000000}) 01:12:24 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000191, 0x0) [ 157.744157] netlink: 64 bytes leftover after parsing attributes in process `syz-executor7'. [ 157.762740] netlink: 64 bytes leftover after parsing attributes in process `syz-executor7'. 01:12:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) eventfd2(0x44, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={"65727370616e3000000000000200"}) [ 157.795550] binder: 12606:12613 unknown command 536907575 [ 157.801542] binder: 12606:12613 ioctl c0306201 20008fd0 returned -22 01:12:24 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(0x0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:24 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101980, 0x0) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:25 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:25 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0xc000}) 01:12:25 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000006, 0x0) 01:12:25 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3e4, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x40) syz_mount_image$gfs2(&(0x7f0000000880)='gfs2\x00', &(0x7f00000008c0)='./file0\x00', 0x1, 0x6, &(0x7f0000000b80)=[{&(0x7f0000000900)="fcfc935b73177be6c4fd82f5d688259f86b98c2e8a5c4e1de5d86ced00dd402beb57bf40c89e5d9469276b8d749173ba45e1534d014e51a0713d4aa50e4236650fa3ca3625f94b93075c7d0f1f85eed8d1e39e309d57f503fd24ba8b0cc07c219a8d6a3699d70265f4e60a85aa882e5e7b11c9e4d96bd5dbd03f8a292a6df89cedb181aab53859f3a934d1287b007ea822f062fdb790c2e795cd63634be44efca8469981197869d05bac7e91f25b3de3e1", 0xb1}, {&(0x7f00000009c0)="6db5dcbaef228515b7d34dc997264fa2632bcce7d4a34cc9af4077e4f0a2e96589b2df9b12969451c0586691431e1eddcd424fd6264ab9b930f69d8d829e47bd6ff6ada81bbeaf60a114bc61d4369677df2ea38e124ed58daebd8162344017dd4a9ae390f986f5fbaf9e61505033b80dc8e623166e7b7a8a2546334909c2d996755b46428212bcd1c9beb1f9d8e18ab3124151f8dfc62b4cd067b80e98f6b6c1dc4f784b5c96d40a9f5ab6f56f37f9c7901cff635009233dbd94e6e8270a27f359d310bb38906ed4df593367b74f8bdcbab17887fd0c", 0xd6, 0x2}, {&(0x7f0000002140)="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", 0x1000, 0x9}, {&(0x7f0000003140)="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", 0x1000, 0x10000000000000}, {&(0x7f0000000ac0)="ae9600545ccd5ca4e6a78e3486e0543bb5fe08354c0559c751e58b", 0x1b, 0xff}, {&(0x7f0000000b00)="884a80c6f0f5b15911c137541612ab2900a189cf8841a1984a5e43363451d4bedeb46081a6653dcc1d4c1f22ea63fe62ff852c3907ec312c8ab71d031382831d7aa3e22c7af12f266193", 0x4a, 0x2}], 0x40, &(0x7f0000000c40)={[{@localcaching='localcaching', 0x2c}]}) socket$pppoe(0x18, 0x1, 0x0) sendmsg$xdp(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="b7354dac633564c165b89a59bd4721be1bb7e939bbd4af3a7093c6c51d2d72ab4453ff46f10f958c84f48fd2146516a88ea61cbfbc40990ab6cfc4ea0d13435cdfc59c394b74be389ebb9fec13f2302aa100b43caf6d8ed4f984c7f9e70ce543d0d7bac13b995d8d7e730da8cf70b5a1ae20d3f0025dab352b2363a758b73f759561013cb2580bd935590c7d058bf5e28299bd460cf645c08a6408bb3b19c7348f0bfd2a2142b9cd1d217833c04cde4c445567cc84629c0257beff0d74924e2bc3fc646a3d94eed43dfe22bb75355a83671b789af2cc27ff97f0cae8d842006078291630e07639e59ef6dd15e21eeb5b3b", 0xf1}], 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x0, 0x6, 0x3, 0x0, r1, 0x6}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r3, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) socket$pppoe(0x18, 0x1, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000300)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0xc766, 0x9, 0x1, 0x23, r3, 0x100}, 0x2c) kexec_load(0x9, 0x3, &(0x7f00000006c0)=[{&(0x7f0000001140)="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", 0x1000, 0xffff, 0x7}, {&(0x7f0000000540)="e3cec18d8749ba9c54d7926fd4a9acf9c42697300382db09e36379a4b994fb89060a521cef3315b2205020884154b9470a8d1adad223726feacbbd6d83a6e7a4b528ce70410398160477ec9c8c967e34e0eff929d9136668a90791cf8b4a4f60e318b3bf60c766f95e5019851a7954049e9cf163b575642fc09a038c8178d745665769c015b31560cb17cc1b0e6a84c6f14902da143f7c3790fcd9e7a1ed32ebec305f7f58d0db17ca8aaca917e836389d2ca6daab58ac3454", 0xb9, 0x6, 0x100}, {&(0x7f0000000600)="8aec780fe6a3613801010940e1c54594f70b6dd66205dbb2c0ee06c1289cf6859c609b23fecf5c29e4d422c5d769efe20db7286e9d3a5e3aef740840237c020c34dab40e80491783dd5dacd6933813a0040753d184f4e7c0c4edd873fd6b2dd5f2fa3c3d11e631cd7618c5d1df04c493f844d74449a71b23077cb18d32248d64ed06358e073f7663486a82dee4b600ea72ed5ed29fce2089", 0x98, 0x80000001, 0x4}], 0x3e0000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f00000001c0)="67342b2e469ac3e93fbe0dcbe3ecd3d5af3f7504378369414485c30abbf949003f7118d3b3089591319e9b8425318ae19ec4881e5c2ed579f9a0dac380691b8ee307e3fad4ffdb195f8dfb44401de671b4683d5c36b044b2b4517fa0a379b1cc95459213d9c407d4dfd3a21e21912f1f80432d0361b548a1bf04b9e80942f14620824ee0f597011db97b813ae61c1bb011e78936af92709e9206a07332076f4a2b281ccee155657c9717c2f8ca5f", &(0x7f0000000280)="456eed9377a82126072b512cea5a16b0b1f038934a958403f3010b9ae92e1debe40e23e63cc80d194e1b7f66215abc42aee31a284e0d0231bf2b798abf648d8e848bd5e151b355ffe1848500eba92e0c6fc99f608b4f30b2292d5c1968f4d7adb57b45ea40c3e8", 0x1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, &(0x7f0000000180)}, 0x10) add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000780)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000007c0)="2b00114b157d52cc754b1a14e6133a9e63a10e8e23fd34b5ac0d60fe8790136880af5024ea2b81586af9805abec212577616526518ad56aca933d56d9cfd5285fee2232c1f2d14d9ccdef8f6082cc29ba2df5531d7784daa03a1155801c759240ab9faa968c903a6dc4dc74eeb50b044a673e10e5344f8037289e530e10384480ce8a7a8702f59a6f1770322e9a3a2d16e605ff2f36c6b1ba4c18ad76bc030", 0x9f, 0x0) 01:12:25 executing program 7: syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=']) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f00000001c0)) 01:12:25 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = syz_open_pts(0xffffffffffffff9c, 0x80000) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:25 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0xc0}) 01:12:25 executing program 6: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000280)=0x2, 0x4) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r3 = memfd_create(&(0x7f0000000180)='/dev/binder#\x00', 0x2) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00'}, &(0x7f0000000240)=0x78) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x20000, 0x0) setsockopt$packet_buf(r4, 0x107, 0x0, &(0x7f0000000080)="dd9dfe131d130cbf50f651a617cd7cfb2c4fadd0c64b159ccad4d29b23d34dd1bde7d48b9a7e6d3aad7629d8c3fb51d473a0e9c27bddd9a198a45d21b8532385594e67ab69c9482f4c2306df9c5b7d64e7b6391336ad8cddebcff5b7923421b1dd6a76ba2d603e8464d5b52b09f77d8a471956bf8be7f06ec9f818d708c6724647efb8ad646d35928626a360c768bf12e99fff2d702cc49d1c66d12fbbbfd161906712ec70c42e2ffd016f7f23e6833997070052dcc97008a2215a584a0046e1e71c424ef28433cfdc8f96d0bd2640dec00cf11926721eaa2e1c73a26d72ea658c69d6324684d786e307a873fe71bfa1e876af", 0xf3) 01:12:25 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000015a, 0x0) [ 158.788501] gfs2: not a GFS2 filesystem [ 158.830981] gfs2: not a GFS2 filesystem 01:12:25 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = socket$inet6(0xa, 0x40000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) fdatasync(r1) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) r2 = accept$alg(r0, 0x0, 0x0) r3 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r3, 0x0, 0x0, 0x3fd) sendfile(r2, r1, &(0x7f00007ed000), 0x40) 01:12:25 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:25 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3e4, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x40) syz_mount_image$gfs2(&(0x7f0000000880)='gfs2\x00', &(0x7f00000008c0)='./file0\x00', 0x1, 0x6, &(0x7f0000000b80)=[{&(0x7f0000000900)="fcfc935b73177be6c4fd82f5d688259f86b98c2e8a5c4e1de5d86ced00dd402beb57bf40c89e5d9469276b8d749173ba45e1534d014e51a0713d4aa50e4236650fa3ca3625f94b93075c7d0f1f85eed8d1e39e309d57f503fd24ba8b0cc07c219a8d6a3699d70265f4e60a85aa882e5e7b11c9e4d96bd5dbd03f8a292a6df89cedb181aab53859f3a934d1287b007ea822f062fdb790c2e795cd63634be44efca8469981197869d05bac7e91f25b3de3e1", 0xb1}, {&(0x7f00000009c0)="6db5dcbaef228515b7d34dc997264fa2632bcce7d4a34cc9af4077e4f0a2e96589b2df9b12969451c0586691431e1eddcd424fd6264ab9b930f69d8d829e47bd6ff6ada81bbeaf60a114bc61d4369677df2ea38e124ed58daebd8162344017dd4a9ae390f986f5fbaf9e61505033b80dc8e623166e7b7a8a2546334909c2d996755b46428212bcd1c9beb1f9d8e18ab3124151f8dfc62b4cd067b80e98f6b6c1dc4f784b5c96d40a9f5ab6f56f37f9c7901cff635009233dbd94e6e8270a27f359d310bb38906ed4df593367b74f8bdcbab17887fd0c", 0xd6, 0x2}, {&(0x7f0000002140)="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", 0x1000, 0x9}, {&(0x7f0000003140)="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", 0x1000, 0x10000000000000}, {&(0x7f0000000ac0)="ae9600545ccd5ca4e6a78e3486e0543bb5fe08354c0559c751e58b", 0x1b, 0xff}, {&(0x7f0000000b00)="884a80c6f0f5b15911c137541612ab2900a189cf8841a1984a5e43363451d4bedeb46081a6653dcc1d4c1f22ea63fe62ff852c3907ec312c8ab71d031382831d7aa3e22c7af12f266193", 0x4a, 0x2}], 0x40, &(0x7f0000000c40)={[{@localcaching='localcaching', 0x2c}]}) socket$pppoe(0x18, 0x1, 0x0) sendmsg$xdp(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="b7354dac633564c165b89a59bd4721be1bb7e939bbd4af3a7093c6c51d2d72ab4453ff46f10f958c84f48fd2146516a88ea61cbfbc40990ab6cfc4ea0d13435cdfc59c394b74be389ebb9fec13f2302aa100b43caf6d8ed4f984c7f9e70ce543d0d7bac13b995d8d7e730da8cf70b5a1ae20d3f0025dab352b2363a758b73f759561013cb2580bd935590c7d058bf5e28299bd460cf645c08a6408bb3b19c7348f0bfd2a2142b9cd1d217833c04cde4c445567cc84629c0257beff0d74924e2bc3fc646a3d94eed43dfe22bb75355a83671b789af2cc27ff97f0cae8d842006078291630e07639e59ef6dd15e21eeb5b3b", 0xf1}], 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x0, 0x6, 0x3, 0x0, r1, 0x6}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r3, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) socket$pppoe(0x18, 0x1, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000300)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0xc766, 0x9, 0x1, 0x23, r3, 0x100}, 0x2c) kexec_load(0x9, 0x3, &(0x7f00000006c0)=[{&(0x7f0000001140)="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", 0x1000, 0xffff, 0x7}, {&(0x7f0000000540)="e3cec18d8749ba9c54d7926fd4a9acf9c42697300382db09e36379a4b994fb89060a521cef3315b2205020884154b9470a8d1adad223726feacbbd6d83a6e7a4b528ce70410398160477ec9c8c967e34e0eff929d9136668a90791cf8b4a4f60e318b3bf60c766f95e5019851a7954049e9cf163b575642fc09a038c8178d745665769c015b31560cb17cc1b0e6a84c6f14902da143f7c3790fcd9e7a1ed32ebec305f7f58d0db17ca8aaca917e836389d2ca6daab58ac3454", 0xb9, 0x6, 0x100}, {&(0x7f0000000600)="8aec780fe6a3613801010940e1c54594f70b6dd66205dbb2c0ee06c1289cf6859c609b23fecf5c29e4d422c5d769efe20db7286e9d3a5e3aef740840237c020c34dab40e80491783dd5dacd6933813a0040753d184f4e7c0c4edd873fd6b2dd5f2fa3c3d11e631cd7618c5d1df04c493f844d74449a71b23077cb18d32248d64ed06358e073f7663486a82dee4b600ea72ed5ed29fce2089", 0x98, 0x80000001, 0x4}], 0x3e0000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f00000001c0)="67342b2e469ac3e93fbe0dcbe3ecd3d5af3f7504378369414485c30abbf949003f7118d3b3089591319e9b8425318ae19ec4881e5c2ed579f9a0dac380691b8ee307e3fad4ffdb195f8dfb44401de671b4683d5c36b044b2b4517fa0a379b1cc95459213d9c407d4dfd3a21e21912f1f80432d0361b548a1bf04b9e80942f14620824ee0f597011db97b813ae61c1bb011e78936af92709e9206a07332076f4a2b281ccee155657c9717c2f8ca5f", &(0x7f0000000280)="456eed9377a82126072b512cea5a16b0b1f038934a958403f3010b9ae92e1debe40e23e63cc80d194e1b7f66215abc42aee31a284e0d0231bf2b798abf648d8e848bd5e151b355ffe1848500eba92e0c6fc99f608b4f30b2292d5c1968f4d7adb57b45ea40c3e8", 0x1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, &(0x7f0000000180)}, 0x10) add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000780)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000007c0)="2b00114b157d52cc754b1a14e6133a9e63a10e8e23fd34b5ac0d60fe8790136880af5024ea2b81586af9805abec212577616526518ad56aca933d56d9cfd5285fee2232c1f2d14d9ccdef8f6082cc29ba2df5531d7784daa03a1155801c759240ab9faa968c903a6dc4dc74eeb50b044a673e10e5344f8037289e530e10384480ce8a7a8702f59a6f1770322e9a3a2d16e605ff2f36c6b1ba4c18ad76bc030", 0x9f, 0x0) 01:12:25 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x300000000000000}) 01:12:25 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x2, 0x2}], 0x1, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:25 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000026, 0x0) [ 158.976841] binder: 12679:12684 unknown command 536907575 [ 159.005201] binder: 12679:12684 ioctl c0306201 20008fd0 returned -22 [ 159.185598] gfs2: not a GFS2 filesystem 01:12:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) eventfd(0x5ffa) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x7, 0x810) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:26 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB="00020000"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:26 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0xffffffff00000000}) 01:12:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x20}, 0x5bab363b}}, [0x2, 0x1, 0x100000000, 0x100, 0xfffffffffffffffc, 0x8000000, 0x7, 0x10000, 0x4, 0x6, 0x8, 0x1, 0x7, 0x6, 0x1]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x1, 0x800, 0x9, 0xf, 0x9}, &(0x7f0000000280)=0x14) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000840)="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", 0x107) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x400000, 0x0) getpeername(r0, &(0x7f00000001c0)=@can={0x0, 0x0}, &(0x7f0000000240)=0x80) r7 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@loopback={0x0, 0x1}, @in6, 0x4e20, 0x0, 0x4e22, 0x540b, 0xa, 0x20, 0x80, 0x2b, r6, r7}, {0x7, 0xfffffffffffffbff, 0x20, 0x5, 0x6a, 0x80, 0x1, 0x8e5}, {0x5de, 0x4, 0x81, 0x75}, 0x101, 0x6e6bb1, 0x0, 0x1, 0x3, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4d6}, 0x2, @in=@multicast1=0xe0000001, 0x0, 0x2, 0x3, 0x7fffffff, 0x8, 0x1, 0x5}}, 0xe8) io_submit(r4, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f000007d000)="b3b03996ff05abb1e8b1c24b50898d8f", 0x10}]) 01:12:26 executing program 7: r0 = socket$inet6(0xa, 0x8000f, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x40240, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x100000000, 0x0) accept$packet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000240)=0xfffffffffffffcef) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', r4}) ioctl$TCFLSH(r1, 0x5411, 0x700000) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffff, 0x139880) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000040)="1c2049b9ac45d1c4a7110fb4b3648e10e07e694c0356576231f277beb16266d861d724b59d55ce8df3972d80e48740af35cfe7f05b0b2b83dca9262103fd59a0c361be42e8fbcf49fd2a978e28b7a3dd9931628f8d1f88") 01:12:26 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:26 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000007b, 0x0) [ 159.911700] binder: 12733:12739 unknown command 512 [ 159.917510] binder: 12733:12739 ioctl c0306201 2000dfd0 returned -22 [ 159.946134] binder: 12733:12739 unknown command 536907575 01:12:26 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0xfeffffff00000000}) 01:12:26 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000276, 0x0) [ 159.960555] binder: 12733:12744 unknown command 512 01:12:26 executing program 7: r0 = socket$inet6(0xa, 0x80000, 0x5) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140)) 01:12:26 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x2, 0x2}], 0x1, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:26 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r2, 0x9, 0x30, 0x5, 0xa323}, &(0x7f0000000140)=0x18) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:26 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:26 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'selfvmnet0#security'}, {0x20, '%posix_acl_access('}, {0x20, '\\posix_acl_accessmd5sum&($lo+cgroup'}, {0x20, 'em0vmnet1ppp0'}, {0x20, ']:/'}, {0x20, "ef73656c696e75782e"}, {0x20, '/(&$@'}], 0xa, "6e5f453b91dd248412a30168f4fca8782ca67ceb9679e916eb50a11adf7aa3d1e0de3cf79e29a66f705d2965b331fe970a789520c49d519b34cedfb91e4adb34d6af49b11f6641a6f714f417845af23a1415b01d6bdc9ff712125a28375bcc9b3127a49d4de5fb51df67e0b17957de8c7eced6d0c7653bfc785daf5d1ae47cec698e06c6ae35b345ea2452b59cac5ef4c06dcc6cb1d23a32cf3f7c9dc68ca4546da404d82968feba5d2622e7cf19514e8f"}, 0x129) r4 = syz_open_pts(r3, 0x80000) writev(r4, &(0x7f0000000040), 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x13f) [ 159.986268] binder: 12733:12739 ioctl c0306201 20008fd0 returned -22 [ 159.994556] binder: 12733:12744 ioctl c0306201 2000dfd0 returned -22 01:12:27 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0000000}) 01:12:27 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000249, 0x0) [ 160.194524] binder: 12764:12771 tried to acquire reference to desc 0, got 1 instead [ 160.211752] binder: 12764:12771 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 01:12:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="0b1a69f70281243fd9c1170f7309ab3aa7b0fd0d4f92a5e2f6f177efc3805374c4769f68dfec6f69e61d547a6290cb0d0c5dccd1a56daa50a1ff469fe0725a5678515794ea9284ea82f5fba57b8c1f7c3ef326e5e33d", 0x56}, {&(0x7f00000000c0)="791cda92e11794cb43c765ef514fd90300d7b1feacecd8bb2e1bf3813770204e04a6ed1af82e689d03c7372de4e7cae9db49", 0x32}, {&(0x7f0000000100)="3c00e822ddf66fd9a00f808e4e061c683d195f14f4f2de3ebbb47051a61fcb87d6f2744552314d493ad2a26f01095e51c68a0a0b7ea477f3127a894dc532a41ad6736dab93278e5707d6c0f2c84296e2881ca20f1f3f2a16f956e0d85cc1d2a7df205a51", 0x64}, {&(0x7f0000000180)="99bac613eb5bae82c72639f679ee59ab759a2498fe933fa7dd2dd1d3f5d6320c5b9f06cdcfddf3178633cdc39aa71184186b67d0feb8160bcac1bb2c6d6ddd1b0692353e874b8307e8fc4c7b66677dbbbf395f5c27c8c2e1d6ccc198dd17353748c66211e7d071542f166f9fb55e96c7f3e18eb3fb5a29b1ef778d6a2246c4f3fc1c6ce4dba740d17cb8b0b698d6937d2c1549779edfbf3432e5e3b6ce3d7d5780644e042c35b68e42d3a716cf590c02675b0206681ffd05269359aeda45d370a5963d290a32013b281efef06dbc08feff11f18ed56f913c54ab1cd6b56e77c8f0e3855aa2fe4f2b351abc835e2e", 0xee}, {&(0x7f0000000800)="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", 0x1000}], 0x5, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) socketpair(0x11, 0x3, 0x8, &(0x7f0000000000)) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:27 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000000c0)) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00010046f9667f670ef14daf1c0d9403709300cecf2bdb12be93ae6f"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0eee1cca12dc0752eeee2c32b79d952911139d81afa03f"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:27 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf890ee9a90f798858439ed5542407424a00e901d2e39c5a323094c57272bf04b3ac142203c6fd061b8f7a8f") fadvise64(r0, 0x100000, 0x20000, 0x4) sysfs$2(0x2, 0xb2, &(0x7f0000000000)=""/58) 01:12:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) dup2(r2, r1) pipe(&(0x7f0000000000)) 01:12:27 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0xfeffffff}) 01:12:27 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:27 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000091, 0x0) 01:12:27 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x2, 0x2}], 0x1, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:28 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x300}) 01:12:28 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000f3, 0x0) [ 161.051459] binder: 12801:12807 unknown command 1174405376 [ 161.058106] binder: 12801:12807 ioctl c0306201 20012000 returned -22 [ 161.073170] binder: 12801:12807 unknown command -904073714 [ 161.083160] binder: 12801:12807 ioctl c0306201 20008fd0 returned -22 01:12:28 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="2957e1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@routing, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettfilter={0x34, 0x2e, 0x310, 0x70bd27, 0x25dfdbfc, {0x0, r3, {0xc, 0x8}, {0xffff, 0xffff}, {0xfff3, 0x5}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet6(r1, &(0x7f0000aacfe4)={0xa}, 0x1c) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000002c0)={0x29, @empty, 0x4e20, 0x0, 'rr\x00', 0x0, 0xffff, 0x41}, 0x2c) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [], 0xa}, 0xb) 01:12:28 executing program 4: prctl$getreaper(0x25, &(0x7f0000000000)) semget$private(0x0, 0x7d0000, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) [ 161.115515] binder: 12801:12807 ioctl c0306201 2000dfd0 returned -11 [ 161.127193] binder: BINDER_SET_CONTEXT_MGR already set [ 161.133224] binder: 12801:12807 ioctl 40046207 0 returned -16 [ 161.141351] binder: 12801:12807 unknown command 1174405376 [ 161.145589] binder: 12801:12816 unknown command -904073714 [ 161.148606] binder: 12801:12807 ioctl c0306201 20012000 returned -22 [ 161.154395] binder: 12801:12816 ioctl c0306201 20008fd0 returned -22 01:12:28 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x2) 01:12:28 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:28 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0xff, 0x1}, 0x2d) dup2(r1, r0) 01:12:28 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x2}) [ 161.408240] binder: BINDER_SET_CONTEXT_MGR already set [ 161.414746] binder: 12836:12840 ioctl 40046207 0 returned -16 01:12:29 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="644e0e6305000000"], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair(0x1, 0x3, 0x62, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000080), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 01:12:29 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000245, 0x0) 01:12:29 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x852907590fdee252, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f00000000c0)) r3 = socket(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast=0xffffffff}, 0x10) bind$inet(r1, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r4, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 01:12:29 executing program 4: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [], 0xaa}, 0x46, r2}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r2}) read(r0, &(0x7f0000000000)=""/141, 0x8d) 01:12:29 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:29 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x4}) 01:12:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000000), 0x0, 0x0) 01:12:29 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:29 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0xc000000000000000}) 01:12:29 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000243, 0x0) [ 162.426414] binder: 12868:12875 Acquire 1 refcount change on invalid ref 0 ret -22 [ 162.443531] binder: 12868:12875 unknown command 1661881956 [ 162.445227] IPVS: ftp: loaded support on port[0] = 21 [ 162.454834] binder: 12868:12875 ioctl c0306201 20008fd0 returned -22 [ 162.467867] binder: 12868:12875 ioctl c0306201 2000dfd0 returned -11 01:12:29 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x12, 0x0, [0x176, 0x0, 0xfffffffffffffffd, 0x8a]}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 01:12:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="415ee1311f16f477671070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x80247008) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0xebe, 0x5a, 0x8, 0x7e, 0x800, 0x5}) 01:12:29 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) [ 162.476506] binder: 12868:12879 Acquire 1 refcount change on invalid ref 0 ret -22 [ 162.489836] binder: 12868:12879 unknown command 1661881956 [ 162.496311] binder: 12868:12879 ioctl c0306201 20008fd0 returned -22 01:12:29 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffff00000000}) 01:12:29 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000246, 0x0) 01:12:29 executing program 6: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={&(0x7f0000a7dfff)}, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 01:12:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_address={0x3, 0x8, 0x2, 0x0, 0x0, @in={0x2, 0x0, @multicast2=0xe0000002}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x88}, 0x1}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x81, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000280)={0x0, 0x1, 0xa9, 'queue1\x00', 0x7}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) times(&(0x7f00000000c0)) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000000000000000000000000000000000000000000000000000000000000000000000007a4d34181700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002106062c20030d1810d3aa069b9354affdf662e0c800a9929ea6f5dcef2b9666ed0b65379dac55e0a54eb199be14e12ea108ba65be9b9513"]) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x80000000, 0x4, 0x8, 0x7, "4cac074d748f21a875aea154869c1e8b3911122ffb7696d0b3191e49a12c52c5"}) 01:12:29 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000047, 0x0) 01:12:29 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) [ 162.930730] rpcbind: RPC call returned error 22 [ 163.231264] IPVS: ftp: loaded support on port[0] = 21 01:12:30 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create(0x7f) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7fffffff, 0x303000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0xfffffffffffffff9}, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) fcntl$getown(r1, 0x9) 01:12:30 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x1000000000000}) 01:12:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x8040) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) write$binfmt_elf32(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x1, 0x5d, 0x4, 0x0, 0x3, 0x3, 0xffffffffffff7fff, 0x1ba, 0x38, 0x3df, 0x401, 0xf0, 0x20, 0x1, 0x20, 0x6, 0x100000000}, [{0x1, 0x9, 0x9, 0x10001, 0x6, 0x7, 0x4, 0x8000}, {0x6474e551, 0x6, 0x7, 0xfffffffffffffffa, 0x0, 0x3, 0x6, 0x7fff}], "9584f118aa3873b0b98bd91efe171fb15fb19e02f90101fba32af4d6d2f984ea9f8135d4985b98e78841d112ab2e171fa54c92d670cc6df02f774d37651fe4d7bcbc4357cc8537e70db1241dd7d149ddeee11d84d0c255cc7b72ad8b3584b3b91b28c5"}, 0xdb) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:30 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) creat(&(0x7f00000000c0)='/\x00', 0x20) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x80605414, &(0x7f0000000140)) 01:12:30 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000005, 0x0) 01:12:30 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:30 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:30 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}) 01:12:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x6a286a67, &(0x7f0000000080)="025cc83d6d345f8f660070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00008f7000/0x2000)=nil) mlock2(&(0x7f000057d000/0x4000)=nil, 0x4000, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 01:12:30 executing program 7: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) getuid() setresuid(0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x40080, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000001c0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000340)=['mime_typemd5sumselfnodev-\x00', '\x00'], 0x1b, [], [0x2, 0x0, 0x3]}) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000775000)) write$cgroup_int(r0, &(0x7f0000000200)={[0x3f, 0x33, 0x31, 0x34, 0x3d]}, 0x5) statx(r0, &(0x7f0000000240)='./file0\x00', 0x1400, 0x802, &(0x7f00000004c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa}) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x6, 0x23, &(0x7f0000000100), &(0x7f0000013000)=0x4) close(r4) close(r2) read$eventfd(r1, &(0x7f0000000140), 0x8) writev(r1, &(0x7f00000001c0), 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 01:12:30 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffe}) 01:12:30 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:30 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000019e, 0x0) 01:12:30 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") sched_getaffinity(0x0, 0x8, &(0x7f0000000a00)) socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x5, 0x50800) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)={{r2, r3/1000+10000}, {0x0, 0x7530}}, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f0000000040)=0x54) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) syz_mount_image$nfs4(&(0x7f0000000240)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0x5, 0x6, &(0x7f0000000580)=[{&(0x7f0000000300), 0x0, 0x3}, {&(0x7f0000000340)="3ef06a341f869480da0b86034d928e509be0938a1c594a629532a84e4ca2ab9bf5e772a9968adcd4f8cc3a633e40bcb558eebce705cbcfcebdd648c984774551a06d0624e9c21dd2746e05c7b8ca064e933255718ee0fadee681ef637dcf83c44064e1f458b56f9107955cc942d19e609272166b96954ad2467217bbdd3af015be8be298", 0x84, 0x8f0f}, {&(0x7f0000000400)="56d9c555", 0x4, 0xff000000000000}, {&(0x7f0000000440), 0x0, 0x6364a511}, {&(0x7f0000000480)="a56dd1f3af917fae8301b5cde14c393c617e0a3c3952ae9e5d1725ddacdd916a4735d98684da1f74178a62c17b04338b8062c156598842156df5f455356913299c7543ddfb5893bbdd951d69e915bf7a38ae6e55", 0x54, 0x8}, {&(0x7f0000000500)="700513bb900f97b8e88aafe5ae420eef35961d85cd672b641235c11c012e00c88ffb83abf05bde471e4650a4e9355ade18f192c0399f627600d7d2dc3f4593aaa48420109e533e", 0x47, 0x100}], 0x0, &(0x7f0000000640)='\x00') r4 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x0, 0x2000) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000080), 0x4) 01:12:30 executing program 4: r0 = open(&(0x7f0000000480)='./file0\x00', 0x800, 0x4) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000004c0)) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0xa0, r5, 0x400, 0x70bd25, 0x25dfdbfe, {0xb}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7e}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x24000040) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000540), &(0x7f00000005c0)=0xc) r6 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)="b3", 0x1, r2) keyctl$update(0x2, r6, &(0x7f0000000340)="df02754677212dfc3e2abcb244e22773e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r6, r3}, &(0x7f0000a53ffb)=""/5, 0x66, &(0x7f0000000140)={&(0x7f0000a3dffa)={'sha1-generic\x00'}, 0x0, 0xffffffa0}) 01:12:31 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x300000000000000}) 01:12:31 executing program 6: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 01:12:31 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f9, 0x0) 01:12:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f00000003c0)=""/103, 0x67, 0xfffffffffffffffb) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/164, 0xa4) getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000340)={@empty, @dev}, &(0x7f0000000380)=0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x400, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040)=""/63, &(0x7f00000001c0)=0x3f) pwrite64(r0, &(0x7f0000000800)="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", 0x1000, 0x0) 01:12:31 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0\x00', 0x10) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r1, &(0x7f0000006800)=[{{&(0x7f0000004f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000005200)="8b", 0x1}], 0x1, &(0x7f0000005300)}}], 0x1, 0x40) 01:12:31 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000285, 0x0) 01:12:31 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:31 executing program 7: socket$inet6(0xa, 0xe, 0x80000000000000c) getrandom(&(0x7f0000000140)=""/244, 0xf4, 0x1) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a00090000000600000000ffffffff00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 01:12:31 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:31 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x400000000000000}) 01:12:31 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3000000}) 01:12:31 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000019b, 0x0) 01:12:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f0000000080)=""/95, &(0x7f0000000040)=0xffffffffffffff07) [ 164.943826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 01:12:31 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x6, &(0x7f0000000040), 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') r2 = socket(0x6, 0x2, 0xffffffff) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000000)=0x7a70, 0x4) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 01:12:31 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:32 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x4000000}) 01:12:32 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x6, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 01:12:39 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-serpent-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="28899ce5f9142d54db009a786154b485c717bbb711ca0cba2b297d460e386f3f5ffebec55287562097bb651cd52846230bdbb73c34663519428714cfc75545f2b950bca3576d573c54637f95c0e50c8d6132c0d8d31d380a350e1eaaa1c79d77ba892c9b44318ae9ff552c7300000000010000003853e8861d67156278a973468df74f2323c88e4579d9df3ef81ec57397eeae0fa148a31b8706c67f0696429e476ae421e61d02d078364b5027d0a34d0105a4494d96b8d1692f95a11be5e82852d3735c91697f2fc0083393dcb2df93f2c0c57b", 0xffffffffffffff04) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)="292736a34f76fcc4b925f34d794f147c50351f01fd6d42156ad56e862862b57c91055c48539381302c3eee5d8019f4d4e13ae1f391f9d051896f778b3ce53476a5b5697147968c29e6da194c1618", 0x4e}, {&(0x7f0000000200)="79f10f1b53468a2fa3f2ce9dbe020473e37631a6ada8ad77cf032a454ec0de7a729d7e76a245e88a6bf3a7b7dfa52462e3c3f4fe735773e1ec45738f9953ea8c8c1a8210162dfa87d11acacf282bf1050f", 0x51}, {&(0x7f0000000500)="1d8efc085f36c7c6d81ad67161929c0a6dbe78ffbbaf2bdf56b65d881e96db0ed05834df2f6d73f7252ebcfc77f77da108d36e2aa8e69c289f2bcc39a1e0833fc812ffc4be5df4e4d834472fb6596c4853aee80f88b0d01a1c4a840d29ca6b2295e0a7207223b8a5b41571d44dd1a38c27ddc53390ad1441a1bd9e5e0311ad4bccc91355de0b64565d22fc5667f17739c960ffae4bea8e4516e71dfeede90f8fbcf32b7232a53ef53ea3f89d4641b26f959bc4dd9a615619784ad4ddf4d9d012a6d7b9635f57e916d979763e38da188f", 0xd0}, {&(0x7f0000000400)="c17774cd14f5e4950a6335e8c9d9d2da21dba970778009e9a07ef87f1ccd2a0c920214a88abd2d19c5ef2fbd17", 0x2d}, {&(0x7f0000000ac0)="656c4b697b4f63b44a394dec328275f8684475b10239ff19c1a0f3d877f515b3e00506f70ad34ea8e5fbd761fdd5d42c95cbcbcddd7c1440c84a43033e7783374a72b5948d088245a1fc456fed30aa0f6b6000c96835e0ba8106dd4814d6cfe20c4b51eac31e511cc64f2957766024f4fe0f3dc18e08a1ce06e8e430de3b23bbe8", 0x81}, {&(0x7f00000006c0)="c66c5ff4d4947e64d9f8caf42496649dab7fc817a2540d637c6fd7ec4f3057924a05096e1ac236fa49c9f195990885cd80f0c4354ba41b47c66e7756bf0b978996c054a492c85f502e29f9d110141acecd35c66f3e3c2ef3d03d3660e206aef2a4b3bc7276fd89df4570c9bd6accab726419e702bdef1e1624ade98e15c099bbe9eec2d6d345ba176820cc3357c7ef9bee5c49ed22b64ead3062632822a015bc44b42d7f4dda9f1b6576f56bb7f8c98f71ebb28a2d4e095dbb24f2d3488409adb813500cad93b3d6d01dc0879a6545f986ae57d8ab71930254c3be4e390b74bf37902f0efa90f26870e51e448e5a0c060115a274077a4f6dc0", 0xf9}, {&(0x7f00000007c0)="317c28de3eab34862ecf8b0360dcae7f43f629128fdf6394fe20a1cd20445d379306245a23fb9f64a04be983c4bde8b72b9b3740df421b2025b89fd05fc5b5eb86754128f8f13895794bbd7868186afa9f34853e2736ab01f66131266362db75c59b2369f9d9318c24923a9295e54877ffc1e2b4fadd32f8d25994fc77c8540086b1963e", 0x84}, {&(0x7f0000000440)="a30e26a6b58c6458d71d7e2ada9d341d40083b21a723aff0", 0x18}, {&(0x7f0000000880)="730a102a4ff3d772236698f5868748f1d656e3188a8959aa1114583dd5032f50c845d8d373ffe86cbb74cecc01dcd7f21ce0db", 0x33}], 0x9, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x5c}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 01:12:39 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:39 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000f2, 0x0) 01:12:39 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x1000000}) 01:12:39 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}], 0x1, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5d2, 0x101000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0)={0x1}, 0x4) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x6) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x0, 0x4}) unshare(0x0) 01:12:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:39 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x3a3) sendto(r0, &(0x7f0000000200)="4d69e1e9190b43079ccabbedb8049547f29df65ff72273b796cf366869afe38dfb954d0e33e1227378f3147bf54d1bdc9da020237f8ca3506491e3dd09ca419df480034fdf24d7c9458b40db0eef5ccfcc33408e6aac49a6540de3551a3895b69e430043a2d2ef9e0a4d5f920dbba1d33f74b296f4597ec34d47d0527fc8a1769481ece0a6ba16178a53977877f56856aedc123174c4558bcf718305d46857e2d7282d93c0fa81b63cd8cd592639bef5f826ff5018f3b348b97967d6681e4a59c9", 0xc1, 0x20000000, &(0x7f0000000300)=@can={0x1d}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f0000000140)="d45ba151", 0x4, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x8001, 0x4) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0xc, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=""/36, 0x24}, 0x2000) 01:12:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008310008fe765d060cbcb62410abb5cd4e344cd000280fa00720a00ff"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5, 0x0, 0xffffffcd}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x24880e86, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) r3 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x5488, 0x408000) bind$xdp(r1, &(0x7f00000005c0)={0x2c, 0x5, r2, 0x3f, r3}, 0x10) 01:12:40 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0xc000}) 01:12:40 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001a2, 0x0) 01:12:40 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:40 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:40 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3}) 01:12:40 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001a3, 0x0) 01:12:40 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0x7530}}, &(0x7f0000000040)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(tnepres-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005940)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000000c0)="c1", 0x1}], 0x1, &(0x7f0000000240)}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004b00)=[{{&(0x7f00000027c0)=@ipx, 0x80, &(0x7f0000002840), 0x0, &(0x7f0000004a00)=""/245, 0x46}}], 0x40000000000019e, 0x0, &(0x7f0000002880)={0x0, 0x1c9c380}) 01:12:40 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x200000000000000}) 01:12:40 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0xb4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101100) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000340)=""/4096, &(0x7f00000000c0)=0x1000) 01:12:40 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000084, 0x0) 01:12:40 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}], 0x1, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:40 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0xfeffffff00000000}) 01:12:41 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000180)={0x7, 0x800, 0x8, 0x80000001}, 0x10) fsync(r0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) msgget$private(0x0, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r2, &(0x7f0000000540)=""/103, 0x49, 0x0) write(r1, &(0x7f0000000000)="be233f399b5d51272e25ede8b85f62772c3f3d226200eea0e0c86a3bcb1dfe63ff4a9d2b1938373081bc0d5301b71effc9c5f9ca2e7905b18d92bfbf00fd2319f217108a82333e4cc50e347ec9a748e171044332b61cdd3c97fc2f9a035d68e4d1f923a0dcd700e7ff3c6375dd0ad80e110aade195deefa6dc143f0d1316801b93db5b1a5fd9b59ef80c30f2d7f42e0573ad644462b35edd24d02699941b71efa6083bcb2056e05939ce4aa07c", 0xad) chroot(&(0x7f0000000200)='./file0\x00') pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) 01:12:41 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:41 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000070, 0x0) 01:12:41 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x101, 'queue0\x00'}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x4}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000340)={0x0, 0x0, 0x1ff, 'queue1\x00'}) 01:12:41 executing program 6: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x5ee, 0x32) sendto$inet(r0, &(0x7f00004e9000), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") recvmsg(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000006c0)=""/110, 0x3ac}, 0x40012021) 01:12:41 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x100000000000000}) 01:12:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={"65727370616e3000000000000200"}) 01:12:41 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000226, 0x0) 01:12:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080), &(0x7f0000000040)=0xffffffffffffff02) 01:12:41 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x2000000}) 01:12:41 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 174.123604] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:12:41 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/autofs\x00', 0xa0180, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000800)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='*\\,[^G\x00', 0xfffffffffffffff9) r4 = add_key(&(0x7f0000000900)='dns_resolver\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000008c0)="c927d625d9df8585f0de236fb6e940c35f929964600cd65d695036d0f5adbf6c34f759aaf09f245fdacc1dd461655674c0914c331e3b010000000000000000", 0x2, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) keyctl$reject(0x13, r3, 0x7fff, 0x7fffffff, r4) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000480)=0x5) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/150, 0x96}, {&(0x7f0000000280)=""/213, 0xd5}, {&(0x7f0000000380)=""/223, 0xdf}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/45, 0x2d}, {&(0x7f0000000500)=""/154, 0x9a}], 0x6, &(0x7f0000000640)=""/193, 0xc1, 0xff}, 0x7}], 0x1, 0x20, &(0x7f0000000780)) unshare(0x400) vmsplice(r2, &(0x7f00000015c0)=[{&(0x7f00000014c0)}], 0x1, 0x0) 01:12:41 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0x0) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:41 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000187, 0x0) 01:12:41 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)='8'}, 0xfffffffffffffff6) 01:12:41 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}], 0x1, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:42 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:42 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x4, &(0x7f0000013ff4)={@multicast2=0xe0000002, @rand_addr, @multicast2=0xe0000002}, 0xa) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x12, &(0x7f0000000000)=0x10000003ffffff, 0x4) r3 = dup3(r1, r2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000080)={'bridge_slave_0\x00', {0x2, 0x4e22, @broadcast=0xffffffff}}) 01:12:42 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:42 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1000000000000}) 01:12:42 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000156, 0x0) 01:12:42 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}}}, &(0x7f0000000100)=0xb0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 01:12:42 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18) prctl$void(0x1f) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x8000) 01:12:42 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000170, 0x0) 01:12:42 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1000000}) 01:12:42 executing program 7: sync() r0 = socket(0xe, 0x100000801, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x20000000002) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x8001, 0x9f40000, 0x9, 0x3, 0x0, 0x8, 0x7, 0x1, r2}, &(0x7f00000002c0)=0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'teql0\x00', 0xa201}) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0x3, 0xfffffffffffffffe}) r3 = syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x3, 0x40) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x101800, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e20, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, {0xa, 0x4e21, 0x7fff, @local={0xfe, 0x80, [], 0xaa}, 0x10000}, 0xffffffffffffff00, [0x3, 0x10000, 0xa9, 0x5, 0xa7, 0x6, 0x8ac]}, 0x5c) io_setup(0x468, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100), 0x12c}]) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000300)={0x7fff, 0x1, 0x3, 0x5, 0x1, [{0x4, 0x3, 0x40, 0x0, 0x0, 0x2}]}) 01:12:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x9, &(0x7f0000000580)=[{&(0x7f00000000c0)="b210a742fb931dd6a2bd05c2fd853ba72b101351f794f8b8368529deac3e", 0x1e, 0x6}, {&(0x7f00000001c0)="843ed42f046ce165fb4d73a770810efaed69241b7efaf5ce410f9f8659ea93dac7d780775e1310d7f37d095515ca86163012924d73fec146fc75ec8b1e75fe9069362618fb21003969ac2c3f7b0bde9415b01f904a1e6dd010ffa3d7aa5d00cc972ac1f8d0604dd1d7c3a71cc15c547546d0634744f4145659c96f91e3fa2dd9e3b74c20434c35b20ea0ff4ddb50fe3e92854b120bcda3e389d2a7ea5803647c8de8b4037bfcccc6cea364aef9f5149b0dce4f6775", 0xb5, 0xc33}, {&(0x7f0000000280)="04776deeafc566a4ceefab5409542cb4a387bf951fa97215580b439acbcf4bef75605082b286b4f8bd54b380c8839116cbffb9b44f72ffa20632295377292ce18fad61124019658b1aa38701bff8705ad2c04aebc7d347bc8f89aad43e0d32c10be6fcb7d8c2511983160088410fbe12251c11d4c031e297e12837b9f303c3544ee719e2716d94223e963f980d00d6ba3585455fbf67f045ebcb82e4f68928a42d6e267329b22a836ae7342c", 0xac, 0x401}, {&(0x7f0000000340)="99b812adcef9d9d38f04c630cd424062453e9f6ef4e940aca74c401a3b75ee490e41a31b37ea62cdd2991434e5c14a576cedcddffd1e96953dcbe3635b0baffae26d527a8b08fb644904b1508065e46ab4b057", 0x53, 0x9e4}, {&(0x7f0000000140)="cdb93c", 0x3, 0x8}, {&(0x7f00000003c0)="f6b258f8ac5e78d290bf584c89321f2045a7e12db547ea2231c6693ec0a606757274368f39fdb2bb520a8a908bf52bd5194f27763a48dba73b432d50a9ea7962541046cddf04312b1b3a1c9b7bb4c90bb2bf5f3558aeee79198d55c8dd58071e10151ca6f41f665421af2faa62efe75adead73611f13d7a5457b129aa7f3be01ebd5c2f6b5e56d70b9c3198ec3d4d2aae718f58c670b369e1ad74b8fa7ad1f52abf6d3b2daf79374bbfbf3cbf8cc2384c176e328a5ce4d46fe55d2afb93c60b5f05e2c38c6c23eaba5ab14620a62a354a0968f0d4da4f3c9fa7269e8b70b3aaf0d1d396ce729e42ff23570f3b2ce9f4c63cc", 0xf2, 0x101}, {&(0x7f00000004c0)="48b2f8a56c0aacfbd23fb86725dcb07188d0a336a5850196b2a5d3fc5cb765150a6b5857d503aa184fcb85b9ac67b0197a6db9bd73", 0x35, 0x1f}, {&(0x7f0000000500)="4dc92059f1069d092b61c565752ae64c5314", 0x12, 0xffffffff}, {&(0x7f0000000540)="a81a9afa93a8b8eab059c50e910c", 0xe, 0x9}], 0x10, &(0x7f0000000680)={[{@nobarrier='nobarrier', 0x2c}, {@datasum='datasum', 0x2c}]}) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) unshare(0x20000) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[]}, 0x1}, 0x0) 01:12:42 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x2000000}) 01:12:42 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ac, 0x0) 01:12:42 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000c97ff8)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6, @in=@multicast2=0xe0000002, 0x4e22, 0x7f7, 0x4e20, 0x20, 0x2, 0x80, 0x20, 0x88, 0x0, r4}, {0xabc4, 0x3, 0x4, 0x3, 0x3, 0x5, 0x8, 0x8000}, {0xe37, 0x0, 0x1, 0x81}, 0xff, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x2, 0x4d5, 0x3f}, 0x2, @in=@rand_addr=0x1, 0x0, 0x3, 0x0, 0x400, 0xffffffffffffffff, 0xd56, 0x1}}, 0xe8) close(r3) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)) 01:12:42 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x4000000}) 01:12:42 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x0, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:43 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:43 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024e, 0x0) 01:12:43 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0xffffffffffffff85) r0 = socket$inet6(0xa, 0x100000001, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x392d, 0x2) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x2, 0x80000001, 0x1, 0x5}, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000140)=ANY=[@ANYBLOB="e40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d34a90ba203124f4fe4d12a900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0xffffff85, 0x1, 0x14}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 01:12:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000140)={0x7, 0x2}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000e9f000)=0x60020d) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) pread64(r2, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000000)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x81, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x13}}, 0xeb7}, 0x1c) 01:12:43 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000037c0), 0xe3) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000240)=0xffff) connect$rds(r1, &(0x7f0000000280)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sync() getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7fff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={r2, 0x41, "25caf996b490f877a61e818fb2cdc6e56834b89fb34b33e5fab1fe6fdd5fba0ad55b87c562f5d490b1b323512308466f288b65f9641538740da397de3c77cb2be1"}, &(0x7f0000000200)=0x49) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000780)={"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"}) 01:12:43 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000256, 0x0) 01:12:43 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xc000}) 01:12:43 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xc0}) 01:12:43 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000024c, 0x0) 01:12:43 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xffffffff00000000}) 01:12:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000040), 0xffffffffffffffd9}}], 0x1, 0x20000001) 01:12:51 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xc000000000000000}) 01:12:51 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000241, 0x0) 01:12:51 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x0, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:51 executing program 7: ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") io_setup(0x3, &(0x7f0000000140)=0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x7, 0x20100) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x20001, 0x0) io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x100000001, r1, &(0x7f0000000240)="0c1690d588ce07d3b9904de9249a423d01a7b41b884b729bd5583cd433ce7aa7a18eec4c6d3cc4fb600faf8ef647687b6a78908634923b10ab6d6413b262aa7a88bc745162bc6e8c4fb742223d7ea0cdde4dfe989eaaaf7c48d4e3cfc1a162e92e98f4131853329d9ec7a2ec0ce6463f283c384ce8f1f3120e602287fc12aa4ab4412400f3752d15a6aafe425a4b10b8", 0x90, 0x401, 0x0, 0x1, r2}, &(0x7f0000000340)) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x10001, 0x80000) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) prctl$setname(0xf, &(0x7f0000000200)='/dev/audio\x00') ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000380)={0x101ff, 0x0, &(0x7f0000ffb000/0x4000)=nil}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$setsig(r4, 0xa, 0x3e) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) 01:12:51 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:51 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x16b, 0x80) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000100)=[{0x5, 0x7ff, 0x986, 0x1ff, @time={r1, r2+10000000}, {0x2, 0x5}, {0x3, 0x1}, @connect={{0xfffffffffffffbff, 0x3}, {0x3}}}, {0xfffffffffffffff4, 0x3, 0x4, 0x7f, @time={0x77359400}, {0xcee, 0x1}, {0x20ee, 0x2}, @addr={0x4e, 0x4}}, {0x9, 0x8, 0x3ff, 0x9, @tick=0x8000, {0xff, 0x3}, {0x3, 0x401}, @addr={0x0, 0x1000}}], 0x90) r3 = syz_open_dev$tun(&(0x7f0000008940)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"ff030f00d34892babf7b806e000200", 0x4012}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x9, [@empty, @link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) 01:12:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x101000) r1 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x81, 0x284000) getsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f0000000380)=""/227, &(0x7f0000000480)=0xe3) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000000)={0x2e, "de82e217bdc93f5dd40b7fd6a59c1a461f3060265e21389c344147b79db204a327ae0981314f6934697294135791"}) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r2, &(0x7f0000000540)=""/103, 0x49, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4e22, 0x7fffffff, 0x4e23, 0x10000, 0x2, 0x80, 0x80, 0x0, r3, r4}, {0x9, 0x3, 0x9, 0x5, 0x1ff, 0xfc52, 0x20}, {0x1, 0x7fffffff, 0x7, 0x9c}, 0xb7, 0x0, 0x3, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4d5, 0xff}, 0x2, @in6=@loopback={0x0, 0x1}, 0x34ff, 0x3, 0x3, 0xc3, 0x95, 0x7ea, 0x20}}, 0xe8) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) 01:12:51 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000006e, 0x0) [ 184.700283] Unknown ioctl 1074835010 01:12:51 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x400000000000000}) [ 184.730760] Unknown ioctl 1074835010 01:12:51 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0xfffffffffffffc83) 01:12:51 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x20000000000000) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x80000}) 01:12:51 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000010e, 0x0) 01:12:51 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfeffffff00000000}) 01:12:51 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000400)="2998cc61e816f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') close(r1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xbf, "27d201044aeb125f1e6015712fe908978e3f567e5c2ccfbbf29c3d0dbd9340e5e8f2a775e35f8b7481b992fb37e58c701bb426c20ee5aad33652bf59f0866712fb277e14215353073942ea464fb4d3f8ab9aa5e5434bac12bca8f3863a2be299915f2639135067e57cf4b60a465d3c7051d402f1a99107f7732cf8940d499e3cc473b7abc96e44aad2b0e2181f663387ee03ac5edca8c865aa8cded4ae3b38ef835c425bf2ae0e6fc71132f2f730e8615ae75f989f429ee58a85c4d73272a4"}, &(0x7f0000000140)=0xc7) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x4}, 0x8) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000000)) 01:12:51 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000001c0)=0x8) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f000000cffc)=0x6, 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x21, "a640720ff4888c208160288959e473d52d83b3ccc45b4d5966cbf1ea94ed3d0951"}, &(0x7f0000000240)=0x29) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r2}, &(0x7f00000002c0)=0x8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1, 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0xfff, 0x0, 0x400, 0xca, 0x4, 0x9, 0x0, 0x5, 0x6, 0x4, 0x3, 0x9}) pread64(r0, &(0x7f0000000080)=""/199, 0xc7, 0x35) sendmsg$nl_xfrm(r0, &(0x7f000000a000)={&(0x7f0000008ff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000007000)=ANY=[@ANYBLOB="f0000000100029010000000000000000e0000002000000100000000000000000ff02000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xf0}, 0x1}, 0x0) execveat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000340)='@}.(wlan0\x00'], &(0x7f00000004c0)=[&(0x7f00000003c0)='self\x00', &(0x7f0000000400)='posix_acl_accesskeyring\x00', &(0x7f0000000440)="2f6d643573756d2f275b657468306c6ff973797374656d637075736574402d656d3147504c213a2d7070703100", &(0x7f0000000480)='lowlan1{em0vboxnet1#:lo\x00'], 0x1000) 01:12:52 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026a, 0x0) 01:12:52 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfeffffff}) 01:12:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a84309c026236903000b0004000800d7ff00009848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x40000) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x40, 0xa9, 0x5, 0x9, 0x1, 0xffffffffffffffff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, r3, 0x400, 0x70bd29, 0x25dfdbfd, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xa0}, 0x1}, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r4, 0x102, 0x70bd2d, 0x25dfdbfb, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7c9b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6f8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) 01:12:52 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000067, 0x0) 01:12:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400080, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000000c0)=0x2, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x0, r3}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x10) close(r4) close(r1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x100000000) 01:12:52 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x7d, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000e56f0155dc6d8ea23d02f9da9089ba1ce8f4e7f85e07feae4e74aa3ce992cbb7b3411081d7875fcf4021e10b"], &(0x7f0000000080)=0x23c) 01:12:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100000202, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000000540)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = geteuid() fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x1, r2, r3, 0xfee, 0x2, 0x280000) ioctl$BINDER_SET_MAX_THREADS(r1, 0xc018620b, 0x8) rt_sigpending(&(0x7f0000000000), 0x8) 01:12:52 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x300}) 01:12:52 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x0, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/28, 0xff3f) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x8000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x9059, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000080)={0x0, 0x6}) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000b94000)=""/246) unshare(0xa000000) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r2, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) 01:12:52 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64], 0x8) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:52 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x4}) 01:12:52 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029d, 0x0) 01:12:52 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff]) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000480)={{0x40, 0x0, r1}, 0x0, 0x7ff}) rt_sigtimedwait(&(0x7f0000000280)={0xfffffffffffffe01}, &(0x7f00000002c0), &(0x7f0000000240)={0x77359400}, 0x8) 01:12:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000480)="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") syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="00080000ec0500006d8a2b001200000008080000b90200000001000084811f4ce10000001e000000000000000010ec0302e5fb00526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000013900)) chroot(&(0x7f0000000040)='./file0\x00') [ 185.875856] binder: 13432:13440 ioctl c018620b 8 returned -14 [ 185.895614] binder: 13432:13443 ioctl c018620b 8 returned -14 01:12:53 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffe}) 01:12:53 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000018c, 0x0) [ 186.083500] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 186.092880] REISERFS (device loop4): using ordered data mode [ 186.098985] reiserfs: using flush barriers [ 186.106508] REISERFS warning (device loop4): sh-458 journal_init_dev: cannot init journal device 'unknown-block(8,8)': -6 [ 186.117884] REISERFS warning (device loop4): sh-462 journal_init: unable to initialize journal device [ 186.127724] REISERFS warning (device loop4): sh-2022 reiserfs_fill_super: unable to initialize journal space 01:12:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") gettid() r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/rfcomm\x00') read(r2, &(0x7f00000000c0)=""/240, 0xf0) 01:12:53 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x100000000000000}) 01:12:53 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000056, 0x0) 01:12:53 executing program 7: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x4, 0x7}], 0x18) r0 = syz_open_pts(0xffffffffffffff9c, 0x2) pwrite64(r0, &(0x7f0000000140)="b8d2cfb8a3dd5e1073b4f178231fcc3756d7f8180d796ec7a80c63979c3ca95a9879d849647c91f8ebca07b85387058662a6def4987e01736f1b8b3c0dbd68c65d0deaf8af900444df0e3c6f2db34a1e65a30a9118217c69e341457aae8585eb3d3db8c9ead8c104ddff3e21702e6e8d670622baeedb75c409b555f9eb3d047ff01736c4947ac9e1bc4463540f1a4b3517", 0x91, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x14}, {}], 0x26a) r2 = memfd_create(&(0x7f0000000080)='md5sum\x00', 0x3) bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, {0x1, 0x4, 0x9, 0x401, 0x3d, 0x5}}, 0x8) 01:12:53 executing program 4: r0 = getpgrp(0x0) sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x0) clone(0x200, &(0x7f0000000100), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000280)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x101}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x3, 0xaebd30c, 0x918}, &(0x7f0000000280)=0x10) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000775000)) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') read$eventfd(r4, &(0x7f0000000240), 0x8) read$eventfd(r4, &(0x7f0000000000), 0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x161280, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x7ff, 0x8000, 0xfffffffffffffffd}, &(0x7f0000000300)=0x10) 01:12:53 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xc0000000}) 01:12:53 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027e, 0x0) 01:12:53 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:54 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000157, 0x0) 01:12:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64], 0x8) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:54 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x2}) 01:12:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000b94000)=""/246) fcntl$setlease(r0, 0x400, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r2, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) 01:12:54 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000480)='keyringselinux\x00', 0xfffffffffffffff9) r3 = request_key(&(0x7f0000000500)='id_legacy\x00', &(0x7f0000000700)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000580)='keyringselinux\x00', 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r3) getresuid(&(0x7f0000000540), &(0x7f00000006c0), &(0x7f0000000740)=0x0) keyctl$get_persistent(0x16, r5, r4) r6 = open(&(0x7f0000000780)='./file0/file0\x00', 0xa0400, 0x10000001) ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f0000002a00)={0x4, @link_local={0x1, 0x80, 0xc2}}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r8 = getgid() lchown(&(0x7f00000001c0)='./file0\x00', r7, r8) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x8) accept4$packet(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x14, 0x800080800) rt_sigprocmask(0x1, &(0x7f0000000300)={0x7}, &(0x7f0000000340), 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000007c0)={'bridge0\x00'}) setuid(r7) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000680)={@multicast2=0xe0000002, @rand_addr=0x3, r10}, 0xc) symlinkat(&(0x7f00000004c0)='./file0\x00', r6, &(0x7f0000000640)='./file0/file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) creat(&(0x7f0000000380)='./file0\x00', 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89a1, &(0x7f0000000140)={'bridge0\x00', 0x10006100}) ioctl$int_in(r1, 0x5452, &(0x7f0000000340)=0x4) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 01:12:54 executing program 7: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x0) connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) set_tid_address(&(0x7f0000000140)) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000200)={0x200, 0x3, 0x6, 0xfffffffffffffff9, 0x4, 0x100000001}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0x4e23, @rand_addr=0xfffffffffffeffff}, @in6={0xa, 0x4e23, 0xffffffffffff8001, @local={0xfe, 0x80, [], 0xaa}, 0xb32}, @in6={0xa, 0x4e21, 0xff, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1c}, 0x1000}, @in={0x2, 0x4e21}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}], 0xa4) getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000400)={@remote, @loopback, 0x0}, &(0x7f0000000440)=0xc) bind$bt_hci(r3, &(0x7f0000000480)={0x1f, r4, 0x2}, 0xc) getdents(r3, &(0x7f00000004c0)=""/19, 0x13) r5 = socket(0x0, 0x3, 0x6) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000500)={0x2f, @rand_addr=0x7, 0x4e23, 0x4, 'sh\x00', 0x1, 0x40, 0x41}, 0x2c) sendmmsg(r5, &(0x7f0000002d40)=[{{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x4, 0x3, {0xa, 0x4e22, 0x200, @empty, 0x80000000}}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)="b476c73986a90c50c39789da9991d9dc0a1aed91be730a6fb46e84f70768a9734640343092c851fc274a798734dc3be8a1af5dfaade8b3a34c6c40278305ed19a32ab10c178d2dd0c9c517fce2792b00fc512a9466b0192adff012408d1caac46014e48de955aecaaa0d6c6f13955bce7524959cf6de666acd392304d7c9cd4302721426b28bd25e7f43985f8633b131e1dde4dcaf412064a304", 0x9a}, {&(0x7f0000000680)="723d14c2c582d6eedd748ea52ff30eb81c5425bccf44db10c0b8b98726a4dd4157bec79cbaa57cfc7b10d56952c10c6cd2f5a610db0a125f02e08d8a89cb9e503cdbc5", 0x43}], 0x2, &(0x7f0000000740)=[{0x70, 0x11f, 0xfb, "19b4b7bec48c07b2842f873a4e0eac6d11007c7719fe1f645ae374fba559d2d1fa5dfd9391a277d92e71a478b1777b2903d905b557dc5f0d5b9dd738a9c51ad9c615de885573beaa21884bd7463d05dfa56e84f6c1ddf339f74bea"}, {0x88, 0x11f, 0x1, "7fe78a2de014a0d5f6c801f0139a4e21518789a2951415b3f31b7440f0aa3cc34854591594f1cf0ae07e9f979e37546295e381ff467f865d7473172848c7dbf325e425714254c72b1298db96c85f0c53b1f9e55fbc7aab27bfa7e07aa1709717abe5a78f6291c4f56d7530f9bfed78261e"}, {0x20, 0x117, 0x0, "07e5e9d4d9656a4b6829"}, {0x1010, 0x0, 0x2, "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"}, {0x1010, 0x115, 0x3, "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"}], 0x2138, 0x40080}, 0x81}, {{&(0x7f0000002880)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002900)="a352e1ff66c509551cef58013ef22daea9c87beebc1513383dc29a49340154b3bdbaecbc7be0b32f67bc20b70d83b5c2bf0f6a3a60f74dcff02c", 0x3a}, {&(0x7f0000002940)="2520cfd1ff94d5e1a5b4c7fefb1769e096fee0d49fbdf3069977e18d99de3155b53f308a91b4d0f8", 0x28}, {&(0x7f0000002980)}, {&(0x7f00000029c0)="10d1490ecead64b4f1f0e8c5b4cee19e61770e834440158539cd8d786de62c179a4302f1fe8763b65eda53cc282a1dfa03c91145c4285eaafce08f8d912c856e8760f1fe45a601d17613e23d6af73b55e58ebe6c5ac500e3f0391545bbf817155998dec35e0bd28c1a350920e271664bf3094bc3eefe8dfc9086de4b626ebbe1aa70cddff9933f6a80f4b7237f06a1ad37027ce22c41a5472c00b4442c43679379f0587cf0ff1115bb67958523fa6c94003d17275fc840f07b15bfe8a6b4cd7ec71764fc7a2506fce4916623f33998c8a64e0a44482f5372b8", 0xd9}, {&(0x7f0000002ac0)="a860e1f64bf8495b6bcb21b88d69", 0xe}], 0x5, &(0x7f0000002b80)=[{0x40, 0x10f, 0xffffffff, "89beaaa62f37539e528ad99f5d637bcc910ced69f196d7b0ca90bb928cc8514c8d50c38b07fe3436a3"}, {0x38, 0x11f, 0x10000, "19553694c0d4ce9c97629f8247f5384a86d88af082d5abf3f9dbf8feefcaa3c7306d0a6008f59b7b"}, {0x110, 0x11f, 0x600000000, "321286192df7e3ffa0f843958b04668e33039d46615590e9d2add050428d9fbd6780a3479a2a198e174bfe14661869bde1c25c28594ec0c2310c5954a95018fd6b33aed654b711ae9d23297a5f7fdd30a8cca09b1342d04727622d3eedcbed81404199b7042343ca69ab76eb99c4032d418010b1a35e9811b3c7d8ba7a228d38789bf4d41f469cdb5bde806d9fc3875b5ce04b2b2c95f80d8214eb07aaa589d832862695ec4c67d7904c74e89165d0804fc7d9266d768ae0314cdb4a9a4b060f4c5f2ec567f6810594d900c63b512c213fea0cb6a0b751a252408236cc92a0a96d598b6838fa2983d128b82d4030b35f3ca7cad497918fa3b4997a7cd8"}], 0x188, 0x4000000}, 0x80}], 0x2, 0x10) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000002dc0)=0x0) tkill(r6, 0x39) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000002e40)={0xa28, {0x2, 0x4e21, @broadcast=0xffffffff}, {0x2, 0x4e20, @loopback=0x7f000001}, {0x2, 0x4e20}, 0x32, 0x2, 0x0, 0x7fff, 0x9, &(0x7f0000002e00)='veth0_to_team\x00', 0x4, 0xffff, 0x7}) openat$cgroup_subtree(r3, &(0x7f0000002ec0)='cgroup.subtree_control\x00', 0x2, 0x0) lremovexattr(&(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40)=@known='system.posix_acl_access\x00') ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000002f80)) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000002fc0)={@mcast1}, &(0x7f0000003000)=0x14) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000003040), &(0x7f0000003080)=0x14) sendto$inet(r3, &(0x7f00000030c0)="c99f79c7786dd62548edcdfddd346c915d09ba8b6ab0dda4581d773558ac3692f61b5f531489c2bcd74cb35c70861ca90dc1c04da69961ab475c1f5e462542ce259bbc6d1873a466422fe21adb4fbe691eb5be2a0cfaa2882a6a4d14ef1a8ff668e104b44faddab164c3bc12c427af98ea16df4396400e1fa36a76b882829d054fa895f8a14c62ef8b2d4b93324a00181d6c84", 0x93, 0x20000000, &(0x7f0000003180)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000031c0)={0x9, 0x7, 0x2ff, 0x25c, 0xffffffffffffff7f}, 0x14) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000003200)=0xc, 0x4) perf_event_open(&(0x7f0000003240)={0x5, 0x70, 0x3, 0x9, 0x6, 0xcba8, 0x0, 0x5, 0x0, 0xe, 0x3f, 0x5, 0x6, 0x200, 0x0, 0x20ecf3a6, 0xb493, 0xffffffff, 0x7, 0x99f, 0x5, 0x4, 0x2, 0x1, 0x7ff, 0x2, 0x1, 0x5, 0x8, 0x6, 0x40, 0x284, 0x4, 0x8, 0x9, 0x5, 0x0, 0xffffffffffffffb8, 0x0, 0x2, 0x0, @perf_config_ext={0xa3d, 0x7f}, 0x4000, 0x2, 0x0, 0x7, 0x1, 0x1, 0xe68}, r6, 0x10, r0, 0x3) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f00000032c0)=""/84) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000003340)=""/58) 01:12:54 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3}) 01:12:54 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000129, 0x0) 01:12:54 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000367fed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) select(0x40, &(0x7f00000001c0)={0x200, 0xea, 0x2, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xfc}, &(0x7f0000000200)={0x1, 0x2, 0xfffffffffffffffe, 0x2, 0x7, 0x80, 0x0, 0x154f}, &(0x7f0000000240)={0x40, 0x6, 0x7, 0xfffffffffffffff7, 0xffffffff, 0xfffffffffffffffe, 0x2, 0x6}, &(0x7f00000002c0)={r2, r3/1000+10000}) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x8000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="6c777739d593e284a9", 0x9, 0x3}], 0x800, &(0x7f0000000100)='{,keyringselinux^\x00') r4 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0xa00) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140)=0xffffffffffffffcb, 0x4) openat(r4, &(0x7f0000000180)='./file0\x00', 0x0, 0x140) [ 187.209937] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.217232] bridge0: port 1(bridge_slave_0) entered disabled state 01:12:54 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000007c, 0x0) 01:12:54 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3000000}) 01:12:54 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() fchown(r0, r1, r2) 01:12:54 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000112, 0x0) 01:12:54 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x300000000000000}) 01:12:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x204201, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x3, 0x1}) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, r1, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) 01:12:54 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:54 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000225, 0x0) [ 187.993208] device bridge_slave_1 left promiscuous mode [ 187.999593] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.022693] device bridge_slave_0 left promiscuous mode [ 188.028832] bridge0: port 1(bridge_slave_0) entered disabled state 01:12:55 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64], 0x8) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:55 executing program 7: r0 = memfd_create(&(0x7f0000000100)='\x00', 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0xc3, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}}, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x11, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 01:12:55 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x200000000000000}) [ 188.039646] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:12:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000000), &(0x7f0000000040)=""/189, &(0x7f0000000180)=""/63, 0x103000}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000240)) pread64(r1, &(0x7f0000000100)=""/103, 0x67, 0xfffffffffffffffc) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x40, 0x4) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x5, 0xf4410bc07e8e91c6) r2 = socket$inet6(0x10, 0x80000000002, 0x0) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="5500000018007f5300fe01b2a4a280930a60000000a84302910000003900090023000c00020000000d000500000000000000c78b80082314e9030b9d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 01:12:55 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ec, 0x0) 01:12:55 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x60) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000004c0)={0xffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r2, 0x18a4}}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x6, 0x7, 0x8001, 0xb1, 0x1}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r3, 0x8, 0x401, 0x43ca5c9f}, &(0x7f0000000180)=0x10) alarm(0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0x7, {&(0x7f0000000200), r4, 0x1}}, 0x18) 01:12:55 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 01:12:55 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mount(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='befs\x00', 0x40000, &(0x7f0000000200)="50c0e34d58518de1964f83c136dd649ea37471d8c54f46e310ecec6f6e6abdfa2e8fd854dd684763929f69adb7e02fec7905ce97d54ba288e8fb6c7f7d99c0179b9a7876f482705588b9666528efc77fdadd7a3fbeec08000e7314129592") mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000280)='./file0/bus\x00', 0xfffffffffffffffe) r3 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r2, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r4 = dup(r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r4, 0x0) sendto$inet(r4, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0xe, &(0x7f0000018000)={0x0, @in6={{0xa}}}, &(0x7f0000000000)=0x8c) 01:12:55 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001a5, 0x0) 01:12:55 executing program 4: kexec_load(0x3, 0x0, &(0x7f0000000040), 0x16ffff) 01:12:55 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x5) sendto$inet(r0, &(0x7f0000001700)="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", 0x5b1, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x3ff) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 01:12:55 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfeffffff00000000}) 01:12:55 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="220000001800070700be0200090007000200001200000009000eff0005000f80ff00", 0x22) socket$l2tp(0x18, 0x1, 0x1) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000000)=0x68, 0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x9}, 0x8) [ 188.822506] netlink: 'syz-executor4': attribute type 15 has an invalid length. [ 188.830992] netlink: 'syz-executor4': attribute type 15 has an invalid length. 01:12:56 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:12:56 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000c6, 0x0) 01:12:56 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64], 0x8) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:56 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x200000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x20000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000200)={0x10001, {{0xa, 0x4e21, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x8}}}, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000140)=""/47) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x9, 0x2000) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x1e4, 0x10105003) 01:12:56 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000000000000}) 01:12:56 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026d, 0x0) 01:12:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000000100)}) 01:12:56 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc0000000}) 01:12:56 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ctr(serpent),poly1305)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002380)=[{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001d40)="280565f8cc0b974a09202f9167c51a83b2a652d22d27f47f7666d60c9707b554b75693b0750bac11798d9a4fe6c1fc98549e773b0b7425eccecc4db1e919853e33c726156934bc902b2c830fd34b6a97fd58fe3a09fed7fef88e562149c500f924dd2b65c68308bce9fd461543aba1dbd71cac220b2a719a0374391499bf899e0d14bd08e6668a043713fd9deb63e8809032", 0x92}], 0x1, &(0x7f0000001ec0), 0x0, 0x4}, {0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002300)="5d94dd98d3cbc5acaaedac98bf106c872cb92b01020555e86463e5f7334060303962ef108f83dfa9d17beaf82e74", 0x2e}], 0x1, 0x0, 0x0, 0x800}], 0x2, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, &(0x7f0000000040)=""/87, 0x57}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000001240)={'NETMAP\x00'}, &(0x7f0000001280)=0x1e) 01:12:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) fcntl$getown(r0, 0x9) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:56 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeff2, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0x25cc, 0x0) ioctl(r0, 0x227b, &(0x7f0000000000)) 01:12:56 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000000}) 01:12:56 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000290, 0x0) [ 189.596785] binder: 13676:13678 unknown command 0 [ 189.609771] binder: 13676:13678 ioctl c0306201 20008fd0 returned -22 01:12:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x222000, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000040)={0x4, 0x4, 0x10001, 0x7fff, &(0x7f0000000240)=[{}, {}, {}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$binfmt_elf32(r2, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffffa, 0x1734, 0x7, 0x7fffffff, 0x1000, 0x3, 0x0, 0x40, 0x3a1, 0x38, 0xb4, 0x20, 0x3, 0x20, 0x1, 0x6a7, 0x9, 0x1}, [{0x0, 0x5, 0x40000000, 0x8, 0xf5b5, 0x23000, 0x9, 0x200}, {0x70000007, 0xfffffffffffffc00, 0x0, 0x1f, 0x2, 0x6, 0x8, 0x1}], "3af15daa7ba17f2a03b3526d5a2f772e4ead0e", [[], [], [], [], []]}, 0x58b) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) read(r3, &(0x7f0000000100)=""/137, 0x89) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x7b, 0x0, [0x40000071, 0x48501]}) 01:12:56 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) set_mempolicy(0x4000, &(0x7f0000000040)=0x9, 0x7) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80) sendto(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000280)=@sco={0x1f}, 0x80) dup2(r1, r0) 01:12:56 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}) 01:12:57 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x10) 01:12:57 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000ee, 0x0) 01:12:57 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe}) 01:12:57 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64], 0x8) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:57 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000005d, 0x0) 01:12:57 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002580)='/dev/cuse\x00', 0x301000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000003bc0)={0xd3, 0xfffffffffffffffe, 0x2, 0x7, @buffer={0x0, 0xad, &(0x7f0000003a80)=""/173}, &(0x7f0000002600)="38c2", &(0x7f0000003c40)=""/62, 0xffff, 0x10, 0x3, &(0x7f0000003980)}) unlink(&(0x7f0000002640)='./file0\x00') r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002500)='/dev/vsock\x00', 0x5fc, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000003a40)) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x401, 0x3, &(0x7f00000004c0)=[{&(0x7f00000002c0)="b0887d50ed9558b157b7dcb6df1234927c81d40ae5c01f5374d65287a098b58a6068c604dd5b24fbb40eaacfa29f520bb16759b50cc2c0d419fe9acc2175d9120e1eb71f5d84ba08b49dd7c73e5a88e0c030a3ca03a5659331f76448626f1e6d423ac014e266ef16905ab45ee8d0e314eea8e66215d0253fbb01fae8b5d3ed8bc911bcc358ea48dac242f924e385f0e7bdc2e039f34173e22c94a7d06d7ae9f0250b05887feb262c517d7b19a7c9bf6838565704c32b60f827b841c3f4795a1d109bd16aed97a0df4f809a60edda5dab0f70230d4360be3f65d4c54950431cce8d08167a86f8da97721c76fa", 0xec, 0x4}, {&(0x7f00000003c0)="a3b3d8ebe4ec2f5b1530e0ba2c2483bdde98e336b491464e4bfd577c052d4704229e744eb594dfbb865ad835aebba069c4ea365e0b6e2a", 0x37, 0x101}, {&(0x7f0000000400)="b47d1ff64f330873cd5e2af393ae911cef419ac3955f0191bb5a85e179916612371011ee608bc4bc97d0a481c3eed7f5f3475998cf185f4c51eac519202202ecb27170e19d27ead5c311efed0de06c292fed2a5fdd22270487373d8d9a04721b735919b6ffda0384b9b2f4ae3ddb2b5fc47d0139600624381d6135f01d8f5df7ca95c24a03929d5f9993f86510f467dcf3f64a531d890b21d33e", 0x9a, 0x7}], 0xc00, &(0x7f0000000540)={[{@errors_remount='errors=remount-ro', 0x2c}, {@gid={'gid', 0x3d, [0x0, 0x36, 0x3d, 0x33]}, 0x2c}, {@discard='discard', 0x2c}, {@umask={'umask', 0x3d, [0x34, 0x38, 0x34, 0x32, 0x3f]}, 0x2c}, {@uid={'uid', 0x3d, [0x37, 0x2d, 0x78, 0x34, 0x35, 0x3f]}, 0x2c}, {@usrquota='usrquota', 0x2c}, {@umask={'umask', 0x3d, [0x35, 0x32]}, 0x2c}]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20000000032, r2, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000002740)=ANY=[@ANYBLOB="070000020c00041a0800000001800600f9fff03722455e9ca5c0aa1aaa7da295b7819817bf51ad351f043c3f02c096d1284d62a90c76fa2cccb65394ec3fc7315a92b5"], 0x12) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000180)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x2}) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000002540), &(0x7f00000026c0)=0x4) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x2) name_to_handle_at(r1, &(0x7f00000025c0)='./file0\x00', &(0x7f0000000040)={0xec, 0x4, "7819508023f10e3e113dda410e899d41bca25beb15581c8cff28f15ace03060ab3e233ccb985934e143316b5cecb72fab91ff260d1beb3e37f6f37afccbbc0fabf32b63b8f24108914414544fcc75201c5cc3542a4e5308490a9475cf2a7efbaa9f670fb895a553b7807bb21ff6cc5b155f1cc8d1faf147406a489bdc183a7763247167d4b692ba874baa0f34e5a5daa29ab851c1dc569775d2384fd6d1a1ab4183414bec719be98d2824888f92e9a5c0164cd17e2bd84e49ad04d65f8883bff7ef3d54a3c64d7cda509823b29d5e159c1e649926f5d83fe2baa437df662adebe2df54c2"}, &(0x7f00000028c0), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000002700)={0x2, 0x4e03, @local={0xac, 0x14, 0x14, 0xaa}}, 0x7) [ 190.391356] binder: 13676:13733 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 190.399135] binder: 13676:13733 transaction failed 29189/-22, size 0-0 line 2852 [ 190.464096] jfs: Unrecognized mount option "gid=" or missing value [ 190.481537] jfs: Unrecognized mount option "gid=" or missing value 01:12:57 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000021a, 0x0) 01:12:57 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-generic)\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x1, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x5f33) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000100), 0x0) 01:12:57 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc000000000000000}) [ 190.527082] binder: 13676:13733 unknown command 536907575 [ 190.533385] binder: 13676:13733 ioctl c0306201 20008fd0 returned -22 [ 190.558136] binder: undelivered TRANSACTION_ERROR: 29189 01:12:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) write(r0, &(0x7f0000000800)="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", 0x1000) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:57 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000140)=@fragment={0x2e, 0x0, 0x5, 0x9, 0x0, 0x100000000, 0x67}, 0x8) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) 01:12:57 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x800) socket$inet(0x2, 0x7ff, 0x400) getsockopt(r0, 0x4, 0xcc, &(0x7f0000000240)=""/203, &(0x7f0000000080)=0xffffffffffffffc8) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x2, 0x400) 01:12:57 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001b2, 0x0) 01:12:57 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x4e20, @multicast2=0xe0000002}}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c) io_setup(0x8, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f0000000080)='}security\x00', 0x2) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000180)="f59ddcc922f9afe61bd5aad52b4a508bcd04fe92666c23f51276da0314f88493353c83faf5ab8ed3c11dd73c7c34b4f5bb0fd097709bebeaffa22a041925a7d49ffc6934cc57a9a05e99f714eba7ec0fde9dae18a33b6f5d8cf26425", 0x5c, 0x0, 0x0, 0x0, r3}]) 01:12:57 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff00000000}) 01:12:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) tee(r0, r1, 0x9, 0x0) 01:12:58 executing program 7: r0 = add_key$keyring(&(0x7f0000001100)='keyring\x00', &(0x7f0000001140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000001180), 0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc) 01:12:58 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20000, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x81) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001280)={r0, &(0x7f0000000200)="bffd3f8907627fe4c71177840928c0155024efe60902e58aaab64e13feedb4e93ea061cc4559498d3641611f3c50ae789324672e49e656b5b9444d1a3560040cf49e8d45101f8a2de773f4b8a13030d9", &(0x7f0000000280)=""/4096}, 0x18) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) r1 = socket$netlink(0x10, 0x3, 0xa) io_setup(0x1, &(0x7f00000012c0)=0x0) io_cancel(r2, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f0000001300)="b1b00d7a5ea891d91a1c0e5e2d44c684d7a63a4b17efde16c6e35ee83e2a65041c94d499bf00ec6bdde4ce619e4bb95d892ac81db977c359c441faa8114e1bf494c784f0983f54bc3bd47d5bda48c8fc78f96f5aa1f7a122eea102f04087e4540381923b926941ea0f2fb16d16daafa878107adf69ff067ddd4a00de7bad2b8a14d1d4c842298f0ca64c77b0785b2ed8e4cdcb7ccceae9a31a", 0x99, 0x1f, 0x0, 0x1, r0}, &(0x7f00000015c0)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="2939000018ffda060200000000e80001045c4e0000040d001400000500000005000027afee0c50dc4a97000000", 0xffffffffffffffc2}], 0xf1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={r0, &(0x7f0000001480)="ab9b934ac7c8354dba5304ccd682e5ef71f6a5841db6b566ae9681eedb7f6a0164c19f34744d2ed24f062d8866b3e9985231568d3ce104c1c343f73741c53b6c84b3ce4a0bce782c209846016357a94c259708b36fd44a5fcf9e8a481afd525388ee6a150bcc46225d55adee755b6f478dc3931cb0e0833d1597058fec3864fdfa1f26767c5d22a55476ec28e432f0047c11f7290ab15c7321b6b70aa768dc8dd076e36d4c34df6291c04e8f4a7c293a58f4c5ae2d1c6e79bd9226a23c8ad1f8f8dbd47f22c5c3af00000000f700000000000000000000", &(0x7f00000013c0)=""/122}, 0x18) 01:12:58 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x10) 01:12:58 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64], 0x8) write(r0, &(0x7f0000000140)='|', 0x1) 01:12:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='/dev/kvm\x00', 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)='/dev/kvm\x00') r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="66b9500200000f32ba4200b000eef30f51b40a000f20d86635200000000f22d8c1117b0f01ca0f01ca0f01cad166320f20e06635000002000f22e0", 0x3b}], 0x1, 0x5d, &(0x7f0000000100), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYRES32]) ioctl$KVM_RUN(r4, 0xae80, 0x0) set_mempolicy(0x4000, &(0x7f0000000040)=0x3, 0xdb) 01:12:58 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000}) 01:12:58 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000268, 0x0) 01:12:58 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6b, 0x20000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x4, 0x8}, &(0x7f0000000280)=0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCEXCL(r4, 0x540c) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 01:12:58 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.syz\x00', &(0x7f00000001c0)=""/160, 0xa0) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000440)=@assoc_value, &(0x7f0000000280)=0xfffffe6e) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x80000, &(0x7f0000000140)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r3, &(0x7f0000000000), 0x80000002) 01:12:58 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000000}) 01:12:58 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000102, 0x0) 01:12:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0xa000, r2, r3, 0x3, 0x445, 0x30) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:12:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x22b) sendto$inet6(r0, &(0x7f00000000c0), 0x246, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0xffffffffffffff96, &(0x7f0000000340), 0x285}}], 0x2a7, 0x12000, &(0x7f00000009c0)={0x77359400}) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x7, 0x70, 0xffffffff00000000, 0x1, 0x3, 0x4, 0x0, 0x62bb, 0x20000, 0x1, 0xff, 0xffffffffffffffe0, 0x4, 0x7, 0x1c6, 0xfffffffffffffffc, 0x7, 0x9, 0x7f, 0x1, 0x0, 0x6, 0xfffffffffffffeff, 0x100000000000, 0xffff, 0x8, 0x1, 0x5, 0x7f, 0x20, 0x2, 0x1, 0x3, 0x1, 0x4, 0x3, 0x8, 0x77e, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x10000, 0x1, 0x4087, 0x0, 0x6, 0x7}, 0xffffffffffffff9c, 0x10, 0xffffffffffffff9c, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 01:12:58 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) 01:12:58 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001c2, 0x0) 01:12:59 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x44e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x1) geteuid() r1 = getegid() getgroups(0x1, &(0x7f0000000000)=[r1]) 01:12:59 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000dc, 0x0) 01:12:59 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x10) 01:12:59 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) 01:12:59 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(0xffffffffffffffff, &(0x7f0000000140)='|', 0x1) 01:12:59 executing program 4: r0 = socket$inet6(0xa, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}]}, 0x18) 01:12:59 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000013a, 0x0) 01:12:59 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000000000}) 01:12:59 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x800, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x20000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000340)={r6, 0x6}, 0x8) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="145433db", @ANYRES16=r7, @ANYBLOB="110026bd7000fedbdf2508000000080005000800000008000600060000000c00020008000b0002000000080005000101000008000400e3f6dd1808000500000000000800040008000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x44841) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x5, 0x0, 0x2}) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000280)={0xffffffffffffff01, 0x800, 0x3, 0xffffffffffff9de8, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:13:03 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$OBJ_PIN_MAP(0x11, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00'}, 0x10) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x3, 0x5}) 01:13:03 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x200000000000000}) 01:13:03 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000033, 0x0) 01:13:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000100)) r3 = getgid() mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r1, 0x0) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x1, r2, r3, 0x10000, 0xfffffffffffffffe, 0x20000) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x840, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8106d345f8f760070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000000)={0x7, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {}, {0x0, 0x0, 0x0, @random}, {}, {}]}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r1, 0x5502, &(0x7f0000000080)) 01:13:03 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000002480), &(0x7f00000024c0)=0x4) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r2 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$fiemap(r2, 0xc020660b, &(0x7f00000000c0)={0x100000000000, 0x2, 0x3, 0x9, 0x6, [{0x2, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x20c}, {0xfff, 0x6, 0xa2}, {0x7fff, 0x1ff, 0xab, 0x0, 0x0, 0x2000}, {0x3f, 0x5, 0xb7d, 0x0, 0x0, 0x80}, {0x9, 0x9}, {0x800, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x1}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r3, 0x29, 0x3f, &(0x7f0000000240)=@fragment={0x33, 0x0, 0x0, 0x101, 0x0, 0x6, 0x66}, 0x8) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={"6272696467653000e900000400", &(0x7f0000000000)=@ethtool_cmd={0xe}}) 01:13:03 executing program 5 (fault-call:3 fault-nth:0): r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:13:03 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140), 0x0) 01:13:03 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300000000000000}) 01:13:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x4) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x68402, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) 01:13:03 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x800, 0x10402) recvfrom$llc(r1, &(0x7f0000000100)=""/217, 0xd9, 0x0, &(0x7f0000000200)={0x1a, 0x311, 0x67f, 0x3, 0x721fc035, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r2 = socket(0x10, 0x2, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x100a00}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') sendfile(r2, r3, &(0x7f00000000c0), 0x80000002) 01:13:03 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000297, 0x0) 01:13:03 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000380)={0x114, &(0x7f00000003c0)=[{0x2, 0x83, 0x1}, {0x5, 0x0, 0x4, 0x9}, {0x4, 0xffffffff, 0x9, 0x4}, {0x4, 0x9a79, 0x2, 0x100000001}]}, 0x1) mount(&(0x7f0000000080)='./file1\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000010, &(0x7f000000a000)) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00') syz_fuse_mount(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x410000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r1, 0x3}, &(0x7f0000000340)=0x8) 01:13:03 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfeffffff}) 01:13:03 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000bd, 0x0) 01:13:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000002c0), &(0x7f00000001c0)=0x68) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060"}], 0xaaaaaaaaaaaa84c, 0x0, &(0x7f0000000140), 0x10000000000000c5) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x7000, 0x0, 0x1, 0x99b5}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000003c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x77359400}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:13:04 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair(0x11, 0x2, 0x1735affb, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000080)) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) pread64(r2, &(0x7f00000000c0)=""/34, 0x22, 0x0) 01:13:04 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000000}) 01:13:04 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_delneigh={0x38, 0x1d, 0x1, 0x0, 0x0, {}, [@NDA_PROBES={0x8, 0x4}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}]}, 0x38}, 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x694000, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x4) 01:13:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) fchmod(r0, 0x12e) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000000)={0x2, 0x800, 0x5}) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:04 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000223, 0x0) 01:13:04 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc0}) 01:13:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000880)=[{{&(0x7f0000000140)=@pppoe, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/198, 0xc6}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/87, 0x57}, {&(0x7f00000005c0)=""/21, 0x15}, {&(0x7f0000000600)=""/155, 0x9b}], 0x9, &(0x7f0000000780)=""/215, 0xd7, 0x8}}], 0x1, 0x2000, &(0x7f00000008c0)) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000002]}) 01:13:04 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='0'], 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000380)=""/237) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2002, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000180)={0x0, {0x77359400}, 0xffffffff, 0x20}) prctl$setfpexc(0xc, 0x80) 01:13:04 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:13:04 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140), 0x0) 01:13:04 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x400000000000000}) 01:13:04 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x480000, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) read(r2, &(0x7f0000000080)=""/222, 0xde) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x3, 0x0, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r5 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r5, 0x800455d1, &(0x7f0000000380)) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x118, r4, 0x301, 0x70bd2b, 0x25dfdbfc, {0x6}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1aa}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xcc}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1ec8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) 01:13:04 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000f6, 0x0) 01:13:04 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x7, 0x4) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = shmget$private(0x0, 0x4000, 0x1fff5, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@loopback={0x0, 0x1}, r2}, 0x14) shmat(r1, &(0x7f0000000000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r3) 01:13:05 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc000}) 01:13:05 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000099, 0x0) 01:13:05 executing program 4: capset(&(0x7f0000001000)={0x19980330}, &(0x7f0000001040)) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x2801, 0x0) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xffffffffffffffc0, 0x2840) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/213) creat(&(0x7f0000000180)='./bus\x00', 0x2) 01:13:05 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x6, 0x209e20, 0x8000000001}, 0x10000028a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040), &(0x7f0000000380)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000180)=""/134}, 0x18) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@generic={0x4, 0x6, 0x6}) 01:13:05 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 01:13:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) accept4$nfc_llcp(r1, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80000) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'veth1_to_bridge\x00', 0xffff}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000000)={0x2, 0x0, 0x9, 0xe7f, 'syz1\x00', 0x2}) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:06 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000014e, 0x0) 01:13:06 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x333, 0x101000) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000000c0)) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000480)) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x1, 0x4) syz_mount_image$ceph(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)='./file0\x00', 0x7fffffff, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="db6caf4de1a5c2810f2df482bdc2810f1dce79e7cdfd914f7c165df6d59979e0dcf49f257b7305588527a6f0227e3723896a2ed06f0cb7427ddd44ad31d9f2a923694e4cc7a85c52249bc57d8976758deee9260ea980a841147950c6b2b2ece08d27b78837fa23851ddb8bcffa8e4ef5aae1a037acb1189a7a87b45b1ab16bcdd4b6b63920b24269461ecc6372215c3bb30f0fe994426905423298715c821ca4467504fc9d0adab7cad51f2a608f4c9d7ca3b02883ad43bf3446872cb1b9bf5f71979bca573c3e3346a76e91914b62e3d9979cf5cf12defcf9a3ca394cbc129e91fa01494ca48c48d48fa61c0591e23de714", 0xf2, 0x9}], 0x20000, &(0x7f0000000380)='/dev/amidi#\x00') ioctl$int_in(r0, 0x40000000af01, &(0x7f00000001c0)) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 01:13:06 executing program 4: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='\x00', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x380c0000) r1 = socket$inet6(0xa, 0x1, 0x0) flock(r1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) keyctl$get_security(0xb, r0, &(0x7f0000000080)=""/84, 0x54) 01:13:06 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x3f00, 0x10) 01:13:06 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 01:13:06 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140), 0x0) 01:13:06 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 01:13:06 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000250, 0x0) 01:13:06 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r2, 0x1) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="7b83df91226501f6664986825c0e2d2b62f8c12bb8ac43226544288f9a1d9e17670d22f3b9170359078ac60cf9d0c600da48e193a338beca24517112085c98995bde1b29a7f26227be1b8d3ba86905a5303c9f0e16faa3a7c1c4ebdd061ce1704a26419530abf28661ffe6d8d4cf4471330be14d6fb50fb0763fbd82b990897e99f3ffb857a3e0e03a0325e71c196c280bc40cc541ade673b928259f75ff9ec0720738824f3e901565d79c8b1664326ff6fe529194bbb264186ce587dd6cebc112a118a5a281b5c92758fe366bb54bdee16e6f3b8c607ee5cd80416827476d19e24bf61f8a832b173fe413f7", 0xec}, {&(0x7f0000000040)="a10f0c2d4244512802591478a19cad4d0778d47fa095b6ab172ef56e815a62662ce4b1f2c58b", 0x26}, {&(0x7f00000002c0)="484ec649a0bb96300b889414882194f2375f1950d60c21f951e7a58e0369d58c56c3d4dbf1ff0855e5d7f454070ae6d66f2f04d4ef597bfef5fca0e6884d23498b80bc16f62563e446a428db2ba0604d0b60ca21418abf0351a4b9e1951bb61491039e0dbb301638717e0e697e5a29857dba145ecaf53610e69e823844ea5c", 0x7f}, {&(0x7f0000000080)="c1c0d4e4773c46022afb0cc969f71af11cbfd318987167defb87f673dbadff865d36a0d469afb76a71c4feecacf8", 0x2e}, {&(0x7f0000000340)="4ecb13f44a39667903fd377c8e2f460cf90cb6463db443d0d4bd94bd56e0a440461855661a37fbf26d335af315663a9d9b453e27791e53dcbb051bc44027e54491c45e36ea2882198cc3379c45356330c56391debad68b100f2a0b67aab08a3e26e0044c011bee33f1648791f49032384fa63089650cc1943be752921e062ca2957c6c7eae3d51a5b8ed52eadae9e40053d19b0f91f354ea70808077abb2253ff1c943995333900fa99de907e3", 0xad}], 0x5, 0x0) r3 = memfd_create(&(0x7f0000000000)='/*vmnet0ppp1#\'\x00', 0x1) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @loopback=0x7f000001}, 0x3, 0x0, 0x4}}, 0x26) 01:13:06 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x46c000, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000040)) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_fuse_mount(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:13:06 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r1 = add_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000400)="c1b63b9d2b478ac153c81c568c546065bcf099af1f697efb121d6cfa0fdd0eebaa595c1ad2811cab9af8ed910f47b8ec619b9aa6b2c9aa909ce19e35efd06c996a9463c5fa5ce27fccb85108f879c37f0ac26e1d8b621329aa5b34a2efb37ce9b5b4a8880243dd567cb7f9d58636b9", 0x6f, 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x7}], &(0x7f0000000100)='GPL\x00', 0x7, 0x205, &(0x7f0000000340)=""/167}, 0x48) 01:13:06 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x400000000000000}) 01:13:06 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000000d, 0x0) 01:13:06 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x800, 0x4, 0x10001, 0x0, 0x3, 0x1f, 0xfff, {0x0, @in6={{0xa, 0x4e23, 0x6, @loopback={0x0, 0x1}}}, 0x0, 0x40, 0x9, 0x7, 0x6}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x3ff) r2 = accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000000000)=0xffffffffffffffe9) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x76, &(0x7f00000001c0), 0x8) 01:13:06 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc000000000000000}) 01:13:07 executing program 7: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000100)=ANY=[@ANYBLOB="920f0000000000000000858ab1d67810569ef5797c6db9a789c5ee9b1e771cdc89f68b66b2e0491c01d21313e1bbd2d0e046db9e77e158f7e2d2193a1066c9497f72f36cc404375dc34ce0658e9f0ea2fd96f39fe4c1daf88457f9ee85d645255e797684ac2ca813fe7d59860bd9943cc6bb7b72528eef3c064cceeac285547378bfd2bf2c6500327e29a569aae9104910e6efdb668d427c6c095412d51a68ad6208cbe6e10087929aebc57191c8518606832332a12c5d0cf708814f75b72917f73ba7392889acac57797785a3b885b57fbc09ee060761be7cc2be826263b1e6c90b1d90"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="469c66bad104b00bee0f019b07000000c4e31d798a00000000d6b90c0b0000b8ad4c2233ba1e7ae4380f3065430ffaa70e000000f2d0c066450f3880251ae58d9cc40131edb39d95f8fcb9980a00000f32", 0x51}], 0x1, 0x10, &(0x7f0000000300)=[@flags={0x3, 0x100}], 0x1) 01:13:07 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x40000000, 0x10) 01:13:07 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000012f, 0x0) 01:13:07 executing program 1 (fault-call:12 fault-nth:0): r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x0) 01:13:07 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4000000}) 01:13:07 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x101, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, "10dec303415fe113b503cf1ae125cffac7e0f30f657e036d8beab09fd20f016238cbff4c48bedba30ba1508f70d8ffffffff7b1bb29ee38b71b351d15ce4ec82", "c3174cfe994a2869e5662e1e2a72e0fb4aee287df2df380b95e5b25a31c8f999938bfe8bf214ff8e583ea7b0e03ff510bcddd4757451a798594da244e721450c", "a2b98fba2b259731fba7132ce30a6db82958009e4ff06da85422d63bc7d0db26"}) 01:13:07 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc0000000}) 01:13:07 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000009f, 0x0) 01:13:07 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x3) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgrp(0xffffffffffffffff) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) getgroups(0x1, &(0x7f0000000640)=[0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000680)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) r17 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001d40)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000001e40)=0xe8) getgroups(0x1, &(0x7f0000001e80)=[0x0]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002780)={0x0}, &(0x7f00000027c0)=0xc) stat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000028c0)=[0xffffffffffffffff, 0xffffffffffffffff]) r23 = getpid() stat(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002c40)=0x0) r27 = getuid() getresgid(&(0x7f0000002c80)=0x0, &(0x7f0000002cc0), &(0x7f0000002d00)) r29 = gettid() stat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) r31 = getgid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000002f80)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002fc0)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f00000030c0)=0xe8) getresgid(&(0x7f0000003100), &(0x7f0000003140)=0x0, &(0x7f0000003180)) fcntl$getownex(r2, 0x10, &(0x7f00000031c0)={0x0, 0x0}) r36 = geteuid() r37 = getgid() r38 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003200)={0x0, 0x0}, &(0x7f0000003240)=0xc) getgroups(0x1, &(0x7f0000003280)=[0xffffffffffffffff]) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000032c0)=0x0) getresuid(&(0x7f0000003300), &(0x7f0000003340)=0x0, &(0x7f0000003380)) getgroups(0x8, &(0x7f00000033c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0]) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000003780)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000037c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f00000038c0)=0xe8) stat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000003a40)=[{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)="cd1ac79c7f31f13ae922d0db6071d473047a8899cdb25890c0b3ed0bb9172483507691c53398414a80b7c809ae7b4edbf06599c8", 0x34}, {&(0x7f0000000240)="a04ac60a74de937712394027996c447a472f716427bfb91e123c242f3c8ef8b4e7072393afb098aa380f5bf9701b6a888505021229dffd8e7a41b69701c070f446b72235cde442a8930d30cdde2da683a6f4bde2e42860f0b4207d62ee8946185f6ac33630", 0x65}], 0x2, &(0x7f0000003c00)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000002005c1806bbd3103f00000000000000000000000000000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x20004040}, {&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000a00)="03afdefeff5f3ae8d92157e467d570f5be220d3b84bf1c17e505ef39be78558323d4a62d802e525e554bcecd7360cf821860b520d7c27e684294dd427a8d07acde7a1f24f9f611e8d8e50fae62683ddd8fe2ab8a2d9f2d5e3f182e175709cd2ea2417a0dc9e79e2d84a84e5d5fe264dec2b300df626481e91acd660dc45706c77306a500c8bca0509a1c1500", 0x8c}, {&(0x7f0000000ac0)="3bb2556dacc2b846f1ebe51e33113bf57e3ea783f3c9", 0x16}, {&(0x7f0000000b00)="eb3070d399469a31c11dc16a3bca5d8aabfbab7f4c017b8be47e3f810710200180cbf8e9c26f1ae30f39b95a8b6a4e6bd59bd568c64a22f1014380bf4d2fd968eba05a8d95d467df649e090f00d9aa3759508560c7ccbf9bc86c3cef48b5f006d0e7cc3559809abbc77d3f5c409eb2ec6af300fda4a85bf89aa48d006c8df34dc8cb9334e0e09e5740a5e8c31f6c38f50ce5d568840ff50ccc13fc5f902784fe81388754d00271b61bff60c58243b7a8a7a992", 0xb3}, {&(0x7f0000000bc0)="6ba7d383a76615e7ae9c577f2aecb95ae4af58ca3d22e9f89c4296cce0d518b57f2b3e100a6269a8bec1478de2daceede470b2e04ddfd2706936f9dd599259b70a39dc4d52c18b96b24ba0e463fef09ec9665cce2ed6dd506bf554b67b8cece502c20c20321d1ac246e7ae86840491e3f50355f85e45042b97a1eda0d3db059c79503c88df90c9a24440c43beeb535f732c8cd47160a13b07a4d1b15545beaa37244fd645459ada6f55e7e4691f55714fa1732e971c5011c495b8d4afed52d47d4d1e32e24d04528491f3999a1121854a52277f20ac1368bc7f49af1370750ff28da5802de0fb611cc3b0e51cc79d30d583ce218", 0xf4}, {&(0x7f0000000cc0)="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", 0x1000}], 0x5, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="0000a802"], 0x38, 0x4000}, {&(0x7f0000001f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000001f80)="2895cb67f3103b1cfc2dad511a2cc85cbd31e2", 0x13}, {&(0x7f0000001fc0)}, {&(0x7f0000002000)="90b21470647515a2b335bb18ff71f48201b7d4bd543b9b2ff08e4708bab445bf9b7ead119cb68b5ce83157e4c4b0", 0x2e}, {&(0x7f0000002040)="8f6dde3f434b6665c82a83437c27176627f93f9165f674d13a98c7a75778e09e6a0b8bbadb23cf8cb46c083048bc139f684749bf8a5698e407b2203a40f9aaf901bad33df6c1535d4e6f8a0d829547fd9cad7febca7e04a10bfb89c10ee537c3b1d3ec350ac1c1e656a1a289b9f4bcc5f25f41a6cea040733d89180c1cb172478646f6c9d2497986af2bee655a48b25d746d63bfa7a75ecb775828770a0b6f58cebf76077f92ee", 0xa7}, {&(0x7f0000002100)="fd4870fc89fc6a79bec6767c377c5d6ad05477236b0bc81491f9e82a77509cc04919407c02479d8e0d6e5b1f8a122f7de94f4e3b9fc8da43795d2274206eb85d683945f2c83d002a479eab61865e3520e7864e13dc2e07a65cabbf80537943589dbeec20c9d2de568e38a4eacb02d8585919787a15fc072983725d8eabf67a69b3f2129102d0f26fdb7bb84c954a7f93efa0f562487d9ecf975bfa5ed497ed0194e7683a52ef4a23f0f97b844317b58d0abbffb8cf58c7af63a4ef1289d9fd8b1eda28ff0de3b43fb2988c4c78a4b623fd6671659884c8af8fc2bdb7fea3c78ffcf4aaf3fb437143de5729ba529ae91692a0fc38", 0xf4}, {&(0x7f0000002200)="6abe858acda6bd1e0a934c831cb1df7064251328e45294ea04f1751086bb35aed7446408eac819fe37668133e53d7d675b0ad23eb61d0f6e04e372ede4a4be97d299c38e43d19cdf1bf3f53815bcad5a1b572b33a2036779bd979060520dd17bb3c9db836235ad7eb3e8390d17eaee1a2d8cb0e6f87356b58c6bee6926df3004efda843b89be17945f96893ca7190b438cb93df3d6d2a34eaaaf25cbf1838685d1aa4398cff4e8c43a0ddaf75baaa808181c7da8f8b1ea30801f5978ab19d0f97fb802303dc7eba9dfe0104d3727d03680c1eef40ae5865b139652c532a1e0ab4ec0", 0xe2}, {&(0x7f0000002300)="73b01b0459232c2daf2e7838ec10f94e4c1450e3ab79af3635a49df4452c161b4dea0eafe959a19f239280b97f173e70554bab5f29061c0e9201e9a32238114832a5137b40a594ffca7a77faa036860ad68a088c3bc07f8d4f96afc4eda1019c100097961d30d2d7482c561c", 0x6c}], 0x7, 0x0, 0x0, 0x20004000}, {&(0x7f0000002400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002480)="0c6dbbdf015cdc0a3bf5728f520099b20be9843cb03183f5b62ebf8599106fc3f375d5852ee52927cd92fc48df5a13d0471148e5d87747e2e58705176067f6405cab12e96abebac186af1948eff956521de52294290b38d9afae75c83d294b2a2d891ede469974ebae500df0a61a09cac30139fa88c84c23d75f03334c82b5dc00c5c78965573571d21b293c83b808fa9a9848c32290f7ab1607836cf4ad21ac3ee53f6018718793e8183526929f9102c43cf315a058f3eb4869e2bc2d82de25a9ea47e0450e9fe59ee3d4d09e95aa49ca9f3d0c066462ff40aa2ff944c2d52ecf1c37b529814ad92108ccf92b57629b81", 0xf1}, {&(0x7f0000002580)="d0ce10040fc0da90caca2af2093afaa3f7381e2291902b3c02b285471ef5fde3cc66bd928ae17f5a7a791a1998ea726ab721edaeeb50c101fd3cb720ddc8d6e7c36ad2a3c0f967568a8cb0f7f3ec3b0781fb9525a1fd3db238b963ce70fef33c733b788f36754f8a9cab25a7d506051e2fab13f953063b5f5cc0b07f00b79977870426ca78da89d4497a65329d295a8b75a2a2d390af909df60a1e260486afea927ae8ddba437c5fc10b77a1cd35a8", 0xaf}, {&(0x7f0000002640)="1fcd3800c433842c65a598522d5d3eb80c31418112a01a6564598b3ae1a54d414dc728296b0957d7c7130839393f3c0d12e6ee4b335fae40434eb0afa3edcb", 0x3f}, {&(0x7f0000002680)="34dd9aeb51a47e465813b8d949cc6eebcd1f3e1e4e1fe74616661184da4e4ff46190be8ed819001f15d551324017b2893a08c6b4c93c84355899c25f9a91e296e1358d2b180665500422a6d4aaf1f806b79d73d9f2c39e0d3c4eb6faf9a8bf0b9728c0cb3963d9bf78e05f4a605775c41dc12bcad80be5ebee55dadeb9d33dcf1782ca2be7dfdc9c45d8b3be8a41ce612f09b082c5c0f86d2f7472758d1ea66d2e4d980bd7d2b3a48e3579af723f64ede985b918b4a7fe5e015f82", 0xbb}], 0x4, &(0x7f0000002a40)=[@cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x28, 0x1, 0x1, [r1, r0, r2, r0, r2]}, @rights={0x20, 0x1, 0x1, [r2, r0, r1]}, @rights={0x20, 0x1, 0x1, [r2, r2, r2, r2]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x20, 0x1, 0x1, [r1, r1, r1, r2]}], 0xc8, 0x1}, {&(0x7f0000002b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002bc0)="71954683fd3b7e3b7a215cc0291fa6a98899db19dfa263619da69847f9e075375b114a272633f2", 0x27}], 0x1, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800001a000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r26, @ANYRES32=r27, @ANYRES32=r28, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r29, @ANYRES32=r30, @ANYRES32=r31, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1], 0x88, 0x40800}, {&(0x7f0000002ec0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002f40), 0x0, &(0x7f0000003400)=[@rights={0x18, 0x1, 0x1, [r1, r1]}, @cred={0x20, 0x1, 0x2, r32, r33, r34}, @cred={0x20, 0x1, 0x2, r35, r36, r37}, @cred={0x20, 0x1, 0x2, r38, r39, r40}, @cred={0x20, 0x1, 0x2, r41, r42, r43}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r2, r1]}, @rights={0x10, 0x1, 0x1}, @rights={0x18, 0x1, 0x1, [r2]}, @rights={0x20, 0x1, 0x1, [r0, r0, r1, r2]}], 0x108, 0x20000040}, {&(0x7f0000003540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003740)=[{&(0x7f00000035c0)="9cad621b928b0f1605f56ce66aa41c1a2feece7c51eab25d195cb26d1621481a5983f34d3422d139fe430735f21c5b20a1d1bb80623c21d744fbcd820b2bb858ba3d565a02b1d84fb7084f174a29dced4fab960793d195b64d16f55a05a0e817b9f52d73e40702ebe64827157ef8406ff8b405ce4c5a0f995b2cbabfe82c7d2cfe96434f3825c3482203300f523ee47835a76cf80315da087359ccd430567628631c62de23e9f2d30e89957dec6125373213c69438323a462f614f157171c3d7a1cf9a262023a3d84995", 0xca}, {&(0x7f00000036c0)="8719ed7c9a70dbb1a089c2297116d630011c0515ac18373b847505bea78e7c27e6735bbe48a0e604814c140a1d86d0d49aa1a0a52539f6a656fadf207e583f2f7ccd610bea4357ebb56da4efb86957098d02ec16fba526298d9b12d9900c1ebfcd309b99ab18ff983923174110cda7b1ff6aec6bc7", 0x75}], 0x2, &(0x7f00000039c0)=[@cred={0x20, 0x1, 0x2, r44, r45, r46}, @rights={0x30, 0x1, 0x1, [r0, r1, r2, r1, r0, r0, r2, r1]}], 0x50, 0x4000800}], 0x7, 0x40000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r47 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r47, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) r48 = dup3(r1, r47, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r48, 0x0, 0x480, &(0x7f0000000400), &(0x7f0000000440)=0x40) 01:13:07 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc000}) 01:13:07 executing program 4: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0xc010, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000000140)=""/185, 0xfffffffffffffed0, 0x10007, 0x0, 0xffffffffffffffc5) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000000000)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10, &(0x7f0000fc8000)}, 0x8000) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) 01:13:07 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x0) 01:13:07 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f00009ff000)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x4000}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6}}, 0x14}, 0x1}, 0x0) close(r3) 01:13:07 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x40000) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000000c0)={{0x200}, 0x8}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xfffffffffffffffe) 01:13:07 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc0}) 01:13:07 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028d, 0x0) 01:13:08 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x1000000, 0x10) 01:13:08 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001de, 0x0) 01:13:08 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:08 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) 01:13:08 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000ca, 0x0) 01:13:08 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffff, 0x290000) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000100), 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) 01:13:08 executing program 6: futex(&(0x7f0000000100), 0xc, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100), 0x0) socket$key(0xf, 0x3, 0x2) 01:13:08 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}) 01:13:08 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x13fffffffffffffd, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='(\x00', &(0x7f0000000100)='posix_acl_access/^\x00', &(0x7f0000000140)="2e3aee73656c667070703065746830776c616e3100", &(0x7f0000000180)='md5sum\x00'], &(0x7f0000000340)=[&(0x7f0000000200)="6367726f75705e26249c00", &(0x7f0000000240)='\\\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='eth1*/nodev$\x00', &(0x7f0000000300)='\x00']) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000), 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000003c0)=""/156) accept4(r0, &(0x7f0000000480)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, &(0x7f0000000500)=0x80, 0x800) [ 201.824326] binder: 14231:14235 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 201.835699] binder: BINDER_SET_CONTEXT_MGR already set [ 201.841614] binder: 14231:14236 ioctl 40046207 0 returned -16 [ 201.851703] binder: 14231:14236 BC_CLEAR_DEATH_NOTIFICATION death notification not active 01:13:09 executing program 4: r0 = socket$inet6(0xa, 0x80800, 0x200000000400000) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0xc01, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) 01:13:09 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000015b, 0x0) 01:13:09 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2000000012, 0x43, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x8, 0x81, 0x7f, 0x20, r0, 0x5}, 0x2c) 01:13:09 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 01:13:09 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x101400) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000500)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000640)=0x6) socketpair(0x8000000000001e, 0x1, 0x1, &(0x7f0000a77ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x10f, 0x3, 0x0, 0x4) socket$netlink(0x10, 0x3, 0xf) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x7, &(0x7f0000000400)=[{&(0x7f0000000100)="29197db6542bdfd9ff1d3ee03ac17712846aea2852350d64701153e39cd25cd779e98da42cf1ad74ba9b64bb1d251b4c4b03f3805deee25a62d508ff0fbe5c7c4ac4e5a66b655874cad31a8cc950d79de10bfd0f5c33a822e2eb8f5a5ab48a6e34b6f42d899e1d96ac2ef07ab1bd72e3dc3bf8953904883a24d6e4ac40a53265dbdc0b252b3f080d9dad5265ad", 0x8d, 0x1}, {&(0x7f00000001c0)="64e55c478bf87821d2cdf610550271d28eea3749", 0x14}, {&(0x7f0000000200)="9f852360002f893920bc1a3e8903c04a82", 0x11, 0x20}, {&(0x7f0000000240)="556af68096f825520da0a7bc37e56319800a69827fba31446f4e2051399651d752ca136c0aa1a506ebc7fe7e79d7e2cdcd2c91d031402cc7544efe45e5260d325a4b494e2610a83ac6010e69c14fa1898d47dea859ae7991db52ce3e98826c03855dc674653e0cbee1bdfe185b13535378aeb8783b87a7f89af55eb9213d98", 0x7f, 0x66}, {&(0x7f00000002c0)="f7ffeffba38b368868c700b47fe9095425db6f66468bb05b018a63ebc7107e63c96b3b0047a50f884c61fdb7b3d003ac935890e1956f9aed9ac41a2334eb318de320d6ec3ddcb0565f3e74c2fab348180e8eee58c098b0101709493c02bb342a7d501704d9fb2f8d84887f3f47ec26a9b51e0ade22e33019f64042bdae1f", 0x7e, 0xb8a4}, {&(0x7f0000000340)="d47750e3d8417587219e06b13902f2473170b40fccf1d5eda765f822c3e59b0cfd5c883ddeff38a1b1f0d9f7894aa438d5ca5e01bb2b", 0x36, 0x3f}, {&(0x7f0000000380)="72df25bcaa9335cc01a15158c772055b96fdeb260f8a5e39ecb43c22f59a5220adb46a2aa2d919e3b29937774c98a5a0a7860c2cea658cc7581c7061aaf2819c18a998468da4865a740aa7107ca650ce6b10888605e0ef40601cd990c597b97c9815cb13de4688", 0x67, 0x4}], 0x80, &(0x7f00000004c0)=ANY=[@ANYBLOB="6572726fff6110f2300200696e75652c696f636861727765743d6d6163696e7569742c71756f74e12c00"]) 01:13:09 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x1}, 0x10) r1 = socket(0xa, 0x1, 0x0) r2 = dup2(r1, r0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x18e1, 0x4) [ 202.193303] jfs: Unrecognized mount option "erroÿaò0" or missing value [ 202.224523] jfs: Unrecognized mount option "erroÿaò0" or missing value 01:13:09 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0xff7f0000, 0x10) 01:13:09 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2}) 01:13:09 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x20000141) 01:13:09 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000013c, 0x0) 01:13:09 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000180), &(0x7f0000000300)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 01:13:09 executing program 6: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000140)='\x00\x00\x00') fchdir(r1) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x8040) open(&(0x7f0000000080)='./file0\x00', 0x220002, 0x100) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000001440)=ANY=[@ANYBLOB="0000000000000000b33505e400d0983e5f58a6140752f94073619e83e93b5faf23737b86efea6cfe6072d5433d4469"]) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x1) pwritev(r2, &(0x7f00000013c0)=[{&(0x7f00000000c0)="f68f920a186b30238b4347d3e9718506353e0fe3bb89b885fe76ca127c83745438beba96ccf41f70be5fefd7a7a94a03e38fdcca9702afd1a81fe667a070f59ed064ae3a9db9f1f72b5e04303be99b9a28da52acc6a72a379ab1103a408ca7fcf1a03ef45b80e4e9ecf406327c1cb6b6f52431fcaf703eadc7a2a9088f2c", 0x7e}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="6317328accf918cfb407a7619000a263eb59c02d90f55b82314367dd7b1ebcab5617520f3489e78a6dcc5230beef4e40feaaea020dd2cd55bf923284f9ace7c1f1b02838c6d72a805baf55c9fcd3b4e6d098ca05bc6244570f971577cbe5cfb1477dec37fb4eba3b7a9f4c59503f6904c5aa1ca324ebe7607a5c6b23844caaa22a8dece933a9ad62d86cce01f8fd0a89cff251a02dfd9b6726aef62c893c3613444ca9b9a27250238c88f715086f2252f7ec89f7c46e94a3dc3b5bddc478a74713d9b5a721548c0003c6", 0xca}, {&(0x7f0000001280)="6ffe32c3c3ed3d7e868ef000ad32c5f4bb65d6442f3d69a34a0e57691cfbbfd8d1145b598506365c764a443993ae2730e04bbae46ec91351120ec983b06e68fefe77", 0x42}, {&(0x7f0000001300)="10f5f33d80454b782e4d7f4ed6721e91116fca82bf6dff1402622f6499144d4948acd2d8a9286554a968bb3beb6d952d58ef2c64fa128f94776ff224f16d02ae4eeff12e083476dacc7e5f43b2b71cd7407193444f03971d6ea1610de05229b031d0e7d691082aa33862c68b689327df2fce73bcef09e92a6000608c0113c3aa2503f2", 0x83}], 0x5, 0x0) 01:13:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) close(r0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r4, &(0x7f0000000540)=""/103, 0x49, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80000, 0x0) pwrite64(r5, &(0x7f0000000000), 0xfffffebe, 0x51) 01:13:09 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x8a, "cea15ded43dad8ea2eb1b6aa50a5b60fc43ae7d2fa3b562a2f6348ca7bc2520d572abb1fd5bc9079507f8af8a087886d2dc8dd52affa4050023d99928b9d018d689ed1a42dab815beee93877bc0985552ebca217047c29e303f17808a3e5dc34c42f2195d860d41060a7e63a7645fa934112fb4c63688730a3a41b54c65272173c3794bec74f9fa556de"}, &(0x7f0000000080)=0x92) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r4, 0xfffffffffffffff7}, 0x8) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)='3', 0x1}], 0x1) write$vnet(r2, &(0x7f00000005c0)={0x1, {&(0x7f0000000400)=""/232, 0xe8, &(0x7f0000000500)=""/190}}, 0x39a) 01:13:09 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 01:13:10 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 01:13:10 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000026c, 0x0) 01:13:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x2, &(0x7f0000000040)) ioctl$KVM_IOEVENTFD(r0, 0xc0185879, &(0x7f00000001c0)={0xfffffffffffffffd, &(0x7f0000000180), 0xfffff7ffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd}) 01:13:10 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = semget$private(0x0, 0x0, 0x200) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000040)=""/6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x8000, 0x0) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x401, 0x121000) getrandom(&(0x7f0000000240)=""/103, 0x67, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000002c0), 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f00000000c0)) setxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='system.advise\x00', &(0x7f0000000380)='/dev/audio#\x00', 0xc, 0x3) 01:13:10 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000000}) 01:13:10 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0xff) sendto$inet6(r0, &(0x7f0000000140), 0x300, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) 01:13:10 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000224, 0x0) 01:13:10 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x100000000000000, 0x10) 01:13:10 executing program 6: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) preadv(r0, &(0x7f0000001780), 0x0, 0x0) 01:13:10 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x9, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x104) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x104) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x104) 01:13:10 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2000000}) 01:13:10 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000295, 0x0) 01:13:10 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x223) 01:13:11 executing program 4: clone(0x8200, &(0x7f0000000800), &(0x7f0000000500), &(0x7f00000007c0), &(0x7f00000001c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000440)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') pread64(r0, &(0x7f0000001980)=""/4096, 0x1389, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000280), 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) 01:13:11 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], &(0x7f00000002c0)) 01:13:11 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3000000}) 01:13:11 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022d, 0x0) 01:13:11 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x25) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000007a00000085a5e1d3006dca6142f80602b677d9eeaf0bd40dedc2b49e036f786b758e6df947a8a2edd46e60311d838aa634a41c5e69f040ca0e4d6c5a9cf0b3b0edac6632eabcd813a73b08dc321327d021bcdf6cdf441a0b6c424d671f1a432bba7b5971fa0bf53128eabd7b51576b57d7ce01163368ef7147fc2b39536a"], &(0x7f00000000c0)=0x9e) 01:13:11 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x3f000000, 0x10) 01:13:11 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x300}) 01:13:11 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="10"], 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) lseek(r2, 0x0, 0x10000000003) 01:13:11 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000018, 0x0) 01:13:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000600)="4cf0417e27e5d5bf300ba983d3b576c2323ad790a1f8e9f44c89fa27d780cbe091e9e710293f044c", 0x28) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040), 0x4) dup3(r0, r1, 0x0) 01:13:11 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}) 01:13:11 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000127, 0x0) 01:13:11 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='cgroup\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:13:11 executing program 7: 01:13:12 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001b0, 0x0) 01:13:12 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r0) 01:13:12 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000000000000}) 01:13:12 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/34, 0xfe1f) dup3(r0, r1, 0x0) 01:13:12 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1300) 01:13:12 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='cgroup\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:13:12 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) sysfs$3(0x3) connect$l2tp(r0, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80}}}}, 0x32) close(r0) 01:13:12 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000a6, 0x0) 01:13:12 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 01:13:12 executing program 7: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffff9c, 0x9) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020307031dfffd946fa2830020200a00090005000000001f0c1ba3a204000400", 0x24}], 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') ftruncate(0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000640)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005b00)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000005c00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000005f40)={'team0\x00'}) accept$packet(0xffffffffffffffff, &(0x7f0000005f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000005fc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000006000)={'team0\x00'}) accept(0xffffffffffffffff, &(0x7f0000006080)=@hci, &(0x7f0000006100)=0x80) 01:13:12 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x4000, 0x10) 01:13:12 executing program 0: r0 = getpgrp(0xffffffffffffffff) ptrace$peekuser(0x3, r0, 0x40) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000100)=""/173) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) ioprio_get$pid(0x3, r3) fcntl$setpipe(r2, 0x407, 0x9) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000080)="2957e1311f16f477671070") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@umask={'umask', 0x3d, [0x37]}, 0x2c}, {@flush='flush', 0x2c}, {@allow_utime={'allow_utime', 0x3d, [0x37]}, 0x2c}]}) pread64(r2, &(0x7f0000000540)=""/103, 0x49, 0x0) socket$can_raw(0x1d, 0x3, 0x1) pwrite64(r1, &(0x7f0000000080)="203e6a1464", 0xfffffffffffffdb7, 0x80000000) 01:13:12 executing program 4: keyctl$dh_compute(0x17, &(0x7f00000014c0), &(0x7f0000001500)=""/244, 0xf4, &(0x7f0000001640)={&(0x7f0000001600)={'sha1-avx2\x00'}}) 01:13:12 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 01:13:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0) 01:13:12 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000008c, 0x0) 01:13:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000d9dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000013c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000000000)={0x14}, 0x14}, 0x1}, 0x4040) 01:13:12 executing program 7: 01:13:12 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 01:13:12 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000113, 0x0) 01:13:13 executing program 4: 01:13:13 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x2a300, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:13 executing program 6: 01:13:13 executing program 7: 01:13:13 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 01:13:13 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ab, 0x0) 01:13:13 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0xff7f000000000000, 0x10) [ 206.544063] FAT-fs (loop0): Directory bread(block 2563) failed [ 206.552115] FAT-fs (loop0): Directory bread(block 2564) failed [ 206.558886] FAT-fs (loop0): Directory bread(block 2565) failed [ 206.565460] FAT-fs (loop0): Directory bread(block 2566) failed [ 206.571938] FAT-fs (loop0): Directory bread(block 2567) failed [ 206.578294] FAT-fs (loop0): Directory bread(block 2568) failed [ 206.584445] FAT-fs (loop0): Directory bread(block 2569) failed 01:13:13 executing program 7: 01:13:13 executing program 4: 01:13:13 executing program 6: 01:13:13 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}) 01:13:13 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000004a, 0x0) 01:13:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000001c0)=0x60020d) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0xd6, "2d3dca7b04332220a64b2bc6b4c90bbec0c05023335c814d02488fe95c609a8448ba41117e46b9bf5242c0aaa9d2236163ce62669b37e2635c118676a28443984cda2188d4ab8d9eef181eaf5f57e032e5f7d6a1ccdbbe78e824629078b7533d79cc0775378e50415f1003bcbd08fb35c23085b537e90a561fb1d5c38425a6a5a46651fc0fe40d084ff263b1f31ee58e22fee3fffcfc872fe08e89ff9e7cccc900ec36b1f99af3a98844634a93017430cf3591262004e4b6bb0af97230c25a71728abae8506a1dcad568c4012cbab9fdeb5518d29a14"}, &(0x7f0000000100)=0xfa) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000180)=""/42, 0x2a) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) [ 206.591134] FAT-fs (loop0): Directory bread(block 2570) failed [ 206.597538] FAT-fs (loop0): Directory bread(block 2571) failed [ 206.603727] FAT-fs (loop0): Directory bread(block 2572) failed 01:13:13 executing program 4: 01:13:13 executing program 7: 01:13:13 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 01:13:13 executing program 6: 01:13:14 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = getpgid(r1) sched_setattr(r2, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:14 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000ce, 0x0) 01:13:14 executing program 4: 01:13:14 executing program 7: 01:13:14 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000000000000}) 01:13:14 executing program 6: 01:13:14 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0xffffffff00000000, 0x10) 01:13:14 executing program 6: 01:13:14 executing program 7: 01:13:14 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001df, 0x0) 01:13:14 executing program 4: 01:13:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:15 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 01:13:15 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x67, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}}}}, 0x0) 01:13:15 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") preadv(r1, &(0x7f0000001780), 0x0, 0x0) 01:13:15 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 01:13:16 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x4000000001, 0x8000, 0x3, 0x1}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ifb0\x00'}) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) pipe(&(0x7f0000000200)) 01:13:16 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000128, 0x0) 01:13:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:16 executing program 7: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x0, 0x7fff, 0x400}, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f00000001c0)=""/154) clone(0x0, &(0x7f00000008c0), &(0x7f0000000140), &(0x7f00000009c0), &(0x7f0000000a00)) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) 01:13:16 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}) 01:13:16 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x3f00000000000000, 0x10) 01:13:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x0) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:16 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) 01:13:16 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000291, 0x0) 01:13:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ifb0\x00'}) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) pipe(&(0x7f0000000200)) 01:13:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:16 executing program 7: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020307031dfffd946fa2830020200a00090005000000001f0c1ba3a204000400", 0x24}], 0x1}, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000640)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005b00)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000005c00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005c40)={{{@in=@broadcast, @in6=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@local}}, &(0x7f0000005d40)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000005f00)={'bcsh0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000005f40)={'team0\x00'}) accept$packet(0xffffffffffffffff, &(0x7f0000005f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000005fc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000006000)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000006040)={'bond_slave_1\x00'}) accept4$packet(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000061c0)=0x14, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 01:13:16 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}) 01:13:16 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000fb, 0x0) 01:13:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ifb0\x00'}) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) pipe(&(0x7f0000000200)) 01:13:17 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x66) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r1, 0x3, &(0x7f0000000080)={&(0x7f0000000040)="90b63a5977b0196cf9e8eed2248e84f5b4533ead2209e696967c47f09621d20e4051fa0c948ca9449f68dbef830fbd36f8938c5d3ca0d2c695de56740b", 0x3d}) r2 = userfaultfd(0x800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f00000000c0)={0x8, 0xfffffffffffffffd, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:17 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:17 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f00000001c0)=@known='user.syz\x00', &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00", 0x3a7, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 01:13:17 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000}) 01:13:17 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x7, 0x3e}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r1, 0x4, 0x6}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0x80000000}, {0x6}]}, 0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/65, &(0x7f0000000100)=0x41) sendmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x0, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x2, 0x0) 01:13:17 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000104, 0x0) 01:13:17 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x4000000000000000, 0x10) 01:13:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101004, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x4000, 0x0) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:17 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 01:13:17 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000088, 0x0) 01:13:17 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0xffffffffffff0000, 0x0, 0x0, 0x6, 0x1, 0x5, 0x100000001, 0x7, r3}, 0x20) fallocate(r2, 0x0, 0x0, 0x3fd) sendfile(r1, r2, &(0x7f00007ed000), 0x2) 01:13:17 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x30003, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fcntl$setstatus(r0, 0x4, 0x0) write$eventfd(r0, &(0x7f00000001c0), 0xe9c9) write$eventfd(r0, &(0x7f0000000280), 0xfe3c) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4600fe0000050000000000000000003f000000000000000000380000000000000018414e1c000020000200000002000000000000410e493d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055c8326f3f6b89a1a7ea000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d03e788624be9b40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb042f07c465a231116e52e1fc46a8a02a8685b9f7312f354c1f2541e88fe8d4ad2052ee8ece4c959ba342a5aa01593bf5a758c86007e71ee64ec3e2e5f2049384d37cc7f3b236a1128ea580b6e55c4fac716a76d5abe130fcbe316ad4fff88fe68a8e7b51cccd6942db992cd11cbf1a8ebecdab138b1c1b671f013f62945d52ffd0ea53bc1945a3a693576fc01e4589cff3e8e5cf468de7540a702bfbb38d46dfe4651db37b6166568aa12067ad77387440639b0fa88bf514e405e75e0d"], 0xfdfa) 01:13:17 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 01:13:17 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022b, 0x0) 01:13:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file1\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2000010, &(0x7f000000a000)) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00') syz_fuse_mount(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 211.029530] attempt to access beyond end of device [ 211.035136] loop7: rw=2049, want=438, limit=384 [ 211.040238] Buffer I/O error on dev loop7, logical block 437, lost async page write [ 211.048343] attempt to access beyond end of device [ 211.053435] loop7: rw=2049, want=439, limit=384 [ 211.058220] Buffer I/O error on dev loop7, logical block 438, lost async page write [ 211.066196] attempt to access beyond end of device [ 211.071308] loop7: rw=2049, want=440, limit=384 [ 211.076240] Buffer I/O error on dev loop7, logical block 439, lost async page write [ 211.084290] attempt to access beyond end of device [ 211.089345] loop7: rw=2049, want=441, limit=384 [ 211.094094] Buffer I/O error on dev loop7, logical block 440, lost async page write [ 211.102959] attempt to access beyond end of device [ 211.108093] loop7: rw=2049, want=566, limit=384 [ 211.129195] attempt to access beyond end of device [ 211.134413] loop7: rw=2049, want=438, limit=384 [ 211.139157] Buffer I/O error on dev loop7, logical block 437, lost async page write [ 211.147205] attempt to access beyond end of device [ 211.152272] loop7: rw=2049, want=439, limit=384 [ 211.156999] Buffer I/O error on dev loop7, logical block 438, lost async page write [ 211.164986] attempt to access beyond end of device [ 211.170099] loop7: rw=2049, want=440, limit=384 [ 211.174985] Buffer I/O error on dev loop7, logical block 439, lost async page write [ 211.183341] attempt to access beyond end of device [ 211.188427] loop7: rw=2049, want=441, limit=384 [ 211.193179] Buffer I/O error on dev loop7, logical block 440, lost async page write [ 211.201281] attempt to access beyond end of device [ 211.206326] loop7: rw=2049, want=561, limit=384 [ 211.211172] attempt to access beyond end of device [ 211.216182] loop7: rw=2049, want=562, limit=384 [ 211.220906] Buffer I/O error on dev loop7, logical block 561, lost async page write [ 211.228809] attempt to access beyond end of device [ 211.233786] loop7: rw=2049, want=563, limit=384 [ 211.238508] Buffer I/O error on dev loop7, logical block 562, lost async page write [ 211.246864] attempt to access beyond end of device [ 211.251885] loop7: rw=2049, want=564, limit=384 [ 211.256619] attempt to access beyond end of device [ 211.261609] loop7: rw=2049, want=565, limit=384 [ 211.284861] attempt to access beyond end of device [ 211.289980] loop7: rw=2049, want=438, limit=384 [ 211.295156] attempt to access beyond end of device [ 211.300222] loop7: rw=2049, want=439, limit=384 [ 211.305180] attempt to access beyond end of device [ 211.310254] loop7: rw=2049, want=440, limit=384 [ 211.315269] attempt to access beyond end of device [ 211.320356] loop7: rw=2049, want=441, limit=384 [ 211.326009] attempt to access beyond end of device [ 211.331119] loop7: rw=2049, want=566, limit=384 01:13:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x30003, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fcntl$setstatus(r0, 0x4, 0x0) write$eventfd(r0, &(0x7f00000001c0), 0xe9c9) write$eventfd(r0, &(0x7f0000000280), 0xfe3c) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xfdfa) 01:13:18 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:18 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 01:13:18 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000001580)='/dev/input/mice\x00', 0x0, 0x480000) io_setup(0x8001, &(0x7f0000000040)=0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000001540)={0x3, 0x3, 0x8, 0x0, 0x6}) io_submit(r1, 0x5, &(0x7f0000001500)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000080)="27994b7588610e3ba56f3bf63b712f710e5715578fb75b33460d6869d6bd2d6abec98b9b4915440831ae15d18cb1d4d31d04b6c67787a10cccfd082f63a7caf0bbb76921540a876c1a1db7317e2b4e1a9bcd0ed3a9b94be00b9369352d12dad34dd67d1ef9aef22da273b09ea27f8aa8e4c7f855e9f0868dd141bcb64ccb9fb09dac755a09669d27a70481d183fd1575881e9ce09f7e85fdddcd3ec0aa6edf0416fc25b132880fcc4e6c1af53928031d925e3182cdbff32ccf9a6802dd04ae27c40b784cae362c6f8b1b948bb302024198eadba8c5827da68bb91c21f20de88ccf2bc7c3b1a41def836e1de73e2e1e01", 0xf0, 0x2, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x7f82, r0, &(0x7f0000000340)="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", 0x1000, 0x40, 0x0, 0x0, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000200)="3f1fd92e448252d2a517b5c1e7bde12c18b0282cef0a7c6fd2212f921351d1088c25ae32e389b9", 0x27, 0xfffffffffffffffa, 0x0, 0x0, r0}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x7, 0x80, r0, &(0x7f0000001340)="52763d399f664107a895f96b67e57e757c18e40e47c707adc5c33ee89b43ca52daede42a004086291cf8043ce34ff4707af65cb6dffc06822571fd4ea6766585da335f37fced2214fbc23039b7c853994af402f819f631cc6003425cc82c397860d1b295ccdf6ef24844481431e8c64b93827356e579314bc9dd65618f307315e0cefd739eae7122e6dc191ae3fff50e01011e6afc9a", 0x96, 0x0, 0x0, 0x1, r0}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000001440)="3d484d19e13266339cffc14983db01359336fc0e25768799b0cae529cbdbba9abda62cd4ff26c2cd4531099a9f404d450bed726e238b3750fbb9f1f899f68f3454576027824d82a0136049282728ffc23b6df7e3756025ac663e7183202226", 0x5f, 0x40, 0x0, 0x1, r0}]) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/73, 0x49}], 0x1) 01:13:18 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x16000, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000)) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r1, &(0x7f0000000140)='|', 0x1) 01:13:18 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x8000000, 0x10) 01:13:18 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000219, 0x0) 01:13:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x200) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:18 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 01:13:18 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:18 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001b6, 0x0) 01:13:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0xffffffffffffffff, 0x7, 0x1, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = dup(r0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000400)={"5c6d2d74bfc765f9abb6d299904a797ec0250a1f444dd105f7fa0b5d668c1b0263b5e347f860110f1ba6c6268b32a84ec8a891b4acb73f122dd487d970b59bfb74f469d2fdc6a533f16af0700e5184cf67e25dfcae6ef89e3ab46f4864f656d240e80924894690553a95e207183627266b475a225a220b151e8f70375de7eb16f5ad98d8cca661826617dc654d0f87e567f708cf8209f6e62761c04739bcaf67b1b2e52d7b4b8b4ee5c4f22487eae8b70d6d036d4c547afb638d6c869d1cfb9a31f34c4f6a883f2d082dca4a732349e8074305ef2ddb945d81d2c5cb95fdbd395d6017231efa505fb5ba028397a2b9c263c1ef19a34392f07aa5dac0d74d94251fc75877fd758fa5e169eee8c8c7507ca50d8d08d2bb99c3ad11f597b901e55a87a0b2c9a7f1d58f907818d1405afb9d314e1223994a1d7e1e8a0a4cce5a849527000cc93f75e43f1722d5cb21b2a5f09ba2adc65d30888eafb6734c7a6442c741896fb45183165e37b035f5c48bd0abe8d5da8c6f3e0287cf4c8c3957f80cfbdb162954bba1e7ae43eeed90cbdde0692645d1dc74657c808cd1e55f5d4b25a40d76291a3ec92b1ae505475ceccd1af37ae000c6a8b7d6e38eec309c94a52badabd33cd0c3794a31bd94d9b4318e0b9d899f5d823c8f419e4a28990b2a67b9a63e6f6a3c5172ab6e179561af2a3beb90fee9f5edc509cbc1150ece4059730bc96a9205ad4aba9833029eaccccae0be6e2383835125e0128c0afcdb48986a2f05ccab9eaacd2bf6250dc7f82e77208e59b9fea5af2043b1374f51d1d5ec6130d36bf4ea3624e29f7d7445063cb41467ac581b002d9d9275a8f2df43fff32a88015dc8176d8ec22a3345814f0496f4e303ec4ba9b30222880e58420e9b81df8e34605abfbeaa804d1d2e9673186cff47d4a46dc7d60bfab31583cbc85d4667d8555d8f17cea21a996deb9f41f4b1e21b8d876a72d889366766ce554eab5342a05bdb83048a0c390c107870f348d2bbcc96f506f696f2ce8f68cd2ecb369c1da5014a217829299e12a7b6278ee71bb24c219e463fed454759d3cfd8dd9b6bdaa29d42e31770395057b1850832562a422b18376e005102c5b6fbc16f254ae8c57bef6170d2eeda650d1bb9d4464f6ce2523649d29acb86628977f7d2928d2b345aebb9d122c3aa71a266f151d56977a62394945b0d8d7ab7d21a234e05dd89483aa62d0eebd1ea282786d7453a1909067c4f6aa39f1451a5d8b2198670144ff67c7cbf83737d5809c7ff6ca838e2427210686ed5b037074cf039ca385896e90feb5773f70b5675fe2aa948235ec9bc59f3a95c17f61fc45ba04a123723ee8830b60f74c80fc1dc5d04aa4b41deb7a8a91f5ab137da7cd257ba86ec3341565900"}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="260000000000000000000000000000000000000000000000ebb978927322f0962db8686732ffc4fbea35c6a084018b88"]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40000, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = dup3(r0, r1, 0x0) write$fuse(r4, &(0x7f0000000140)={0x18, 0x0, 0x9, @fuse_bmap_out={0x5}}, 0x18) [ 212.090511] attempt to access beyond end of device [ 212.095596] loop7: rw=2049, want=438, limit=384 [ 212.100373] attempt to access beyond end of device [ 212.105547] loop7: rw=2049, want=439, limit=384 [ 212.110499] attempt to access beyond end of device [ 212.115575] loop7: rw=2049, want=440, limit=384 [ 212.120420] attempt to access beyond end of device [ 212.125521] loop7: rw=2049, want=441, limit=384 [ 212.130573] attempt to access beyond end of device [ 212.135637] loop7: rw=2049, want=566, limit=384 [ 212.156961] attempt to access beyond end of device [ 212.162253] loop7: rw=2049, want=438, limit=384 [ 212.167524] attempt to access beyond end of device [ 212.172567] loop7: rw=2049, want=439, limit=384 [ 212.177384] attempt to access beyond end of device [ 212.182451] loop7: rw=2049, want=440, limit=384 [ 212.187469] attempt to access beyond end of device [ 212.192631] loop7: rw=2049, want=441, limit=384 [ 212.197593] attempt to access beyond end of device [ 212.202648] loop7: rw=2049, want=561, limit=384 01:13:19 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={"6c6f3a05e6ff0100", {0x2}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x10201, 0x2, 0x7000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) [ 212.207544] attempt to access beyond end of device [ 212.212648] loop7: rw=2049, want=562, limit=384 [ 212.217630] attempt to access beyond end of device [ 212.222695] loop7: rw=2049, want=563, limit=384 [ 212.227548] attempt to access beyond end of device [ 212.232587] loop7: rw=2049, want=564, limit=384 [ 212.237410] attempt to access beyond end of device [ 212.242491] loop7: rw=2049, want=565, limit=384 01:13:19 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 01:13:19 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000e4, 0x0) 01:13:19 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:19 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000004c0)) getsockname$packet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000540)=0xfd9a) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@dev={0xfe, 0x80, [], 0x12}, 0x4e22, 0x6b11, 0x4e20, 0x0, 0x2, 0x80, 0xa0, 0x7e, r1, r2}, {0xffffffffffffffff, 0x7, 0x2, 0x80, 0x25e, 0x2, 0x49, 0x8}, {0x1f, 0x5, 0x88e, 0x9}, 0x4, 0x6e6bba, 0x2, 0x1, 0x3085f0264b4eccc9, 0x1}, {{@in6, 0x4d3, 0x32}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x34ff, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x3db, 0x8}}, 0xe8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000400)=0xe6c, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000fc, 0x22) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x3, '\x00', 0x4}, 0x18) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000240)) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/70, 0x1) 01:13:19 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 01:13:19 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:20 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 01:13:20 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ea, 0x0) 01:13:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:20 executing program 7: r0 = socket$inet6(0xa, 0x80f, 0x400000001d) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)=@in={0x2, 0x4e24, @loopback=0x7f000001}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 01:13:20 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0xff7f, 0x10) 01:13:20 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) r2 = getpgid(r1) sched_setattr(r2, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) r3 = socket(0x2, 0x6, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000380), 0x4) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)) dup2(r3, r4) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000180)={0x1, 0x0, 0x9, 0x3}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000240)={0x0, 0x3, 0x7, &(0x7f00000001c0)=0x6a944fa5}) write$sndseq(r6, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000280)) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0xffffffff, 0x400, 0x1, 0x4, 0x0, 0x7, 0x20, 0x5, 0x7, 0x3f, 0x86, 0x2, 0x6, 0x0, 0xfffffffffffff2c2, 0x80, 0xb9e2, 0xff43, 0x7, 0x81, 0x100, 0x8000, 0x1, 0x8f, 0xff, 0xff, 0x10000, 0x6, 0x7, 0x9, 0x9, 0x67d6, 0x7, 0x4, 0x8, 0x66, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x2088, 0x100000001, 0x7, 0x7, 0x2, 0xffffffffffffef81}, r6, 0x5, r0, 0x2) 01:13:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r2, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) linkat(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x400) 01:13:20 executing program 7: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)="006400ecff0345") getdents64(r1, &(0x7f0000000280)=""/81, 0xfd68) getdents64(r1, &(0x7f0000000df0)=""/528, 0xbcc2) sysfs$3(0x3) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000000c0)=0x6) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x8, 0xfffffe7f) syz_open_dev$random(&(0x7f0000000040)='/dev/random\x00', 0x0, 0x4800) 01:13:20 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}) 01:13:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:20 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027d, 0x0) 01:13:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:20 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000105, 0x0) 01:13:20 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getitimer(0x1, &(0x7f0000000080)) getitimer(0x0, &(0x7f0000000000)) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000001280)=[{&(0x7f0000000180)="61d4570d8fd68056", 0xfffffffffffffe0f, 0x1}, {&(0x7f00000001c0)="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", 0x1000, 0x2}, {&(0x7f00000011c0)="23053e547f7e54b4254e191c9054c59f840cf1077205284190d4d37f9d1398c454a7093e180d24b0e499a0db5d5477b4b7403ccab289596d00ce37cad7826e79e43e12b8628d6a74271089f558d060963e319fa0a29ba52430a86de0128c4eb29be2078dc68ed751d0e308d5", 0xfffffffffffffe34, 0x10001}, {&(0x7f0000001240)="b4", 0x1, 0x10000}], 0x0, &(0x7f00000000c0)=@noikeep='noikeep') 01:13:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:20 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 01:13:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:20 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000028a, 0x0) 01:13:20 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 01:13:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 214.142651] XFS (loop7): Invalid superblock magic number 01:13:21 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x8, 0x10) [ 214.311058] XFS (loop7): Invalid superblock magic number 01:13:21 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) fcntl$addseals(r0, 0x409, 0x1) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000000c0)={0x3, 0x5, 0x20, 0x3}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000040)) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) readlink(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000240)=""/186, 0xba) 01:13:21 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:21 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000144, 0x0) 01:13:21 executing program 7: r0 = socket$inet6(0xa, 0x805, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) setfsuid(r3) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev={0xfe, 0x80}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x32}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}}}, 0xe8) close(r0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xffffffffffffffec) 01:13:21 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 01:13:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0xd7f3, 0x9}, 'port0\x00', 0x4, 0x40, 0x3, 0x0, 0xc804, 0x3b, 0x0, 0x0, 0x6, 0x55c8}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @multicast2}, &(0x7f00000000c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', r2}) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x531402, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r3, &(0x7f0000000540)=""/103, 0x204, 0xffffffffffffffff) pwrite64(r3, &(0x7f0000000140), 0x0, 0x0) 01:13:21 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:21 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 01:13:21 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000140, 0x0) 01:13:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0x0, 0x0, &(0x7f0000000100)}) [ 214.698198] Unknown ioctl 35123 01:13:21 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:21 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000d9, 0x0) 01:13:22 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) [ 215.053803] binder: 14982:14988 transaction failed 29189/-22, size 0-0 line 2852 [ 215.068108] binder: 14982:14988 unknown command 536907575 [ 215.074499] binder: 14982:14988 ioctl c0306201 20008fd0 returned -22 [ 215.089903] binder: undelivered TRANSACTION_ERROR: 29189 01:13:22 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x800000000000000, 0x10) [ 215.617282] Unknown ioctl 35123 01:13:23 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000164, 0x0) 01:13:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:23 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8801, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) 01:13:23 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 01:13:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:23 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000180)={0xf9, 0x0, [0x4, 0x5, 0xffffffff00000000, 0x3]}) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) getsockname$packet(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000004c0)=0x14) getpeername$packet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000005c0)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000a40)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000005500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44420}, 0xc, &(0x7f00000054c0)={&(0x7f00000052c0)={0x1c4, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {0x1}, [{{0x8, 0x1, r4}, {0x128, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x821}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x8, 0x9, 0xba65, 0x200}]}}}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0xc000}, 0x80) r9 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r9, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f0000000240)) 01:13:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:23 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}) 01:13:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:23 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001cb, 0x0) 01:13:23 executing program 7: syslog(0x3, &(0x7f0000000600)=""/25, 0x19) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1f, 0x8002) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)=0xea35, 0x4) 01:13:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:23 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 01:13:23 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000cb, 0x0) 01:13:23 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x11) 01:13:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:23 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000004f40), &(0x7f0000000040)=0x4) 01:13:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:23 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 01:13:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:24 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x2001010) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) delete_module(&(0x7f0000000040)='+procem0\x00', 0xa00) fsetxattr(r2, &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)='+procem0\x00', 0x9, 0x1) r3 = creat(&(0x7f0000000180)='./control\x00', 0x101) process_vm_readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000300)=""/243, 0xf3}, {&(0x7f0000000400)=""/161, 0xa1}], 0x3, &(0x7f0000001b40)=[{&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/211, 0xd3}, {&(0x7f0000000780)=""/232, 0xe8}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/208, 0xd0}, {&(0x7f0000001980)=""/28, 0x1c}, {&(0x7f00000019c0)=""/155, 0x9b}, {&(0x7f0000001a80)=""/166, 0xa6}], 0x9, 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c40)={r3, 0x0, 0x1, 0x5f, &(0x7f0000001c00)=[0x0, 0x0, 0x0], 0x3}, 0x20) 01:13:24 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000001a, 0x0) 01:13:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1, &(0x7f00000002c0)=""/143, 0x8f, 0xc128}, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000280)={0x4, 0x0, 0x0, "7b4557c5"}) 01:13:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:24 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 01:13:24 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:24 executing program 0: read(0xffffffffffffffff, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x49e, 0x40, 0x56, 0x3ff, 0x8, 0x0, 0x4, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4}, {0x1a, 0x0, 0x681, 0x3, 0x0, 0xfffffffffffff800, 0x2, 0x7, 0x5, 0x5, 0x566, 0x2}, {0xffffffffffff0001, 0x4, 0xa7cf, 0x9, 0xe340, 0x2, 0x1, 0x46f1, 0xbf4c, 0x7f, 0x20, 0x300000000000, 0xfffffffffffffffa}], 0x9}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r0, &(0x7f0000000540)=""/103, 0x49, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x2) pwrite64(r0, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0xfbe}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x0, 0x2, [0xffffffff, 0x8]}, &(0x7f00000001c0)=0xc) 01:13:24 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001b1, 0x0) 01:13:24 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) 01:13:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:24 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x13) 01:13:24 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:24 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}) 01:13:24 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000213, 0x0) 01:13:24 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x200, 0x2) ioctl$int_in(r0, 0x5450, &(0x7f0000000000)=0x3) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:24 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:24 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 01:13:25 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1, &(0x7f00000002c0)=""/143, 0x8f, 0xc128}, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000280)={0x4, 0x0, 0x0, "7b4557c5"}) 01:13:25 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000266, 0x0) 01:13:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:25 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000}) 01:13:25 executing program 6: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000003280)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = semget$private(0x0, 0x2, 0x12) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000000)=""/104) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000b94000)=""/246) recvmmsg(r2, &(0x7f0000001d00)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000180)=""/175, 0xaf}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)=""/48, 0x30}, {&(0x7f0000000380)=""/116, 0x74}], 0x7, &(0x7f00000005c0)=""/254, 0xfe}, 0x400}, {{&(0x7f0000000480)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1, &(0x7f0000000800)=""/139, 0x8b, 0x3}, 0x1000}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000008c0)=""/204, 0xcc}, {&(0x7f00000009c0)=""/194, 0xc2}, {&(0x7f0000000ac0)=""/212, 0xd4}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/179, 0xb3}], 0x5, 0x0, 0x0, 0x840000000}, 0x1}], 0x3, 0x2000, &(0x7f0000001dc0)={0x0, 0x1c9c380}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001e00)={'team0\x00', r3}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r2, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000003200)=[{&(0x7f0000001e40)=""/171, 0xab}, {&(0x7f0000001f00)=""/91, 0x5b}, {&(0x7f0000001f80)=""/138, 0x8a}, {&(0x7f0000002040)=""/180, 0xb4}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/235, 0xeb}], 0x6) 01:13:25 executing program 4: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:25 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 01:13:25 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x14) 01:13:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:25 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000202, 0x0) 01:13:25 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}) 01:13:25 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x5, 0x100}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:25 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000058, 0x0) 01:13:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:26 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 01:13:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:26 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000138, 0x0) 01:13:26 executing program 7: socket$inet6_sctp(0xa, 0x1, 0x84) 01:13:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 219.371207] attempt to access beyond end of device [ 219.376570] loop7: rw=1, want=130, limit=112 [ 219.381077] buffer_io_error: 18 callbacks suppressed [ 219.381090] Buffer I/O error on dev loop7, logical block 129, lost async page write [ 219.394867] attempt to access beyond end of device [ 219.399893] loop7: rw=1, want=131, limit=112 [ 219.404369] Buffer I/O error on dev loop7, logical block 130, lost async page write [ 219.416987] attempt to access beyond end of device [ 219.422736] loop7: rw=1, want=132, limit=112 [ 219.427241] Buffer I/O error on dev loop7, logical block 131, lost async page write [ 219.439788] attempt to access beyond end of device [ 219.444884] loop7: rw=1, want=133, limit=112 [ 219.449387] Buffer I/O error on dev loop7, logical block 132, lost async page write [ 219.463256] attempt to access beyond end of device [ 219.468472] loop7: rw=1, want=142, limit=112 [ 219.472955] Buffer I/O error on dev loop7, logical block 141, lost async page write [ 219.481315] attempt to access beyond end of device [ 219.486563] loop7: rw=1, want=143, limit=112 [ 219.491102] Buffer I/O error on dev loop7, logical block 142, lost async page write [ 219.498988] attempt to access beyond end of device [ 219.504102] loop7: rw=1, want=144, limit=112 [ 219.508729] Buffer I/O error on dev loop7, logical block 143, lost async page write 01:13:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) accept4$packet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14, 0x80000) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) 01:13:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:26 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) [ 219.518110] attempt to access beyond end of device [ 219.523233] loop7: rw=1, want=145, limit=112 [ 219.527859] Buffer I/O error on dev loop7, logical block 144, lost async page write [ 219.542358] attempt to access beyond end of device [ 219.547509] loop7: rw=1, want=4241, limit=112 [ 219.558063] attempt to access beyond end of device [ 219.563082] loop7: rw=1, want=8337, limit=112 [ 219.571868] attempt to access beyond end of device [ 219.576876] loop7: rw=1, want=12433, limit=112 [ 219.586653] attempt to access beyond end of device [ 219.591678] loop7: rw=1, want=16529, limit=112 [ 219.600839] attempt to access beyond end of device [ 219.605858] loop7: rw=1, want=20625, limit=112 01:13:26 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x2) 01:13:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:26 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000049, 0x0) [ 219.631520] attempt to access beyond end of device [ 219.636556] loop7: rw=1, want=24721, limit=112 [ 219.660875] attempt to access beyond end of device [ 219.665939] loop7: rw=1, want=28817, limit=112 01:13:26 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) [ 219.716332] attempt to access beyond end of device [ 219.721419] loop7: rw=1, want=32889, limit=112 01:13:26 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r2 = getpgid(r1) sched_setattr(r2, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:26 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000015e, 0x0) 01:13:26 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000000000000}) 01:13:27 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:27 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000062, 0x0) 01:13:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:27 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000027c, 0x0) 01:13:27 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}) 01:13:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0), 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:27 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x12) 01:13:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000140)="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") ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/252) pwrite64(r1, &(0x7f0000000140), 0xfffffffffffffddd, 0x19) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0)=0x71, 0x4) signalfd4(r0, &(0x7f0000000400)={0x1000}, 0x8, 0x80000) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000300)=0x4, &(0x7f00000003c0)=0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r2, 0x6, 0x1, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffebf) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x800) 01:13:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0), 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:28 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) r2 = getpgid(r1) sched_setattr(r2, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffffffffffff4fb, 0x1}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x1}, &(0x7f0000000240)=0x8) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:28 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}) 01:13:28 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000137, 0x0) 01:13:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0), 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:28 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0), 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:28 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400, 0x200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000007c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000900)=0xe8) r5 = getegid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000940)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000a80)=0xe8) r8 = getgid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000ac0)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) r11 = getgid() r12 = getpgrp(0x0) fstat(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000c00), &(0x7f0000000c40)=0x0, &(0x7f0000000c80)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000012c0)=0x0) stat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getegid() r18 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000013c0)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000014c0)=0xe8) getgroups(0x5, &(0x7f0000001500)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) r21 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000003840)=0x0) lstat(&(0x7f0000003880)='./file0\x00', &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getgid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000041c0)=0x0) lstat(&(0x7f0000004200)='./file0\x00', &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000042c0)='./file0\x00', &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r30 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004380)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000004480)=0xe8) fstat(r1, &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000004540)=0x0) getresuid(&(0x7f0000004580)=0x0, &(0x7f00000045c0), &(0x7f0000004600)) lstat(&(0x7f0000004640)='./file0\x00', &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000005fc0)={0x0, 0x0}) fstat(r1, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000006080)='./file0\x00', &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000006140)=0x0) r40 = geteuid() getresgid(&(0x7f0000006180), &(0x7f00000061c0)=0x0, &(0x7f0000006200)) fcntl$getownex(r1, 0x10, &(0x7f0000006240)={0x0, 0x0}) lstat(&(0x7f0000006280)='./file0\x00', &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006340)={0x0, 0x0, 0x0}, &(0x7f0000006380)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000063c0)=0x0) getresuid(&(0x7f0000006400)=0x0, &(0x7f0000006440), &(0x7f0000006480)) r47 = getgid() r48 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006740)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000006840)=0xe8) r50 = getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000006880)=0x0) fstat(r1, &(0x7f00000068c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000006940)={0x0, 0x0, 0x0}, &(0x7f0000004900)=0xffffffb1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000069c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006a00)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000006b00)=0xe8) getresgid(&(0x7f0000006b40), &(0x7f0000006b80), &(0x7f0000006bc0)=0x0) r57 = getpgrp(0xffffffffffffffff) r58 = geteuid() fstat(r0, &(0x7f00000091c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000009240)=0x0) fstat(r0, &(0x7f0000009280)={0x0, 0x0, 0x0, 0x0, 0x0}) r62 = getegid() r63 = getpgid(0x0) r64 = geteuid() r65 = getegid() r66 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000009300)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000009400)=0xe8) fstat(r1, &(0x7f0000009440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000009580)=[{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000002c0)="0de0a700f3d321524ec7939fe89ed28dd3c8d2fef6fe458c04f48890f101865b9399ec94590a33febd6d4ae022d165272f23598419b9e46a134953750c57f12a3def107bf37469fbd2dececbf8681659edc0f90c587e8277ee28b074bced4bba42a03f387daad30ee7b18ed9e7e14bb70f1f48a29d5f5edc8bd9f8f376f16a4621a303901c5aaf2ca838419a497f1d7a1508b27d8d779f7952ee62c5d6914a14ce8de681a1033e699a607ddf7afbb62d55269ccc14f1d000631ab527ec0d1dc9292fc179e3f49606", 0xc8}, {&(0x7f00000000c0)="fb154763693a5b8e7793575347057d5b6d5ca77d0872aa969a8c208b50a4f2d609b8", 0x22}, {&(0x7f00000003c0)="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", 0xfc}, {&(0x7f0000000100)="245bd6a3f8925131a785e65ca153fd5048fb38384b61a63c9f02a8113299118000c07d38c701048f2058c692c1d4fce646ec221b910fc382cbc654b16cb09e8bdb14aa813b16e5762cacee94da3abe7f3949d4121d442df7b1e62a1e9c54c86e671503c787b2c3b49000b1", 0x6b}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000005c0)="a26b51c79395efb99e81e691bdb73fde7e233092f81f4780e713dcc3465a4a289932cc79788ce7a4febe7df70b9b487ce18124b0db8947474affb4062dbc41af733328d3093fdcf72314ef860c936bb748ce16e55a3075ececf5fb622718df9fa1716d20f00203a003ec5eb284f2ed7795444ab12c3bc375dfcc03672b060ecdba1fe3edf20e8f722e0c1aede95c0b6227fb31fd673b33754f210ba4923cbfe2f6bfa93f62aaf4419e81ffb453133968a10531a18dd817bfd3a5c270be255ccf32414700f23fc46c1a92dd1005bb2df10d9d0db7120d", 0xd6}, {&(0x7f00000006c0)="53fcf4b78cf4d0817a22d1fa068341532b9606a36cd907042133104631a2df887fe769064a8be8d9f23467343cd7b4a0d31e1143373fd6c0083b7cd2c754122780a08576b2167dd2a0522016d8e5416212f7d65f8e0caffb954ad057558c3769df15a3f323b88add561c3fa4ea245e59648e2cabb814e7604cc7fc963a1f42a47fd5d8a3170c45b5b4187bcec46446a5e4733a418c9ed4c1f04879c2511df48fb93bb0e985cec362a412045d4ae9c444d1f3d06d3851fd9f897c0e4ddaafd28bfd3714c0591107a1d7c5", 0xca}, {&(0x7f00000001c0)="503c48e41e59f2baf0a9cac8e38456478bb3491a", 0x14}], 0x8, &(0x7f0000000cc0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r1, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0xb0, 0x40000}, {&(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000e00)="69d968ea8acb9e8f902b2ad9e1256566955a57ebc3d8e4aa74ed0be52eb8c136809bd6c76ef3bc", 0x27}], 0x1, 0x0, 0x0, 0x20000004}, {&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f00)="0e4385fafd2a790170d2b14f188cb7a7f5a0ecbe2054c4c95070eeaa3b44c52835d919bb19d3cf486c3950a446498f544c", 0x31}, {&(0x7f0000000f40)="30859e1e0a4894da6d277c3ab57141b4dd08d7bb09218c4ef3cdc8516fed5814412255a49ec0b47e0d8ba0ac42b12725c574db003022842d16aee1ac81dbd0ff967f05ee3db390157be8c35b61e52a7bcfb9819800ada9de11581f44a71ad4dccb51879e994f80", 0x67}, {&(0x7f0000000fc0)="0f8799af30b784c0a862cbeaf034585843e7a1db385513be06c93ca5fab418b689b93fc39374eabb0335dd7afb9faf6e4cf2d5f28039d5b05ea8af29f3c5477056e43e525981abdc19acd8298c16f8fb83592f6ef7258f20c58d4ad25db9c414187d86a2a107f12a56750faba2c2236ead0445ec959d7031b21112da4d38cf478a38cf5b26cb788fd52d99797d69ebbc6e9f8b6a0da9135b48b7a89138b5b213f6643e1e0d87b751", 0xa8}, {&(0x7f0000001080)="6280af5b9838b711407e86641122155ad45a929e9b9bcd7d9bdd6c256dd59b335d46758595925dc7e891610b19dfb51ea6c813a6da74a2612ac68b59d1abc712b83dcd6f8b55f32955cf125b074c7bf5e9056bb2", 0x54}, {&(0x7f0000001100)="d456dd91a16e0dd5658d2058e65fa35f20ddea9fc951992301f68e8f6ec77f8f108323f0db1a810473dadbc789d50f03fa2accc47df26f47f634b046100d068eee87f217f23c85a12105ea9116e3c3c2d13bc1f8e1639d19d68222eab1ea535d5b0b66ee7b12bf80556766cbd9cd10db755391132456c09b1ff67e7af3dcd13e8f00b160b002c4d90a1bfc9ca5ebc75f73b511b0818c320e", 0x98}, {&(0x7f00000011c0)="185c52621460a97a84b923cee094f61f7f1784f577a3632f26306c44ba73d785a00763791e781e4a424fc20c", 0x2c}, {&(0x7f0000001200)="4c8f5b452d44edb3288524907d58e3", 0xf}], 0x7, &(0x7f00000016c0)=[@cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x30, 0x1, 0x1, [r1, r1, r0, r1, r0, r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}], 0x90, 0x4}, {&(0x7f0000001780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003800)=[{&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="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", 0x1000}], 0x2, &(0x7f0000003940)=[@cred={0x20, 0x1, 0x2, r24, r25, r26}, @rights={0x18, 0x1, 0x1, [r1]}], 0x38, 0x8d0}, {&(0x7f0000003980)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003a00)="0a24d1eee4771c64516710683d754600b0740be863939d81e2868527cd89d1a6f8e9cb35033a789125abccadfea0cc0333fa9115e1a06a5e3441f18133293e65c8431cc06a75caea1a01b380006fd42f555779fba7db240d8455ccba15768f8c5323abfc699bd3967bce695d9cb86978cd912a83d20ff672eb423122b2a8f479a34e0e3d9a005388a3d1b760633b592e2ab4e4a59196ea036fc9d718db7e222d2c7b90ded24008442c326d017def4f04cf90570fd46aabc3614a4ce4ab612a04994a68e155c25ee1161f656ef7bb11edbd771fd8af3f386b4b4ead128f4deccb5bbbee6238a7a76f12b37fe593b4e7", 0xef}, {&(0x7f0000003b00)="f4a0dc5c96452d51b98f7f07475380259e771b002c50718588a526b38e6d44ab9a0929b38aca958af6b2c8", 0x2b}, {&(0x7f0000003b40)="307e5680cd54091d7c4934b342a8d0c3cb2b8833e6aea7b22f20a24c6f2ebc883c21df506b88221b9a50c2a1870d3339e0dc9d5bc2fcc60cd95c7b30037b5eef2ff02f4d765746f943a686f6", 0x4c}, {&(0x7f0000003bc0)="11e5ea55e30d4a1c4926e37fb60af3aa6f5a", 0x12}, {&(0x7f0000003c00)="a419e3ad9d24650e56b88ba7436a6bc0902a08b976bec244c97f05a29c2096987ad19b8f752b3fc51f59d6e56a4b4bebd4c5dfceca559d2a3a7baee879b1458209f71e7080ea6e5ad4721430e936f2f6b726087fbe454f08ee4321e22d305bf6201ca34af8aeff17c15febec59d69abf4ffc0b86503d33ca87565bae854ceeb4bd2d87a8ab7e9da30803784f5c92ee27a7cd923d41a4ede8fe93fa66ec1d948ebedf216b216a5680bbd863107e70f05c7cd1e30d80f895d07d64ef7d340ff9e5e0568f5e61a2209cc559e4e2fdf14358654a9717d413f797c85afb97aa9d28eb006f49a674e2702ac48b9841f0a5efdf653b35da", 0xf4}, {&(0x7f0000003d00)="7b262c0b1eb39be38ce23eaf434e57c2b8092b83b7f24b3c5efdef362fc44d0882994f473abed182d03404acea722f41a9dc467d000611704fecf0f4cc426a9a38c41aec13ec5cf9d89f0e7fc148699deb18f9a3d94aa0e2291213347af080765c5a9c0595c6d8ddb09644c663a38012cef2daa6a3841e875e85aa04c134e1e3b16ee19977c66a7c03c63adfdadec7598260fdf558d89dd450bd45143c5c135642feed55e723b18696877110afe8009f8603076302f121fd0a5205deb7d0ab59d5a2cf69ebf25e6b3b4b176b341cb52767a783fc4a83311c0724da8133ecf5a7cf7256", 0xe3}, {&(0x7f0000003e00)="ec2a507268f6dd66984324847d206e80ae2618e2d4850999fc313f78fa217653768d21234660328f3ff8672dafd96fb3ee77660f1515245dea0087e25a569ab1747a875d3e4e5abf52dfe759453bd7556df7b15e6d8fc6a9b07e089d240d49f85ff541617f39674c123cae40beba01fe25d2464fbcac599c0b6f4d1da223ed4d48a56bd7ce2cf6e11814e584b21227add831449e40c04c80da6242569772df4840a5b520d9564594375f21a8d1c8b87fe212b667d88b19aea5346484bcdbabddd18ae35659b46385bc4682b016700185d05aa37c4eae7a8f6e", 0xd9}, {&(0x7f0000003f00)="a8754729462f227df32a6ea928b07faa709701ba5545c8f82a8a4823f2855ae9f1effedfabcfcf1fd1c5526129de6b924ad875cea4357f18781936891aa73d310c83111ad46cccbba6a1b3a675ba67", 0x4f}, {&(0x7f0000003f80)="33d28487d1e77d7ea01844400f378d37aa14c9ece8fe704cf06ba583be8d2024a8b43a7daf65bedfc289e6719365d77f219f366eff0b209d5fddd86c1d92ee3361afa68ae905e421c6ba6f4237f6b7d46cc9d9b49a095e288d6bf0a7f3cd27574825dadf98850468c6045bbb2f20977fd4fa4ce67e5a0178a2edaabfaf1b0b1f9c1472e55ab1f5a110ce2388ffd198e5c3bddba4dbdceb5576574d621842207d7d5fb4f67db4b3f66a8e2f530533a3dc4d1c05c85dae0b39c114111e1080fc", 0xbf}, {&(0x7f0000004040)="1bebae65b680029e2f2fde0994301951307880bfc1ccbe646a2302b9dedc49eee457b749a41fdd16d98ebe3d35ad91382d5cf255bc16a0ea2ae6711a47c33514e7130cf66ad60dac7f6b7720133c2a8e9cbd77e53c22c9960c4c60f6369f35bba65e4c1d05069526719e9278665d927afe8d27a8ffd726d5a0ef7fb5b7ea559f901f", 0x82}], 0xa, &(0x7f0000004700)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @cred={0x20, 0x1, 0x2, r30, r31, r32}, @cred={0x20, 0x1, 0x2, r33, r34, r35}], 0x78, 0x10}, {&(0x7f0000004780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005a40)=[{&(0x7f0000004800)="58d1665fc2a16aadfd9ce88b822361704868ebb756ef75c9def9a14d4cf90e94ec8152d793b461642b531bd65a59e4c3673d2b3c02e109af5b937529a44a7e19c8361e6298249ac129422cfb79927a5e4b05bfe6c40239b22d4cf938644e64ba549f69ef387c3d2d432e735e017b55a81cf6ca83d32b48f10240dd67ad11b9fed1bae0288e349a512d1b3dd6cbe7889b7dfd0bb0350849a3c3a6c077f15d5eba97bce6c46d66ba658cb14fbe8ea8c9de303c251c3ebbd95fd4049589c943c53a59e5c8d6cd7b77c865c69c4d09dfe3358869c89f5936e76186b318ffa5cb9d92561372979b7bf11950c5fecd184ce0d5b3ed2d", 0xf3}, {&(0x7f0000004900)}, {&(0x7f0000004940)="70f6d7bfbcd82e49ba512c7c817e207978560ad54ab813f376e726f9bda8e77b4a4582a05151867e1c9f68ff6b8c513c5b4839fa1aef39a3ce44078c7274a82747bedd48bce7287c6dc338d61000c0bdae8b377ecb9ffc98e0310a569ce0f7d9913fddf6236507c2ce647ea89c33e108010fdc5832fa796083cad59bab725468eb93f9af76fd31ab33b2b027e3d504a4c9b1c40c9ccb1834bbb7af962917738b529bd23b1beda57647d8b3ab9ce862643bf87fbc61611b43d0d4de801bd85479c65bf7885d6a0e1341ff437950aadb79514511", 0xd3}, {&(0x7f0000004a40)="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", 0x1000}], 0x4, 0x0, 0x0, 0x40005}, {&(0x7f0000005a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005f40)=[{&(0x7f0000005b00)="b154fa3dbbc78d5bff00380cd37c2e43fc1f6b2ce28bbc8784f6314c67c79c6e76d4a546eb3535ec2cd39aeb70399fe910a1221ebfba58fbcdcea7818bdf45fc50300e1e2aee538e0de08780e2e8eb33a3f56b6e2ad19709cb118009e152dd525458a6904a13031a3666012f73c9739c4a840dee24ff7994aed50a95029b547cb0b8974db8d3a56e308788ca91515670c1dbe3bc967a0cd25d1654", 0x9b}, {&(0x7f0000005bc0)="bedd2d1daee1c8e245c0dbf5c85a6d517594bc03b6eda5668c4925c7df2e39febc", 0x21}, {&(0x7f0000005c00)="c1d36673bf4b85f3350341e87197ec36", 0x10}, {&(0x7f0000005c40)="91d2243a1ebdcd4d8e5a6f64afdb1673cab2fba393feccf8a22ad03b4c49dcedcc1047e5f1dcfa6762be1f65fcb13d69f6f60c63b7cb25386ea677696cc53485681cdb3b314c1043647653ee6024bcf1ee86231b92720085397848e7f0a25388e92da839dfa3c83a62409ece421d306070fc5dc95cec5d057624d4c8392c526071bedfa03a172d14a9049573de0f246fe082f86e8b685714591c745776efdda5e03c9cecd0c7fee6d9307958b5fc71ff6894cd1be5b239e41d0c8c20e37f49a97d8089d2ac64100bce097eb497153caddfd5", 0xd2}, {&(0x7f0000005d40)="278c9de34cb12cb27e554fef34ba3a82db80685594467bcb3c5318e436fa65ea6b697b8f783c2f7202727ab9d04883bfecda9577aeed06cc0e1544f08a8eac9651bd49221a5362ed6ac3352d646def853bc3b6adeaf5194ef9dc3d8f3ff2eec50e5faff176", 0x65}, {&(0x7f0000005dc0)="03863fe291d348740a1650739c5533294a8f40b73a886ec376222e885982138c7084495eb52e35c836389e013e1d9916b49e16aa533c21298d8b0f8c95bc066c2d3d1208c700e4d69aed4e1533e918f5f264ea814c9d2d856cfc391765217d80c4", 0x61}, {&(0x7f0000005e40)="2e909cc30eb5f5105f8960c1e410c6ecc483ebcc71d1d8fd9b99d2496a1842c59e931d284e2517b280e166a9ecd21d33af58c7a86edd61b945988bb0f169e73a0ba71c09a68a6ef39d1eed2e040a05d2adf57f7fcd3d9d12e76a840810ef6786d726d35afadf7e1a3e85257bd784eeb22a1207891b282e1c621d42403e5d3dd0f028ad2008b969aed49dcc3b12401a877116f646b3b061318c111a3c6aae0bfd922b34a57f37ebd63ede2b749abd13481248059294fafe4c53b584c7ca15813f13490cada8e233f07c16b3f2773b4b9abd28672ad85b340596a4", 0xda}], 0x7, &(0x7f00000064c0)=[@cred={0x20, 0x1, 0x2, r36, r37, r38}, @rights={0x38, 0x1, 0x1, [r1, r0, r1, r1, r0, r0, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r39, r40, r41}, @cred={0x20, 0x1, 0x2, r42, r43, r44}, @cred={0x20, 0x1, 0x2, r45, r46, r47}], 0xb8, 0x40000}, {&(0x7f0000006580)=@file={0x1e2a3b6125b0da61, './file0\x00'}, 0x6e, &(0x7f0000006700)=[{&(0x7f0000006600)="311c6b9e049cf8c09afe61c6ecd98540baa176e092b8fe5c92b29bbb03385ca793915bc78d3e273127c0f4d6737a7dd0fda08630450792214ff9ed91956a77a6d130c98f30c98620589607a60124e1c8269a90eba16666b71b5be79c2f8e02e390885180d493c402a28b93d92ac5309dd8b844fa9f7c12966a16dfe1fe81c7219656b0141febb38199823cce3f", 0x8d}, {&(0x7f00000066c0)="436a5249167b1977edcb", 0xa}], 0x2, &(0x7f0000006c00)=[@rights={0x38, 0x1, 0x1, [r0, r0, r0, r1, r0, r0, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r48, r49, r50}, @rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r51, r52, r53}, @cred={0x20, 0x1, 0x2, r54, r55, r56}], 0xb8, 0x10}, {&(0x7f0000006cc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000009100)=[{&(0x7f0000006d40)="80d2d6b3e2182adc117e2199daa42bf523e3257f4f5303f263425ff7259f6d66a118330b2868866e2cd94ab52321790e05dfec8b32f3dfd64f59a10a6cabb17f9c37b10642e1e8d1a91beeddbee172ada9741adfd17d56fa697098bd6849061145abfccdbd033048ccd2663fe9e98a35ecb9f7a2616572f33aba0911e1dc2d16ab318e33a383182c50b5b9dfa6000e227b62581af206a3318ae97090252a3a2a1dd6ce9da0077c5bc2efd4d135d6f68b17d7ef89d06fae7dd03b3ef9343bf47bf180ac8301905ce470806924aab853cc526087cf65d6ffd04f76c4b3068edaf364d8eb511160f32465db6c17f85ff362e5d49d0f3c21b34d17b299fc1f5ab5d9024b0a9fa077a4832883d5a7cb98ab624b4ec073d406e8a2e8bb6b4cae52d71ebc2ada5fe0d4cefdd5dbd09013903d72029ad8ce0a892e7248b11a055699010cc7043b7f3ecdaee20eab01349bc7723ebec468d8c637b75c4b27ebec7e4411b8b43b956ad8bf0eec64e11669ee32d837dbcccc5464c5a9326cae9a8dda7ad52b9c527012fe4902a1813d9d9a9a335c02aa703431be375c43f281539198eafbae9f8df8c231d2e8a2b2520a07e7d63f5916d058671fddd6bb96cd333f247fec72a58fc4ba3faf61563fdd8a862c4c9ad355a05d6587ada1ff544479c1509942390eb96016384bc72a1878711692fca61a1c998a1d6a6ea7de81d28d3bf21af153621cc8a055da77728c52d98c633539af01aced199acd4eb402e3b52443dede8e6e3f3f2c90bbe2934a84021a8679c11a700c92927e522034bc3b3f2a3301d5d9123865e2d3212dbafcb555830f1d27941f606941fec3869d959fcf50360a84f31195774bf1f013c9db6dc1c690a93a349bd9bbe4bddbb1722fc3d93c085b997a4f0ed8f4bdea34d50bb763beae5488db0b89dea205dd1f51fb234709464bb3f9395b767613a708065fe05e11720b97a422b96cca4088cc51134a107351ede78505129e156a5025a38efd0d1d29aeb5d82b9d322620b1a29c1049ef6b625a634604e3d401e8a0d9f2b40d2320c15ebbbd9c66d4531cdb7d511389089740cd27c4f1eb362b25e6c96ace56a3c312e9a5082b51a6990f045847adca4c0ec858b12b2fae2fefa9f7b2be356c085fdc97ab30eff60fa4038f8b31090e3809a9616c25f25c5da4f371768510285237892763bbadaf48a103876f446d95b274ddc4f62ae0290009b8a246ae206a479ae9e16dd042d1084b52da93fc8446b96f1968c7f65f75399bb98bd9874eff54edcd46cd9b1428dde27eeb5d7c8725bcba58b0604fdf47091c70b4bf2dfcfc57e3d1b98a72bda2343daecb03532e4bccdd5683c34cdfb72344894e7430332ab4fea52a25c252d16703db14829251298ae797fed9522b9baf306f225324daaee3899fbf5c0db73815923845e3cc73079ebc0abd0c5a4b94290525047e30a41e90ef6d80273d9449525508fca260380195c742fe5b4b97f00ce548715a97243850785b622b06cc8d13b69c4af60602af2d58f81fd0b9ea500c47f0cabaa3aa7b25ca06507b89be7d7ac8139a50f7589d6445517a7bc6d7764f9e7c7af9fc97472215a91773f7d6cd429ad606574992d58f8a79c770dc0f81fe9907346ede8087613fe9da823802f208b8eddac095c38d2988eea21fe0d47a0ab004aca65a31dda8cbd7804580b0488807e0f75155cdcc4d8eed56ac9b0734ed262dc294dfc0ef115d8690b85e269a9ce1203bc1a3f40c66bd593ea474d12ac524ee0fea8e49b4e7383b20d9e4db093eb50d8f744f4721b829d552b895682daf283a414b43acd21911c7a2612f14b85f698df256917ab491e1dd55052c4f325fbda52e9f305d451fbe76f8d786e8c9162d97eb0d6be113a3b3d2bea930e9a08efc56763dab1326cfefb6b3dd6c1fbea329236e1bce2cb31266982d146c74f5a8a0aedd051e4efb61762ef783a6177d0f5fa2d4c2a7c6e355ea6e5a42a3a606bdec9289c58cb59a356c2125f85fd21e260129926677edb8900ba1560075946097fb296360d1bd16c5b3b0525dcc8f1c1b0d3773f113efe451868fcdab25a9b05240aa26a672c01467366f5b26ef6d10803f00c1be18257a5f2ac54e8718d46036566df9c30fa349f9330327dab99dae0c440f4b8b72b4056e40e99c6fb82be426af69cdbc714b9f058ae35fc576389d6a5ef33e94798e79af70958bef40e638fde9b8012389bb2fb2370b021857fdb7363ad228c0f059e82db6bd4f4a032297f9864feb0fe719c49d43722fcb6069ff32c7413a42b0b3b2e3daacc30d290148c4c92da19ebfecbda37fe6bf6aa9b6c74ab09c503d3d20e3c3a37589421b96246258d1fc6ce6df175cb04d9a610e30babd5937888fc73ce2f32d8bf2dee2afdf6617cbe43610f31283965b1cdfbff20f28aa96795bb86f215b172e2b183443dfba9888316f885a12fafb9e02c582f3ec4b2947016f39484f9fe0fee03736706baa88746ea03fa086ba480448868a0bdd1824312e8e869ccdd1e8d62307af33a75f11f0b6a5bd4f5dd146c02e1c2001b4ec06a6bb238a3d992df3e18ffbccab25c39820871d55699fd636004dea15db83191d2579a5179622ec0c76b077e982c3db2449bcb609a5412169d69634250d614d0715c43a5709d1ee72962bc4348e19276d088d7def82ccc3ab7c0df222e161b251bb843219747e9e80d4ececbadc1584f0de3c819b833fa2399b4d102ae4ad51f943de674dfa83cb2e6ef7ca4bafbfb614d07434a3ee0bd2aae1695ffea153088985e6b263c405781cc4708953b49aafd7879b98a9b4d098890fb1d230b2523f5d6c4ad9366bb0fc6855e1a56c88b0d8ddb20c8e25d37dbcc105f6400955976cd31adae68df731915b9e05bd1beaa2d8428891ff4b9d6280813a34f097cc4eb59784e2c995a2a0e360136b53c6d053f4962d4c2de39ea4cf9d4e077f69dd2b65c45adea043d0c8ca9c848866be7612da8716e88848608f56f034506914988f08eb6fd52e6a0f14810a06464f600a3310b7d4d23586f60f5cd1d15ba1fcd1f9771aab9d070c68323d58366b4ed95ade4a6a53de0eee4826b6aa83ec44ea71124f56199f2dda83b1f65f89e65032c2de34a1e552c6811297c63d5e3a57344ae186f74f1224e755d1e57e6dee926146651d362a23a69f2167845fdc2e193f1aff4a4c28c4d9b88d78730d1351cc695414aa1059d931b94dc7604902b7f0d626460a106641d3ca07c7aa47b3e4d9f0e9bbae38b751ebd99f7bc8ed787ec4af2a134c6ebce44a6e6df87aaead5269337686e63dc9f36a23a79c9b8263d9ed47b21b7c3c989c8575333e85cd7d863eefd487b4d933fa1d40ca8a10cfe40a12719b8e360bb5a56f251632782c133cff9cbbf7a0f9a114937ec8e05a413822675014f73ab672f85c731f23023d61cd274d22959297a2c9f270ac3f683da62081295d73fb6fe3f9f6a41034332c5afad6c6ad4d369913d0a8d31ba41bcdf5be0b5d9310e649651faad05201095c68226ee64d714f8e85cd02a7b4197c628b601174c2f9b7d8bb5d3c1a1ec0e8594bc8e9f5559ff02989a95f5df72fb10f5a237cb116a50eeeefc1272b3c18f6cf40cd029f95dd5ada849ae4c2d6d9718bb113e27a43f144331e6ab5afdf18988c5d01d1784ad9ead30a548dfe3e058289607f821b85b5e45388a22ad6d4a405f163094576f78bf92e4827c159f2efff8bc4be8f9387415acfb41a8715725ce6afd4a226fd1474d1bf9cb5f10c8896b4b26003d3cbeb708f24db6ba9361fab416ead8ce838a4098e67039fdbfb18eec15145e03605798759ed76420cc33876dbecc60ddff73c37fb12586c4257346724687cc40f6e55b638a56f423bb7e79dae2114451e1691a4c7ba1c9ba5a0e0afd3dbb80a1f3fdfc58cfa2b8cd96bdaf171b3ceda396b520d630ab7c94c8441d46a6b468fb25a07a5f509c8b684e30eee8e3bf5ab563f904b46f340b6423ac30356540998014c811cd4a9eda9823993bc58df7a437429df61286f56c509d717637774bb7741ec7895251398e30c1a76b21396db2de8d73030c53d2db95c789e34ee07a853e06cbc029b5f701cf2c9209c37b36f9dae794f357912209ff427913a495e2d9952501060e28da3e6235e0502456105ca364a52d2ae5818468f51d2bb2da5479bd39b532145260489150f399ebc3ed783d00a8c2d618de79383d64e4946c0f7d87e7b867342b0b7c7925889ac9337a47c60cb66f5afdaba03c0039741dfe6437b96330dcb5a39b2790ec4c4e2ec34a8df5742d4725d2ec31efc85aa432f18d34f0497df4e7c4703ad6d5db97500c5661c5660a73e3f09d9718aa08729bb83f90109ea4f7694ac13eb86953bcc60bf77777f4fbed0aa5977ef513652101fe33f8bb737229639e3cd92df2897ffbdc23da46c978c68beaebcf841044928c26eb958dfff7c3e1eb4fe54e5989195042fd5abf2754917dc20fa54dec8a39228e8c65217f26a9368987dd64fd33f29c7a760ff119c2afb34ede231e56264888ba5e188e5bcff362537fb421c63f5d7ad91ae8d12cb274d508e4ec5e207ff392981fd6717574ce7fc15a76fa9f63234f81a621dd592ef5732df66a9d31aee3d5ff43b78484b3cf51a8b456439dfaed9af8c722cb33a3d9b325dd98e7427b385333115dee4d0c92e5fd371cfe134fc8630f525b34740ceda61d4b34505a2c4dedd7d8a758bac17e0e3af4b1428713d364acfc818189a8e1631b147b88b66440ea818ca97b75e144acbd6e6505a2b28c4c4edbe79f60a4485a1f1ac191721fc026a0352f0ff743c8271876541db4ff2d863b81a10976f4ac3325f6a418ea99ce7e90dc7d6f874911ec1c9c97c8e7285fb71a22c3b7bf7539203bf5d87ad6736b69d821ea2eb8a314f0eccd0ef4b5c15781e66d2ca5f15edc57453f157bbba97e3df56e48ef9cecdc3acc0aa408f03a436ec991eabe0668dc6fa1cb59b973a307b9325b3b46ee6f3d2e5d6c68a07d91c339f64be71c29a1eea4d33d1d4b50c9bdc7ef72846c8075c83c237e7ef9eaec570c40bb4e6e971fd2abc4667f4a62f7d424627cea42ecdb3118b199c459e8e4f571582f9ea40f1a2c6ba9eb20c17c0b31c1d8e4a5e4c2665e950e42a567d5049304350f821d98cd071798ef5e2d6056f57dd983dc210d558c1cda59f1a76d097fdc7d11fa950a7b27b8b4af9f0e16379ad5b5dba23fae6e6df6f454af1d6ca75fda761854626b6443c7838b91ab2e183a4dfb02ee3729d8e8d76d0513daf4466f379da278b3978f2f0fecbc512f39584d8e7d8beb2c9db540b7973a7d6f04c509b13b401d70443e6aae3a61588093295cc1fb3eb369d4bfaf55e77f3056ed664f823f424c55098e127bfc807aced6c61a7d980eca32ec2d143214976ee37abe3486e2d843a11ef54ac1111fcc9f69de7eff1c172cc3e3558f94063b610ead864765da845a4371d25e6f1f1c2705f8cccae4c51fb42367ce7bc510002ecebc69a63a98fbafe9989c298472a739f7d31d67d61592eddf2a2bb3045ea5ed617d28b9f4d024b8402dfafba9680eba4bc3bae757a5247aa556887962ad65f22611f99c47d2476d2bd89fd1891b7fed6581ad81d1571f83ca53b010f135e881446dba647919d2a24edb7232f7e22e9695fab46d1f7ccca26ff76fa6378640da162e66ee89101e85621149e866be4b4367f8d3439a9da8bf94b9662a774ac23a4fa8f2d076f4bee662ef0defdb5bcfea16ca58d017b4197105081e8f0f490b7530802e57f0eac4a4bb91b", 0x1000}, {&(0x7f0000007d40)="9612a031a9cf8fc29e52bb7e09dfb2016dbb518ccd9bd3d488106c5232cbfc5216f5ff4d4b1b54f89c115cb38a2bef0bbcb87bca497cc06c120ac3bedd546735f023d4b8f987", 0x46}, {&(0x7f0000007dc0)="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", 0x1000}, {&(0x7f0000008dc0)}, {&(0x7f0000008e00)="0bbd0a80a42bec4dc3831693df5c9539cc7be8fc26f5a9cae30ae7bb053c9aa5080a22490d5f44b5fd1248ae2e054a468588119057a1fbaa28a5d3b94ca9e10a510813f2103f70ef2816faee4cbee3224cc4fa6081bcbef634f01319c53512fa154afd2e572bad3c0a730f59df5a17a9e12ac6205a6ed646c087a074262e3e718a49", 0x82}, {&(0x7f0000008ec0)="da89658403d21b32101c04d60215ec383518888769c7813b751c01565935656cbf590d97f9050c8941e74da7e8d1c3e2251232430ef8a9c31e2af0cc5e3ff903db8db43df605", 0x46}, {&(0x7f0000008f40)}, {&(0x7f0000008f80)="29ca0c75e9d626e413f098ebabc43de558a85b430390e89d485205382a1d2cd85085635f069e572889f3a3310b78c4e57cf2c406cf8e289f2489fa530c229d8341f4dc12df4b0d5138b4a63ef2fa233492246102f6e71cdf1edf538ee8f50fe83e4fe9192c1cfa70b8a1ace9406e98affa554969667f9a0ce7defbb49b720deee04990c4103d91612c606a559ace78b8fa17cdf8e9c7c043a0d1526cf001ef2f5e094f472f50cee2896c358c67519fcfbb9438e0e0f2c8e9017bf28aed3e8a2ab002b0a40b31f70859c189ae8a7cd7531ed36225c74b9f65fa034aeb0e42690930959ccfb7272b130f84645225", 0xed}, {&(0x7f0000009080)="eacc625f281ac1263388f8044cc6d660fe335014a554090cfdbf3d76915548a5e3f551a20708b2743b268c144a50807cac5aa0a0b8d6834052f18f9b809d89381f26745c788571962a569379284f746ecff82535cc8e614f3c6d377841bcec31b21aeb790b592cfdb4e7cd5b248841b4ec61", 0x72}], 0x9, &(0x7f00000094c0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r57, r58, r59}, @cred={0x20, 0x1, 0x2, r60, r61, r62}, @cred={0x20, 0x1, 0x2, r63, r64, r65}, @cred={0x20, 0x1, 0x2, r66, r67, r68}], 0xa0}], 0x9, 0x4044) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae6a, &(0x7f0000000280)={0x0, 0xfffffffffffff84d}) 01:13:28 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 01:13:28 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d7, 0x0) 01:13:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0), 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:28 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:28 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}) 01:13:28 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0), 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:28 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000200)) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x80001) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fstatfs(r1, &(0x7f0000000300)=""/149) rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x402db0, {0x3f7c6bbd}}, &(0x7f0000000140), 0x8, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)="776368626e00a4971cfc6b07c1f6b91b80f83be06bd25889bff84c2f2fdb1fcbd55f46c15ec0a3096e82dd21af81") socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000040)) 01:13:28 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:28 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ee, 0x0) 01:13:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:29 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) 01:13:29 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x3) 01:13:29 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="205e17cc", 0x4}], 0x1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000080)) 01:13:29 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x32, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000240)={0x3, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e20, @multicast2=0xe0000002}}}, 0x108) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futimesat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {r2, r3/1000+10000}}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) 01:13:29 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000210, 0x0) 01:13:29 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:29 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 01:13:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:29 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000000a, 0x0) 01:13:29 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:29 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x111, 0x3}}, 0x20) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21}, r2}}, 0x30) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 222.580687] Unknown ioctl -2147191718 [ 222.591545] Unknown ioctl -2147191718 01:13:29 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}) 01:13:29 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000196, 0x0) 01:13:29 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:29 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x80) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xa50) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockname$unix(r2, &(0x7f00000022c0)=@abs, &(0x7f0000003340)=0x6e) 01:13:30 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0xb) 01:13:30 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x9a4) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000040)='|', 0x1) 01:13:30 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 01:13:30 executing program 7: r0 = timerfd_create(0x9, 0x0) capset(&(0x7f00000000c0)={0x200f1526}, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x7c, 0x0, 0x20}) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x5}}, &(0x7f0000002000)) 01:13:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:30 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000116, 0x0) 01:13:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0xffffffffffffff9f) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xe8, r2, 0x200, 0x70bd26, 0x25dfdbfc, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe579}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x34}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x4800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x1010, r0, 0x0) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000100), 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000040)=0xfffffffffffffe5c) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:30 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 01:13:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:30 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x1, @link_local={0x1, 0x80, 0xc2}}, 0xfffffffffffffffe, {0x2, 0x0, @rand_addr}, "00000000000000000e00"}) 01:13:30 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000015c, 0x0) 01:13:31 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 01:13:31 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x501000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, r1, 0x300, 0x70bd27, 0x25dfdbfb, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3b}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x78d}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bcsf0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3b0000000600000001010000faffffff0000000180ffff0020faff66bff92a819eb72766ae6ed1b0ab0009000000fcffff"]}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 01:13:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:31 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0xf) 01:13:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:31 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:31 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000218, 0x0) 01:13:31 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 01:13:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) read(r0, &(0x7f0000000000)=""/235, 0xeb) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:31 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e08) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xcc, &(0x7f0000000100)="299dfdf8e9d3d74dbe94d16b424636a12bcaedc7ea1532087e52c8b3d8a8dcd07d4a6cdbe13169e856ab599ab4bc610cd069a62c8dace3c1eb7e2281fc66f95992e3b09b2c0ae8c3da9c7fd73c98c41f4c99e08864c402e1f61c35ea623a15ffa5aad5f15c9a3217a8cbb74db8abe3fac2ef4b306f0b900d7149572fee167a", 0x7f) 01:13:31 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:32 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 01:13:32 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000072, 0x0) 01:13:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:32 executing program 7: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121000, 0x0) readahead(r0, 0xccab, 0x9) tee(r0, 0xffffffffffffffff, 0x4, 0x0) 01:13:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:32 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000000000000}) 01:13:32 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000277, 0x0) 01:13:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 225.329376] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 225.329376] The task syz-executor5 (15570) triggered the difference, watch for misbehavior. 01:13:32 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51b}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$SETVAL(r0, 0x5, 0x10, &(0x7f0000000100)=0x2) semget$private(0x0, 0x2, 0x64) semctl$IPC_RMID(r0, 0x0, 0x10) 01:13:32 executing program 7: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x3}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r2, 0x10, 0x0, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) syz_open_procfs$namespace(r3, &(0x7f0000000100)='ns/mnt\x00') dup2(r0, r1) 01:13:33 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000080)={0x30, 0x0, 0x1, 0xf, 0x4, 0x3ff, 0xfd1c0c5, 0x372a}, 0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xb21, 0x100) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:33 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:33 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}) 01:13:33 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000014, 0x0) 01:13:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:33 executing program 7: r0 = socket(0xe, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000000)=0xe25f, 0x4) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) keyctl$get_persistent(0x16, r1, r2) 01:13:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) getsockopt$inet_int(r1, 0x0, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x4) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:33 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000}) 01:13:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:33 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000185, 0x0) 01:13:33 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:33 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x4, [{{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x290) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000280)={"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"}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='u', 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xb4, "8bfbf3ee7dcb20b783f4e2ed9055b2070f30e541884d4aa4528c4452273f9df0f715b8116aeb9dc00a28582838148be9387441d27d46337436827f38eb1ddc53e278f02784aaeb36a1f562ac5afe443135f68d69ed90935a90643a311bc8eec0e9c441ec0bfe0e94bd179610c3333c8e766dc4109dfabca9e7126aa2626e8fbf3ecde4827943aa1fcdb940125595e9abfecd4009b52b65c57a67fb719a8ec7a83ef741451934677ba8ced48d8caccd255b9fcd5d"}, &(0x7f0000000000)=0xbc) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000200)={0x0, r3}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r4, 0x5, 0x20}, 0xc) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10) 01:13:33 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}) 01:13:33 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000020a, 0x0) 01:13:33 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:13:33 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:34 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001dd, 0x0) 01:13:34 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x4, [{{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x290) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000280)={"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"}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='u', 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xb4, "8bfbf3ee7dcb20b783f4e2ed9055b2070f30e541884d4aa4528c4452273f9df0f715b8116aeb9dc00a28582838148be9387441d27d46337436827f38eb1ddc53e278f02784aaeb36a1f562ac5afe443135f68d69ed90935a90643a311bc8eec0e9c441ec0bfe0e94bd179610c3333c8e766dc4109dfabca9e7126aa2626e8fbf3ecde4827943aa1fcdb940125595e9abfecd4009b52b65c57a67fb719a8ec7a83ef741451934677ba8ced48d8caccd255b9fcd5d"}, &(0x7f0000000000)=0xbc) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000200)={0x0, r3}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r4, 0x5, 0x20}, 0xc) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10) 01:13:34 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 01:13:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x8001) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0xffffffffffffff80) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x6, 0xff, 0x5, 0xfff}, {0x0, 0x9, 0xe4, 0x401}, {0x80000001, 0x47, 0x8, 0x10000}, {0xffffffff, 0xcb5, 0x3, 0x4f}, {0xb5, 0x72, 0x100000000, 0x93e}, {0x2, 0x400, 0x7, 0x3}]}) ioctl(r1, 0x8, &(0x7f0000000140)="28a86a19281baa619cc95878aaebe4f35c1761cee00720f3481589ca92f03b9c368a2c7389c884c9afb29d629176faf2f184e07e00c64bd09bbadced758b6c145f64c6f99d161e957e36154500fbb6640108ed12a6319aefc1a000264ee9a52c7e7c410cfa5aa39b3f37497b394dc310d2c166093ab5") fgetxattr(r1, &(0x7f0000000080)=@random={'trusted.', '\x00'}, &(0x7f00000005c0)=""/4096, 0x1000) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000240)=0x20002) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:34 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000240)=0xc) r2 = getpgid(r1) sched_setattr(r2, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000180)='./control\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000002c0)={0x2}) write(r0, &(0x7f0000000140)='|', 0x1) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x1, 0x50800) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000280)=0x3) flistxattr(r0, &(0x7f0000000040)=""/162, 0xa2) 01:13:34 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) r1 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x111400) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{0x0, 0x10000, 0xe, 0x8, 0x1, 0x800, 0x6, 0x1, 0x80, 0x3, 0x40, 0x2}, {0xf002, 0x110000, 0xb, 0x0, 0x6cf5, 0x0, 0x800, 0x1f, 0xc380, 0x1, 0xfffffffffffffe00, 0x4e1bfe22}, {0x0, 0x6000, 0xf, 0x10000, 0x4, 0x4d86, 0x1, 0x8, 0x9, 0x100000000, 0x7, 0x7}, {0x1000, 0x106000, 0xa, 0x9, 0x0, 0x20, 0x6, 0x7, 0x3f, 0x2, 0xb9, 0x40}, {0x0, 0xd002, 0xa, 0xfffffffffffff801, 0x0, 0xfffffffffffffff9, 0x5, 0x2742, 0x7fff, 0x3, 0x80000000, 0x7}, {0x10f005, 0x0, 0xa204550cf65a81ff, 0xce, 0x7, 0x5, 0x5, 0x3, 0x0, 0xfffffffffffff6f4, 0x46, 0x7ff}, {0x100000, 0x5002, 0x1b, 0x7f, 0x9, 0x2, 0x7f, 0xd1, 0xb09, 0x9, 0x5}, {0x1, 0xd000, 0x10, 0x2, 0x5, 0x1f, 0x1f, 0x1, 0x3, 0x8000000000, 0x6, 0xf960}, {0x1, 0x1f000}, {0x10000, 0x5004}, 0x40000, 0x0, 0x1000, 0x4000, 0x4, 0x4001, 0x3000, [0x4, 0xdb3, 0x6, 0x101]}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x1d}, &(0x7f0000000200)=0x8) fadvise64(r1, 0x0, 0x8, 0x2) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000140)={0x4, 0x6, 0x1}) getsockname$packet(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@dev={0xfe, 0x80, [], 0x21}, 0x6, r3}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x12800, 0x0) fadvise64(r1, 0x0, 0xfff, 0x5) openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x280400, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000000c0)=0x4c, 0x4) 01:13:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:34 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000189, 0x0) 01:13:34 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 01:13:34 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r3 = getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000300)=0xe8) setresuid(r2, r3, r4) getpeername$inet(r1, &(0x7f0000000040)={0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) r5 = socket(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0x400, 0x7) ioctl$sock_ifreq(r5, 0x89f2, &(0x7f0000000080)={"73697430000080000000000000000002", @ifru_mtu}) 01:13:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x5, 0x7}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:34 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001d4, 0x0) 01:13:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:34 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 01:13:34 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0xffb, &(0x7f0000000780)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000340)=[{{r1, r2/1000+10000}, 0x5, 0x800, 0x7}, {{r3, r4/1000+10000}, 0x4, 0x8000, 0x6}, {{r5, r6/1000+30000}, 0x3, 0x101, 0xa9}, {{}, 0x7fffffff, 0x14eb55c2, 0x4}, {{}, 0x8d, 0x7f, 0xa0000000}, {{0x0, 0x2710}, 0x0, 0x1f, 0x81a3}, {{0x0, 0x2710}, 0x5, 0x6, 0x7}, {{}, 0x81, 0x4, 0x5}], 0xc0) r7 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x400, 0x20000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000000440)={{0x4, 0x8001}, {0x101, 0x7}, 0xfffffffffffffffe, 0x200000000000000, 0x1}) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl(r8, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x7000, 0x4, 0x0, 0x80000001, 0x5, 0xffffffff7fffffff, 0x80, 0x3, 0xfff, 0x3, 0x6}, {0x7000, 0x1000, 0x0, 0x1, 0x6, 0x101, 0x1, 0xffffffff, 0x8, 0x7038, 0x9, 0xbac}, {0x5000, 0x4001, 0x8, 0x0, 0x5, 0x3, 0x9, 0x80, 0xfffffffffffffffe, 0x6, 0x2, 0x3ff}, {0xf000, 0x3002, 0x1f, 0x7, 0x6, 0x2, 0x1086, 0x9, 0x9, 0x0, 0x4f, 0x7}, {0xc1c4c93514c51d3f, 0x4000, 0xf, 0x37b8, 0x7, 0x1000, 0xffff, 0x0, 0x9, 0x1dc14003, 0x6, 0x7}, {0x2, 0x4, 0xf, 0xffffffffffffff81, 0x1, 0x4, 0x40, 0x80000001, 0x80000001, 0x7, 0xfa, 0x7f}, {0x0, 0x1000, 0xb, 0x9, 0x5, 0x9, 0x1, 0x0, 0xfffffffffffffff7, 0x6, 0x9}, {0x4000, 0x4000, 0x4, 0x8, 0x100000001, 0xfffffffffffffffb, 0x80000000, 0xfff, 0xfff, 0x2d, 0x2b, 0x1}, {0x4, 0x6000}, {0x2, 0x4}, 0x40000, 0x0, 0xd000, 0x200, 0x9, 0x2000, 0x0, [0x29c, 0x9, 0x40, 0x9]}) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000011c0), 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) madvise(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x11) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={r0, 0x1, 0x1, 0x1, &(0x7f0000000280)=[0x0], 0x1}, 0x20) pread64(r9, &(0x7f0000000640)=""/94, 0x5e, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r10, 0x80045500, &(0x7f0000000740)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$sndseq(r9, &(0x7f0000000180)=[{0x8, 0x6, 0xfff, 0xfc, @time={0x77359400}, {0xbba71c7, 0xfffffffffffffff7}, {0x3, 0xce4}, @quote={{0xe08, 0x101}, 0x3f, &(0x7f0000000140)={0x4, 0x8, 0x2, 0x7, @time={r11, r12+30000000}, {0x1, 0x3}, {0x2}, @raw32={[0x71897e19, 0x90000000, 0x100]}}}}, {0x1, 0x6, 0x2, 0x7, @time={0x77359400}, {0x7, 0x1b66}, {0x7, 0x2}, @raw32={[0x7fff, 0x12de, 0x1000000000000]}}, {0x2, 0x6, 0xffffffffffff4094, 0x8, @tick=0x4, {0xb52776d, 0x3}, {0x8, 0x3}, @time=@time={0x77359400}}, {0x9000000000000, 0x401, 0x5, 0x800, @tick=0x7, {0x2, 0x10000}, {0x5, 0x3}, @note={0x6, 0x36c64ffd, 0x81, 0x1, 0x1}}], 0xc0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000006c0)={0x5, 0x33e, 0x2, 0x0, 0x0, [{r9, 0x0, 0x1}, {r9, 0x0, 0x2a}]}) 01:13:34 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:34 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 01:13:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:34 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000002, 0x0) 01:13:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:35 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 01:13:35 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000000)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:13:35 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000c7, 0x0) 01:13:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:35 executing program 7: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) semop(r0, &(0x7f0000000040)=[{0x0, 0x8001}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 01:13:35 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 01:13:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) getsockname$llc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:35 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000016b, 0x0) 01:13:35 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) r0 = mq_open(&(0x7f0000000080)='\x00', 0x0, 0xb, &(0x7f00000000c0)={0x1f, 0x0, 0xffffffffffffffff, 0x8000, 0x7, 0x4, 0x3, 0x4}) getpgid(0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpgid(r1, r1) r2 = semget$private(0x0, 0x1, 0x8000000210) semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000100)=""/2) 01:13:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:35 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./control/file0\x00', 0x8, 0x4, &(0x7f0000002340)=[{&(0x7f0000000180)="e218f67c8ef60ac7703d22a3f22da53c1a5f771d6e4c0661d1c9b2a996cc4831b2aaeaf2039fa1339b9f0f704ea992750d34b885f2c1f2f9c8fa30d2fa531dc5a7bff0fc66c8a1aa8a0ee6b06af7a891075abb5c110b2eef425def1dabc1f02b10ac415ff238359bb5", 0x69, 0x3}, {&(0x7f0000000240)="2e7c48028fdc57d14b29e6fe0af139dcf1c885bcdc65d35b561bd895a5ffbf7f1f4f480b4642cc3b7fe760354fd96bf7dab1b8ef50eab4f4707896e1a3ee133039a482fe992264953856f35daa23e146229ab8239ecea0d1b5613f94aae5398a81567105466b3f05cdbf2ede8129bba941cd11c1e1d0a361a37c9bc5049f65959b73d222cc6ab5caa6ac17d2176d3d3700cd8307e040577ec9c40a83ab0a19b4ad0557aec41f55b9a67b3e0abbd20d12ff6194518c9aeea90e544bb3bd3ab2d44a00c10a1ca9af9758b6c4", 0xcb}, {&(0x7f0000000340)="b3ec36269b4a5bc333f0e30ef0c2df5b87915ff56ba0449a2b00fd322f38b235053d7ecedaa299db4050bb14b55381311b894398b41eece27a461e3fc1803aee52134e99f942fa0996c6804c35f5ca027f60c00b08779263c5e74335ea203b9f27a73ad5cee98b4496ebee97c6896a243ffdec538d052caa0198cbeecbcad2fdce357a1a7b6afd79e41f4cb26f05bc077c3dc4cddf0355d0a1360202753dd4fc6d549c028324e92c164d58783274059e1a9ec005e0177d7687e157b3fad413367ddecbacd78e8e1cf578f90f773fa782badb863d68d06dd437cca4b8f98854f101bb74c962ed78af096adcf07a1a4784533299fcef9bb2e87a98567e9cb4002d00a9c05d55b7c105807f7950db52163c11c3c6cc994e663df3fffe5fbb312bc1747d0deeec7567b4d74ea4ef60d474cd947d5aed1ae0036aa5f2f952e0fd8433db067b47375552888189b76de854f647220a99415aec3bc203c7997b9f52ba71c26f5d27d3aa221d71ac98ad2d93b243f9e3034be1fcd8cda285089a58b7b47ad1815cdf8cc3a0e2257eb430ee97f94e45d0c457724db6275fe32a3dec4bf6848c391929a13a5a71a937db02c2f45c2345789adfcebea3d18c4c9d31e4294eb75709eeaabad588f50c688446c62a0eb7b87c77ed116cc7e50f52231cf1bd62423ade7955dd3986cf14cc768af28309ab630702e00968ba38dde8ec06ac245b149615146aa0503e2e83409cf6e3324f740022762b13205d6d1c5397e78d1352e4c018a3062317172b4776ab09786fde311822412c44a51ce3f3e10976fc72d4d561e60af5dcc4ef58b559b03405b44885f5e62225f6ceae084c62540cbb1759a9345831358bb6af6fb3e6d68a3d7eae42022265c9c718444d1d6edec7e5dfc8b78078b1dded7ad8181e5d99bdedd9e8d004151911fd78a61a2944bd75b029854b62946abe996d564cede02f5f32b64d75e54d4422a0339e2059ec6dc522fd9384ca7f4e69c859033abc7be364bb4e4e8eb4445d7cb0e780898dd85650119828dcec3397f3580ee6ab045b059221aec5de7fffab5958320a270517cfecc7c68076ff00098504f395d18635611e7ab2c375b3561bf5821dc7c50fdbf396cbf768cd52cbcf4dbaa13c53e615620f2735960dbf46550bd791eb4ff7ec2fa491cd61e0ed8deca41abc55254dd0d2849043f72808fbe3f9908eac6af00cd74ce906e2482eb54377ddb7d32f88c6b2305ed2536a6cfa25ca84f1f3a36fb14691bb694022bf1010523e2fcd1b9cc25d3f9c59ad5d35db65ccbef1e47d0b17b07aba720dc4d6805c5167500028a4e0b2a5c9a671a855fcd5c4abd5305913875bcfb2ed2810e5437417ccc3510fccf19a9b59d4418d67cecb2f65a127a5bfc4153b1b70c91f0f1123e93f50c9a608410845e80ae76eadb18b0a400e35458e2e99f1de1833511799284c94b3a4b35fe01991e124e9c5ef9ae0d844a8c5221d24674548c9691a7fa201d6ca0a12d32d9422b9c1d9ae2149c9b9e0b981864ba6093254cd8977d1eb399b32455d60001c6e7622289b78c4e8ef6df60dd5f5320e39d67ea9eb588d3e1c65834acfbd30aa8c02bb7f397ae26aa4e156973b25f08220ad3f44b0b61383100148e19b1d3b1a1ababf009a9a5945013d54f75a12c0fca5385ab2712f0e433fd14191ae499ad6bb4cb52f03f702aaf8a5532015594c8af9ed6dbd2350a5008731617a5b45e340e911994d61302b324b0c3c3010106f7dabb97f7b228cc10519acb9a93eba4503598203150340cd3429232161e56bf3eac5b7b96f6e55490217702477975b2326bd8ecca82c8e199f5cbbc98032d4fda0cda63c8e75a8b4453d03a83247e2819d0088229497571e5edc1eb2bd4b94a0ac84e53352e9b59b54e0bd11eea02c8ba7ab9c54039268f7d09792f46550856617eb5a3ee8a81278c4f17472e9a2a67c686f5851306c610be45911e7a01195cc0b9d23cdb2e706cdae3af29bf8d38e0c06e52fd474dabd765ad81cd8d9cdeb14274abf4c8c617a87e731a657114d806090cf29c89da99a370a273862d03e183aa6ae0835bc124b26b8ed6f830bf444e1123c294b40108ebca02552b5526efeb495877acc028e84ef3b439d4b6cfd2cac31dbeb56d9287fc19d6ae66bab8ebcc55db3d33d7623c7164d917a8a71620e10d49d6b8160e116ab46d8dc1bfaa7f06eaa818c41bad03c735c1473888cd241a1ef3a680010cf021083106d694a5aeda246b33ca4925db6673081c65d0287f19ce2b5cacd3d3957634ddfeafd1f24e6bbba409d7a6c36e48090f8e326a80a03e446307c3b62d26e0112a4cab91baec4c3a0d0b4a11b9a86e0ade62fdcf2b3e5c3612d57e4a661094f96671aac1c7f1f35163839fc5eebaba9aff50b61363ace08839e6ce7e8052663775428b42d077f8e9a674dd2b4f637d85370aa82318d6ec3c6a86a876e37f5b6cb994407be31e4c601c07c6dfcf62411cca26e345170a918ce50467b679de8c9f1789795a67fbe295269359dc70837c3016eac7719f4299281aa6903406d25720ff3e49a9fcaae9809c10a29a4b0861733783957773f8b3158bc1bdaa3eafb6ebe6950a4989d41bf4ca8bae3229d91072930ca17a704a0f0fbc8b752a8d32aeb9053a228436e7adc62996e3a3b93835a7abd0462947b480c79490c46a6fa4f83dc4cc164587c07a4b2ed6c0bb00b87b33e154dfd01fe3062c429f3493872b9e4bdcb98ed27865391484660aace5cfc5d305479094c490ac6e0b28c3c8ec6e27b4042ea70b1bba0e5f3dddc5490fa7deb54ecc71156d383e8fef3b97e3e15011b3164574b94c7597a61e9761c6f7404a3f0bd343dda4d3deaac3194f047ba6c7ee9e87b48013d84d1638e9cd3dde224cffb98d0a9e226df4ff87b32d346623f41ea39d07cb5322fcf418adf26158b94dd607e76ef8fe4acc1d4320d4a39326d273c852d8cc575f320b8d3891d6927da37b15cb4bda1c549739a38fe930ba25f2e720f9b75a563cafda4cf052d7570e9787c0bdd148a517e4e79cd1bcf1b523fca3257d9ff0a85e9f28e068bc616e36eac9750d44d369a1df7de1aed7ddab31b0ac4ac7e9757eea1771500ce85a6efdaea6683299b741922354613149ee426c0493d1b52992d3204c4067e2df873734673742469927bb5a0e71670193e27fefb8f8f1fa5e3c01b9623b8b394d419c5f6af02614049fe798abba7b8ce1c7e78c49b0b0a6951bcfa825323e52ef3dcf3631c74f54ab182d045086fcf7684d803459c24234cfdb061b579b7454ee7c97e3a93b195bc020924f6f578ab124e5d0a426077a486342073abae8150a009415e443ac9abb97ffc6f8ec270ff4ff0ba51f0cbaf49f15a3c60ee9bddd0d5c69b4366609c1e87b46acef64ba80dd2469a9ae2f86b61a67dde38ea871084f6bf7fa26972426cae503e95b742afa9e12eb112522c15e8f46dea78596a9f98fe101b6bba453b8ec3269cf7df9c40cc527659d1da6a3d09ab6d09eff585cfb54d4f3267803b07427de614763e7e0d13c4d4f3c2f623bf3688c10e835952d4837bca4aaeb23aa5dd1ca7e1f17e5a4dabfccc47d2aab37b9b4e68d0520ad20108629c797ad6f5ef8414b69ac6c06306af22bdb9bf6fa45e5e66fc6c23b539e54c24067f56ee9a88eb35a3d0344ab36d70c48dfccb9a6cf809e050c9639e57dfeec881c361ae321dace260815e5e57df1641e8c4addd2d2244f3bbbd8140f1510dd22cd2df20eb6480f3d3801bafe6170fa41c28db84519a6d9b3de7999e38d58733e7d12f784277e15135628bfabfba1dce30f2ecc9a6f870f874c632b56f1638c74a558b490489c9a5963234ebf4a29e2c0ab37a9a2d55d603688a66f5836c46fac7e7434956751b1d35bf883e6f52ea8468a17232b392e041876cfe68cd8498d9dbb8616e8d739383bf5c2b7a386dc200557e65b976e6247574958268945b1b31a2bb21bc1037a536c281f38851e515a747c239c41410411e42e89f8bc7e133a895300032e3c8c7f0e1b20d0acca9ff8a4b057ae67eb92dcff6bf675803660145dd53f27a9ccd3853dfc9531e4510ad0b46fa87fcb93d87fd9e5b04b1813d0e0a1edb28ca51236df6768b0289b0c1c792ab30177b440fb07da3353695662c66f66d9a626e36e6566fa561dd8e16e3e7d591f2138fefe7fd1671a80d397c105a27108f36279251b1f0f5e354f5266e6528819b4557f94d7a23e1f721d0c8c57764c74d1adb364bdc8b6d3780b19d913e8c9562c93bb4b81c98fc6eaa0f4ef349aa040a0be5741f40317f1c2440187665c78aee0a8e847668006e37b59619d16cd31cc138abf504a94a116c741fa961ad928a73968bfa19e31340b2777858073365daae4375cb568d2832b8271e99daa6089b582623f2195189fe640c60df4f24cad5fab8b58b5bd6d4b0e73dc2a5ae62ce8cb0fda6f5371ba12332d426204e734a85c1d17cec3e513d98651b67b73160cbc3dd4acc29b089696299413b6ffce5cd11011fb1043044534ed77fea02d7f1f4f33934cf663fc7a73809ff356e05ab6999f2a046ad9bc95e98d0066518935142ecbe6c6449d7456dad76234646344191fb61bc31bb79404da4fda608e8d869948ca3d26b76a3e7197306d6b88725c4265ec4db0cb3960951fb876969ca6cc27a9df1d3b1dde518b5f7b2d29357503daf1c16380e174d1bff33a322aa38b7fd7687975b6500cb0812d47761f88bef5b7579cebded01163619d2c8f0e7cb438b9b074ce1f707ac9814953021f4a231b482c0fcc7b497859d10e62ade44cda24f7a483ab42e9bafd14a6a3350d11ec1e0058aad6d0ddd9b6ede2216bb260b35f5ba0cbf85e68c2d5c932538f0e249ebd9f5fbc4102e94f1a06a1c70a30de56f8731d38ce79d6b31ff3a12b6308251041ccf47e5b4d09c9f92a6718c2745461b11f26420ef5983349968b99c8188a3269d6f1e1488be87b7cdbbf8af00d4070dc7ecc212dd01416bf7e483db930d344eced72eef120851cd128c7b5095ed9c6ffb56187154cbf4b1ac7bfa08c0e5792594d20ad41866038fd50e984ba7f902bc79bf4b626d315c9171fdf65474eb6fb01cc5c4a17292b1dd5776495529ff89ca7bf0d8430971a51dae33887dd83fda14ed8fa61231551748dd1831b971396b07f83e70ca8a4b2a00860c479bc1f8153a766c3c81e6a93345fae2b6df53f932cb536b7920396726c1aeae909a8e132d3e9bcf695034513d1a558f4c4d5689bceff3754e22e80248e67b9fce28d0835c09395c2c8b4172f94106b0225078d531b3d2a87f448caa08b841b6d845b24893b96596b3369ddb98d57231cdd50438b903f2614d69e1b16e1021305439eb6fd0eddbd9ede1c4e13185bf45bc03c596e42643c21062bf794718744b957a8603f248d99449b8b80167be10454b016ed979cb6880917639623d48fc8284bc92ed2d444e7421089428ab9ddf16fa9c5c5cc3d844a868960ce93699f7ca7d200eb1254ef0d9b4b450bd07ae6faabaf1e6a2ab9d8f8b807ac30e3b2ffdd5ca044dc88aa8b71554a8d9a29845ffbaaf6a46f9af13b0fd0397e7e6753c57ce5a18d7dfe98e41cc39360d3b7d5dda817681815956b9daa21c4a473bfed52feabf6d41f8bb7071b37215d67f88e5f661caad6c9e25ac838297e1badd22ca8c71e47322969612b95c56ed516a45769763cc936cbe7e89747255391d2a09f569986abeb74d2493f8ed255d9776a30f7b3da0f847d0df571fae66d47e2f1331c0d2fcec85169a00f58aa8c4335c19", 0x1000, 0x9}, {&(0x7f0000001340)="cc1f043a3eb538123b360026cae1cc891100163b86951935c0190b03f43285909afbf4301087fe09d594a38162f18eaa91ab92af73987b9e5eb64826721b120dab2021a4084b097f446fb42969b37ad760c84070995f98e0c69d103d952071fd508503680377c2da35330a43f50e2355b5aacbd8759f752a98c4ccb2a124841860a9647e1a1043a7b2592c9062fe4fc05c6e444880b54da05e84dbed61a331a6ac00b4afe27efd60017f0ff13efd8ba582d89b18c0037d8bed221cad4251376d5562e97e327d9054782bf32528fe5ba799fd1959dec28a8a5a445e84b5e5c047743d170946100d60df5c1eaf4a65717ba3da19b44b3aa74778711ae2e32375c2b7ca6da975ce346e3c145a90982b89055386859aed745214aa10a832f39fe6054214f27888ef77cba4d13a3b582e1ef56087d6ce1ef14ce03b5b54e93e65b6248eb7ee54c0d557f4e6772b94bceda11600f3f9b5edc1030ae7027ff9756a2154502b30c0011099fa1e0f9992c252b35f2a94d378890b0beb86d212203d926b80188eef74410bac5f6032bb972fc133353eae993e33cf6001af61c8d74b54e4f26bf9fdcfc9fa785cdb8e82b0b865f1fa3155b8c9048a579ff9477fc9a1a84385559689991b57eb64002a7aeb085b281756e3a4b6b8688acbd2d605749ca97fb5fd53d7bc75280ac688307449442227b903e5aecb7b5ce78de8c5527f79f7d20fa1505e9b4b2df4856942fd8bc657450b58ca83c9ff62209eb3b2acbe5c2b974884ddfaf7f026917d1da07a409cb1573329d60de09de587ed6eb44d78dc5076efd4b8a68534f3707cf36d1b26e52bebcdbe8fad78fc8509b30dc036106b79ad6e36042d376b26d33f40e8284adb41f432546767b7561b455a142a138ec548e24d5a1fc5e3008815e17f29547511cc3cfc2baa3e620dbca90a15a9582eb242cfde565f53a2893c4fa471648b328ac62b45baab6a972f62db3ffaeccc17d12a62417f35bebb41c6658cd2038a74d8c5fef92f206efe3891828428cddc1b108c7489c0bb61bfc6fc103d25ff676873eb69dc24429b5871c3c9694a641dd5ed75c9d3bab794914979bce80df7b7917c049c55e73c681e9fc8b8e2a886f040dcfec59a6e4249b6468fb798c9a7d8d4bcb8d331459d36d8ba7ab1ecc27c242f265df9cb7041df54f0ab46674a8c6397dd4dcc19c9ed6cf2bfdc3be8ed0d4fff495aeda3972b38224731f445c86750ce3cf57f01f4bb9f1bacbe3a7e50e91a1ce9c147364747dfefa7cde7ea2b4f666bbde33d42d531eee3d54c68503cd41293dac8f0cbb41afffe3864b09082403d141b5458cfd14f1540638c4736a6f15e009dab1a7c71eb6c6ca7c85cfa4f947f8f6985898dd552ad48c74db2eb5fe524c807434517871e95af09e4f0e2b6e4640bdd43c1b23859f9958e26fdc09feed6b2bd57ddd5d522116553e920a5f8cc15d53ade6ffa297280991ca118b6308cc1583ac089f1eb70d684768a2cb80c2271f89c05151b7d13f8011fd15b896fcf1c747d3c6dd1851d59ac01c5413a1c36c568514d16fcb11f0c5bb0d8382e2c9d0cdc8eb05c6d692789b71fb461a52beb9916568f66456e1bf5388467d0a8f87425adfad43d03deefb38f423e3b581eca2ab7ce41f5710d54287dd52ebb559e79c742bc33d212fa7cb622d645c95bbe58fbf7bec695af5b6193fc844118be50b951a98ec9c28fd3ff87806737cb881ecf3b394291de6fe4d8a2c387ed227124622244d74cd3e4ad9a36aed0dc2e3214b45a3594444071c2c580a26bb3ef068b0e12174dac2217118bfc83d1ddcb6e242a206079e89d988140b941c72f291a91c5e4e7ff9c1fee2fe82ec260812eebb9ba01991d38b9b912596e0e15f80e5586e93d8185108fd6d7dfd3bffd300e8089d6388f5fe61892132076ca70cb2f8b9e390bb3de1a21d1b346b056d46dc04626e32e88e02b0544aad2462880d797092b1b2c76151b29d588b7d13cc83bff994fd048e165cd0683a115c86e0af42afdd443f95015c80d66b2eca918281b9505e20110a490884d9c00676e76fe112db6690d574451ab692cdb9483da2d7887e025a0878e9e0dcab74a721b343fa2b51c7139ec25fb8ac725b7c4c74a906fd74ec08acde028158ea8159b7e0bfb392d6a06274735fe850ff58bc1c4b9071c437147c9232e6ba67bf36726cc5f0f1914725f822bbd0c93650e83edac6109242978ae11544e6c892af541dd30f60f126c8ed1dd8308dd635040d7a80978f306dbc439eaf41ac547c2c730d17461e6fbf0ae6e6089f5e73dbbeeb42486c9b490702758b40f45924d154a4334dfccf8ed23f1d3e73c68496a1df0b48056bcb3ad90a42b9d14c87b2b37a6e881b8f00d24c56f696b44c51ed39f8ba0fbc2c9344b2e46349aab4b9e2cc4be85bf4759f0614ac2a2eedd9f55edf5b7c4891f8e2b60b759a20224aed4b8f1d748d1cd0841fd207f554b4d8262dc11a8a7fe025d727afad4e69cf0ba66f0fbd47adf419d784bc476c787cc8913fb278924ccbd5550c495ebc2011e05fb93356b571ebd48fa20da942a9872b1f72e354ff3efa73497dba132419bbc6e4eea034ae626b0344e2c954ddad1552c9a3f6dd790778c01d23d4481422c13184c1ed41205584a752be30c66d34c0142c6e75fd3532c54463fb16a15d88fc102de84d53c2e6d664df8deaa02ec3d9b0fe2b13c443272f63f4e26d9dcabd48159a102232f4a238f6cb5c202168d691e9ad80a010f86bc40b6201ca54e45a2faa4ac3665b2ac16c5329563d7cd803f4d8966bffd780436161cc6b1a870a5d177becb5a319f890ab2a066c369e275ce783acafd8d798f190d954341976f509e2db3506860b3bd6f6d0c519d78cf17dfed06827356aec123f76ab80e51a777d82c5d12619727f19342bc667e7bfef91a4670b065c010ffdbf9ebc081000034b22611bfc2e680c10e23e6d64cf7136b2dc0b7f81610ba0ead7041a3267a55d7a8b17d4229e883730e82873a00a84aa88961129d5c1360d4ca1152916f545330f67b6de842dbc6fa208c645f5323ca97044ccd964492582adbce6f7222565913418b08990ca77d2263680652bbb4abba2fdd5fbdf242fbd8549b827290863c018284e4e19ad232e0fa1e26b211ca14afce97e1e167241ad732e07ac2068a30819085dfd77b0a41ade4030e0ae9a27b58e139c029e84be620e0c7664df767957f8a96f46502a476fa470a1bba08b001db95644b87eff301ae7f39a15880e4ac69c32a8b324732dc6e097de8cc02d1f3965578814a07185cb110226e1c1ed81d011ec81a28a13d08e2cce33ae9e001564b823589eed06a8d7ec46c9661d021deaf5ce827a8f4eb8b99504ae98d689c42dda431c57869b30d4f3063d34ccfec6a4cc78f5da5d3c76a7f92120c726c037feca2a7729b1d91ceb6a254233f0186646554729bb89a8e787fdb101d9b076f312a696e264806e437f5ae643b43963cf7d7ce472a7d9104485423c9c7667ef75a8803c54acb406e255e34415dd71c26a3a370d17666b6a453873d80d9586d08776d1da0679114c03db3a4245135e3c64e50d93bdbc34d18960aaf4c7c28500df5ff9e246efe67112a323bfe2b385f57f5a3d6391081eca19f1873b2ce04304d64ecb74c904b2fc037138425449a747376c40e1444dc7ca7a26663b0883185004dec7a589317b61bcc22f062277c805052f4783686f14e8328fcecd1be33daa038bd9c626b9bffa2acaf91bb03f7de10131a090243261091a4a092edca52c7cee68592373fc266e4c745787dd28e736c383213b46635829e53ddd9892a703714f192260b6bb1c8549c26ef1cb443165d47d9dbe7b04f308a574577359e3bebe1e58039e0e58790f2d91265755b37bad227500370ad8ca7066845eb98a1b1fbe6bea8f03d67baf80fce2e56adf2fbafc61cb8f92539743992e2a01baa760dea8e817e2e39f8ce0648f0eaa632be0dae8d0f7883820508d099f1255061b03c037306c43bb71a78a60678d2f8ee75d48f60cef57197240c55706d1b1693302e3df0cb58fecf3d2d2763c8822ec9fe80991b80d7826ebe95bb2c15142c0b1c2f2c812be758c3bd75e54f32a8358d293e178709fbe82894b3cddb10b62c7a8706c8d1a669938b4c4b3f6c42b4c30009e82ae5d0044dad60e1006ec69329b366b290c9b7bb679ca2379f0f1d174a6feafb9115c34e7b4db45f9c53eeec71d8a91ddf583aec0ba16019023dd988a84b826e28562eac109686b84efb716b2572e8c73b3abfcaf8760ccb1e76bc0a9a0ed8a237604c121b8bf50148718ea93f7448f96be1f086261f6e40587087900556ee0d49e16650c658b68ad24f9c13b36d983d040915123dce4e4576f6f82666ae39cd62a7177695b11ed01cf98eb652d146e2dd06cdec95d82939cc9324123f68c913f58c41a594da928a45bd6d78cfabf24f8e8f1a1efbf16d25a6e65e501257447b87222501206845a9178567a65a0391598c7c73c1487973c47305ee95db7115fc793f96b47dd767c9f3e1d3a6654c318fe878d24a5ce0c416fccc90b6f6502fe702e2bd30f1ed8ef1bbc80b09e809a3c59bcad360b0e7e8b302490380a875d0872df37344ee4fc770aba7de6c75739e4a3d0edbc1e44f59ec9c1541e9e9f7005b34736cd27f5fab8e6971549693c57f10b629f2731e863dbe56e5987ec6f4b75f57b2bacc6dd76f9ecaafb6ffc6a492daef2f629f31abdf477cac6202890ea553102c5a1983eb5af54cdf3ce3bf075f34b4204f07b4fd6b16e0eb28e56344cdf6a9f9bfc611cf4c62cbae333fbdb575b4a2770a6fde8da898d336a813ab8db8a1dc9d079ea100f93ebf980bafb2c39347ef8de760b93ae1ebb090576094d0d820ba5a72e4586d85c935e12005290c9f53ed44989483bb048e2cbb64027063cccaaa684f54b91b76804211e0bdc212805c692ec916f3ae637341ed7141961248ba4ca5c6bb88459ab68f13ff2ffa2f7b9959d45c07cf3b9a07ddee5ba16c7e5bc92f0d13296e4531595b63a96a9d4fa99025eb2ed46f21974b9d87889e067ec0112579776ec0d2e6d91244d209576f1197b7919fc66dcdf072dca4375f4b4912bb301ddc7235b7642e42ed17877471d6e08ecff6539090b6796b09ead6f297a9979500336b93aafeb4886f956759ac3e38d79a80e5e6800fa5d2533f3896abc3bf9509c7d1c895187be86f4a5b8144cbbcaaf2b0456cf0467034b8bf725dec90f6ef06047d12d70bfee43f46aa32dab2b527874707bd81a6515c59f4606df32094df2eea2d6f16454a4c993333ad62b25a5ac5874b4526401c67a162f314068e077f8e2fea7f38587bf8a994cb45286cd437c0660e35fc090ebb7ea9dba1102cf4d9ef88dadf36048ee8b094c0ed9d0d44410258700a335b2d25eb199fbbcd37ac73e31b20c2fd135314a99071a8a9445cdbf9da2855a985e92315c47a7f27f73e8a2bd68d15353d9c19ba10acd2e99350c90cdec1c28fa4014484d7017e75cd0a54fba175b23c1e20eabf9f7d9b72a760c1877351f2d068549920ed5b5b110b96eb9167edbc551ed954895206dd2985b2eef8a8f97ca8dc94274a72d46a2697dbe8040b3330c7e59250709c7e79bd2144173f0eb87a7eeeece90c25aaeeffd15cafe64e58d60ae372008f99b115e2a7c20bea9dc9ba17af1881f4addfc165038ef86263284c3f6400b5725015b6a84e7e9466efe9256023090b500a289b1d49262fa9a5bf7cbac53fefdc83d2e74063193972840c95e4c5304a4db2", 0x1000, 0xceba}], 0x800, &(0x7f00000023c0)={[{@errors_continue='errors=continue', 0x2c}, {@integrity='integrity', 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp864'}, 0x2c}, {@resize_size={'resize', 0x3d, [0x37, 0x37, 0x0, 0x2d, 0x33, 0x78]}, 0x2c}, {@discard='discard', 0x2c}, {@resize_size={'resize', 0x3d, [0x3d, 0x3d, 0x39, 0x2d, 0x33, 0x36]}, 0x2c}]}) 01:13:35 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000263, 0x0) 01:13:35 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x8000, &(0x7f0000000040)={0x3, 0x0, 0x8}) r0 = request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)='&\x00', 0xfffffffffffffff9) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000200)) mq_open(&(0x7f0000000140)='\x00', 0x40, 0x0, &(0x7f0000000180)={0x4, 0x100, 0x8, 0xffffffff, 0x2, 0x2, 0x4, 0x3}) keyctl$set_timeout(0xf, r0, 0x4) 01:13:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:36 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:36 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000234, 0x0) 01:13:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:36 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x9f}, 0x4) 01:13:36 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x101, 0x200d01) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000100)=0x3ff) openat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000001c0)={0x7, 0x100000000, 0x8, 0x9, 0x81, 0x3, 0x1, 0x1000, 0x0, 0xfffffffffffffff7, 0x2, 0x100000000}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000000c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x400000, 0x0) semtimedop(r1, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r1, 0x0, 0x10) 01:13:36 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000068, 0x0) 01:13:36 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:36 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f47767") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:36 executing program 7 (fault-call:6 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:36 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @remote}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) setfsuid(r0) 01:13:36 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000c8, 0x0) 01:13:36 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000bfdffc)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d1000800000000000000000000000000", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="f2ec0638d7899e891dcd824fc9e4e54cadcff7244bc8f5f213d715ab26e0a4e2", 0x20}], 0x1, &(0x7f0000000240)}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x3, 0x3ff, 0x4, 0x2000401, 0x7, 0x100000000, 0x4c8, {0x0, @in6={{0xa, 0x4e23, 0xfffffffffffffffb, @ipv4={[], [0xff, 0xff], @rand_addr}, 0x2}}, 0x3, 0xa757, 0xab, 0x9, 0x80}}, &(0x7f0000defffc)=0xb8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000be2000)=@assoc_value={r3, 0x35}, &(0x7f0000001300)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xc, 0x7a90, 0x400, 0x7, 0x1, 0xffffffffffffff9c, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000014c0)={r5, &(0x7f0000001380)="6a45ecfe4d87112a7ca6cbc8b390a3a734c07ab5697a46b6d7ab", &(0x7f00000013c0)="0d7b3806b9f26d4391cbc9be8da378f9ff697c61308115bb1ed68f6efed06a3881de0e12927cced2ec1f3be214e7d49038023a8fd7466322b37151693b01b7dc163287e6110137b8c1013853833c967260629cd1e2e07a6056b4e81295643ca933fef858f80bebe904526f9ec8cbad0d39eafdfe47495d81f35c55f87c2bb5249ddfb48b4347028e2c029eec488696b4520d51a37d4d4fdfcd7ac2335e4cb66142a09692a818f64dbce74009aff328c8d61de072e0549a8240d044698db18442ff1ca78342e238d78c192211dcc9f3a2dec53b5958ff939d3262b6ac", 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r4, @in={{0x2, 0x4e20}}}, &(0x7f0000000200)=0x84) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x1, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) ioctl(r7, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r8 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x1c8, r8, 0x24, 0x70bd27, 0x25dfdbfe, {0x3}, [{{0x8, 0x1}, {0x1ac, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x20}}, {0x8, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}, {0x8, 0x6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100000000}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x48880}, 0x8000) r9 = socket$l2tp(0x18, 0x1, 0x1) r10 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x7f, 0x8000) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf8, r11, 0x320, 0x5, 0x25dfdbff, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast=0xffffffff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c20f57f5bdbeb28}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80000000}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc929}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40801}, 0x4000) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r7) connect$l2tp(r9, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) [ 229.914202] resize option for remount only [ 229.930874] FAULT_INJECTION: forcing a failure. [ 229.930874] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.942895] CPU: 0 PID: 15847 Comm: syz-executor7 Not tainted 4.18.0-rc1+ #109 [ 229.950268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.959633] Call Trace: [ 229.962242] dump_stack+0x1c9/0x2b4 [ 229.965893] ? dump_stack_print_info.cold.2+0x52/0x52 [ 229.971098] ? unlock_page_memcg+0x2c/0x40 [ 229.975339] ? page_add_file_rmap+0x781/0xe40 [ 229.979827] ? print_usage_bug+0xc0/0xc0 [ 229.983883] should_fail.cold.4+0xa/0x1a [ 229.987936] ? print_usage_bug+0xc0/0xc0 [ 229.991994] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 229.997087] ? __wake_up_common_lock+0x1d0/0x330 [ 230.001873] ? print_usage_bug+0xc0/0xc0 [ 230.005926] ? lock_acquire+0x1e4/0x540 [ 230.009886] ? alloc_set_pte+0x1027/0x1620 [ 230.014110] ? print_usage_bug+0xc0/0xc0 [ 230.018160] ? reacquire_held_locks+0xbc/0x3e0 [ 230.022725] ? alloc_set_pte+0x1027/0x1620 [ 230.026982] ? find_held_lock+0x13f/0x1c0 [ 230.031124] __alloc_pages_nodemask+0x36e/0xdb0 [ 230.035791] ? unlock_page+0x1d1/0x2c0 [ 230.039663] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 230.044683] ? debug_check_no_locks_freed+0x310/0x310 [ 230.049872] ? debug_check_no_locks_freed+0x310/0x310 [ 230.055052] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 230.060580] alloc_pages_current+0x10c/0x210 [ 230.064984] skb_page_frag_refill+0x45f/0x6a0 [ 230.069481] ? sock_kzfree_s+0x60/0x60 [ 230.073367] ? debug_check_no_locks_freed+0x310/0x310 [ 230.078560] ? print_usage_bug+0xc0/0xc0 [ 230.082605] ? find_held_lock+0x36/0x1c0 [ 230.086658] sk_page_frag_refill+0x55/0x1f0 [ 230.090971] sk_alloc_sg+0x1e7/0x9d0 [ 230.094688] ? sk_page_frag_refill+0x1f0/0x1f0 [ 230.099256] ? __local_bh_enable_ip+0x161/0x230 [ 230.103921] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 230.108919] ? lock_sock_nested+0x9f/0x120 [ 230.113139] ? trace_hardirqs_on+0xd/0x10 [ 230.117271] ? __local_bh_enable_ip+0x161/0x230 [ 230.121929] tls_sw_sendmsg+0x57d/0x12c0 [ 230.125978] ? expand_files.part.8+0x9c0/0x9c0 [ 230.130565] ? tls_sw_push_pending_record+0x30/0x30 [ 230.135565] ? lock_downgrade+0x8f0/0x8f0 [ 230.139700] ? lock_release+0xa30/0xa30 [ 230.143662] ? __check_object_size+0x9d/0x5f2 [ 230.148145] inet_sendmsg+0x1a1/0x690 [ 230.151931] ? ipip_gro_receive+0x100/0x100 [ 230.156238] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 230.161758] ? security_socket_sendmsg+0x94/0xc0 [ 230.166508] ? ipip_gro_receive+0x100/0x100 [ 230.170815] sock_sendmsg+0xd5/0x120 [ 230.174516] __sys_sendto+0x3d7/0x670 [ 230.178316] ? __ia32_sys_getpeername+0xb0/0xb0 [ 230.182975] ? wait_for_completion+0x8d0/0x8d0 [ 230.187547] ? __lock_is_held+0xb5/0x140 [ 230.191599] ? __sb_end_write+0xac/0xe0 [ 230.195568] ? fput+0x130/0x1a0 [ 230.198842] ? ksys_write+0x1ae/0x260 [ 230.202626] ? __ia32_sys_read+0xb0/0xb0 [ 230.206672] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 230.212197] __x64_sys_sendto+0xe1/0x1a0 [ 230.216246] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 230.221248] do_syscall_64+0x1b9/0x820 [ 230.225120] ? finish_task_switch+0x1d3/0x890 [ 230.229599] ? syscall_return_slowpath+0x5e0/0x5e0 [ 230.234512] ? syscall_return_slowpath+0x31d/0x5e0 [ 230.239427] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 230.244777] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.249607] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.254807] RIP: 0033:0x455b29 [ 230.257976] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.277207] RSP: 002b:00007ffac41c1c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 230.284902] RAX: ffffffffffffffda RBX: 00007ffac41c26d4 RCX: 0000000000455b29 [ 230.292152] RDX: 00000000fffffdef RSI: 00000000200005c0 RDI: 0000000000000013 [ 230.299409] RBP: 000000000072bea0 R08: 0000000020000000 R09: 000000000000001c [ 230.306662] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000014 [ 230.313915] R13: 00000000004c0f8b R14: 00000000004d0e88 R15: 0000000000000000 01:13:37 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000021, 0x0) 01:13:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x8000001) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000080)=""/103, 0xff22, 0x100) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000000)={0x6, 0x0, [{0x1000, 0x0, 0x8}, {0x1, 0x0, 0x1acc}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x8000}, {0x81, 0x0, 0x200}, {0xa63, 0x0, 0x7d09}]}) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) 01:13:37 executing program 3: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)) mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) 01:13:37 executing program 7 (fault-call:6 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:37 executing program 5: r0 = semget$private(0x0, 0x3, 0x4) semop(r0, &(0x7f0000000080)=[{0x2, 0xffff}, {}], 0x2) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:13:37 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)=0x4) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000240)) write$fuse(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0x171) write(r0, &(0x7f0000000140)='|', 0x1) 01:13:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f47767") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:37 executing program 4: r0 = socket$inet6(0xa, 0xf, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000007c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x65, 0x7b, &(0x7f0000000800)="558af59c47154426572ace1828eb208277b365cad52f2596873c96970358748f53de07bce4c6d496330b6f28416fd88d56d1cad594948554ce4e1228aa3da3ce5faabf1c86a1253b823515b2448a606ec54ba2c3aa78ae9962f198965ca5104c5d57a79fe7", &(0x7f0000000880)=""/123, 0x800}, 0x28) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={r2, 0x3, 0x1, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x40000000000001b6}, 0x20) write$cgroup_pid(r3, &(0x7f00000000c0)={[0x31]}, 0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000780)={0x2, &(0x7f0000000740)=[{0x401, 0x6}, {0x2, 0x9, 0x3, 0x7}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000200e00130004000000c0040000ffffffff880200008802000098010000fffffffffffffffff0030000f0030000f0030000ffffffff04000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005801980100000000000000000000000000000000000000000000000090007372680000000000000000000000000000000000000000000000000000018707090800010000ff02001000000000000000000000000100000000000000000000ffff7f000001ff010000000000000000000000000001ffffffffff000000000000ff00000000ffffffffff0000ff000000ff000000ffffffffffffffff00ff000000ffffff00150001200000000040005443504f5054535452495000000000000000000000000000000000000000ff7f0000050000000400000008000000080000002c0200008d2200001f000000ff02000000000000000000000000000100000000000000000000ffffac14141effffff00ffffff00ff000000ff000000ff000000ff0000ffffffffffffffffff73797a6b616c6c6572310000000000007465616d5f736c6176655f3100000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000ef00050201000000000000000000000000000000c800f00000000000000000000000000000000000000000000000000028004d41524b0000000000000000000000000000000000000000000000000002060000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280168010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d6000004d307000000000200003000737268000000000000000000000000000000000000000000000000000000840701fb05000000200100000000000040004c4fc70000000000000000000000000000000000000000000000000000007d01eed0dcfe11c71452effe0d42d41e28b777e83eeb8e3689ef8b6db489c5a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x520) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000700)={0x0, 0x3, 0x81, 0x100000000, 0x6, 0x9, 0x8, 0x5, 0x6, 0xe2c7, 0xfc, 0xff}) [ 230.592128] FAULT_INJECTION: forcing a failure. [ 230.592128] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.604210] CPU: 0 PID: 15872 Comm: syz-executor7 Not tainted 4.18.0-rc1+ #109 [ 230.611582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.620945] Call Trace: [ 230.623546] dump_stack+0x1c9/0x2b4 [ 230.627189] ? dump_stack_print_info.cold.2+0x52/0x52 [ 230.632408] should_fail.cold.4+0xa/0x1a [ 230.636486] ? fault_create_debugfs_attr+0x1f0/0x1f0 01:13:37 executing program 3: mq_open(&(0x7f0000000080)='.wlan1\x00', 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x101}) 01:13:37 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000a2, 0x0) [ 230.641609] ? trace_hardirqs_on+0xd/0x10 [ 230.645767] ? try_charge+0xabd/0x1650 [ 230.649668] ? down_read+0xb5/0x1d0 [ 230.653290] ? get_user_pages_unlocked+0xfd/0x5d0 [ 230.658133] ? __mem_cgroup_largest_soft_limit_node.part.61+0x6b0/0x6b0 [ 230.664873] ? up_read+0x1a/0x110 [ 230.668311] ? print_usage_bug+0xc0/0xc0 [ 230.672356] ? get_user_pages_longterm+0x650/0x650 [ 230.677278] ? get_user_pages_fast+0x22b/0x450 [ 230.681846] __alloc_pages_nodemask+0x36e/0xdb0 [ 230.686497] ? mark_held_locks+0xc9/0x160 [ 230.690637] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 230.695641] ? mem_cgroup_charge_skmem+0x183/0x350 [ 230.700555] ? mem_cgroup_sk_free+0x90/0x90 [ 230.704866] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 230.710391] ? tcp_leave_memory_pressure+0x47/0xf0 [ 230.715309] ? tcp_push+0x8c0/0x8c0 [ 230.718934] ? __sk_mem_raise_allocated+0x88a/0x1600 [ 230.724036] ? sk_busy_loop_end+0x1c0/0x1c0 [ 230.728354] ? debug_check_no_locks_freed+0x310/0x310 [ 230.733528] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 230.739078] alloc_pages_current+0x10c/0x210 [ 230.743476] skb_page_frag_refill+0x45f/0x6a0 [ 230.747960] ? sock_kzfree_s+0x60/0x60 [ 230.751838] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 230.757363] ? zerocopy_from_iter.constprop.12+0x48e/0x640 [ 230.762978] sk_page_frag_refill+0x55/0x1f0 [ 230.767280] sk_alloc_sg+0x1e7/0x9d0 [ 230.770996] ? sk_page_frag_refill+0x1f0/0x1f0 [ 230.775568] ? free_sg+0x530/0x530 [ 230.779094] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 230.784098] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 230.789108] ? __local_bh_enable_ip+0x161/0x230 [ 230.793771] tls_sw_sendmsg+0x67e/0x12c0 [ 230.797822] ? expand_files.part.8+0x9c0/0x9c0 [ 230.802402] ? tls_sw_push_pending_record+0x30/0x30 [ 230.807397] ? lock_downgrade+0x8f0/0x8f0 [ 230.811527] ? lock_release+0xa30/0xa30 [ 230.815493] ? __check_object_size+0x9d/0x5f2 [ 230.819982] inet_sendmsg+0x1a1/0x690 [ 230.823777] ? ipip_gro_receive+0x100/0x100 [ 230.828080] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 230.833600] ? security_socket_sendmsg+0x94/0xc0 [ 230.838347] ? ipip_gro_receive+0x100/0x100 [ 230.842652] sock_sendmsg+0xd5/0x120 [ 230.846357] __sys_sendto+0x3d7/0x670 [ 230.850139] ? __ia32_sys_getpeername+0xb0/0xb0 [ 230.854792] ? wait_for_completion+0x8d0/0x8d0 [ 230.859360] ? __lock_is_held+0xb5/0x140 [ 230.863411] ? __sb_end_write+0xac/0xe0 [ 230.867366] ? fput+0x130/0x1a0 [ 230.870627] ? ksys_write+0x1ae/0x260 [ 230.874410] ? __ia32_sys_read+0xb0/0xb0 [ 230.878460] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 230.884007] __x64_sys_sendto+0xe1/0x1a0 [ 230.888071] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 230.893084] do_syscall_64+0x1b9/0x820 [ 230.896954] ? finish_task_switch+0x1d3/0x890 [ 230.901435] ? syscall_return_slowpath+0x5e0/0x5e0 [ 230.906350] ? syscall_return_slowpath+0x31d/0x5e0 [ 230.911267] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 230.916626] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.921462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.926635] RIP: 0033:0x455b29 01:13:37 executing program 7 (fault-call:6 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 230.929802] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.949062] RSP: 002b:00007ffac41c1c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 230.956767] RAX: ffffffffffffffda RBX: 00007ffac41c26d4 RCX: 0000000000455b29 [ 230.964026] RDX: 00000000fffffdef RSI: 00000000200005c0 RDI: 0000000000000013 [ 230.971297] RBP: 000000000072bea0 R08: 0000000020000000 R09: 000000000000001c [ 230.978572] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000014 [ 230.986017] R13: 00000000004c0f8b R14: 00000000004d0e88 R15: 0000000000000001 01:13:38 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f47767") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 01:13:38 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6f, 0x0) r1 = getpgid(0x0) getpriority(0x2, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000080)={0x5, 0x3, 0xff, 0xffffffffffffffff, 'syz0\x00', 0x47}) mkdir(&(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd) 01:13:38 executing program 3: mq_open(&(0x7f0000000000)='.wlan1\x00', 0x0, 0x0, &(0x7f0000000040)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x0, 0x6}, {0x5, 0x2}, {0x100, 0x4}, {0x8, 0x9}, {0x1000, 0x400}]}) 01:13:38 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1000019d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000480), 0x100000000000029f, 0x0) [ 231.279878] FAULT_INJECTION: forcing a failure. [ 231.279878] name failslab, interval 1, probability 0, space 0, times 0 [ 231.291335] CPU: 1 PID: 15895 Comm: syz-executor7 Not tainted 4.18.0-rc1+ #109 [ 231.298708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.308061] Call Trace: [ 231.310654] dump_stack+0x1c9/0x2b4 [ 231.314270] ? dump_stack_print_info.cold.2+0x52/0x52 [ 231.319449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 231.324972] ? __do_page_fault+0x449/0xe50 [ 231.329200] should_fail.cold.4+0xa/0x1a [ 231.333250] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 231.338339] ? graph_lock+0x170/0x170 [ 231.342129] ? graph_lock+0x170/0x170 [ 231.346018] ? graph_lock+0x170/0x170 [ 231.349984] ? vmalloc_sync_all+0x30/0x30 [ 231.354121] ? sk_busy_loop_end+0x1c0/0x1c0 [ 231.358430] ? debug_check_no_locks_freed+0x310/0x310 [ 231.363608] ? find_held_lock+0x36/0x1c0 [ 231.367657] ? __lock_is_held+0xb5/0x140 [ 231.371725] ? check_same_owner+0x340/0x340 [ 231.376040] ? check_same_owner+0x340/0x340 [ 231.380348] ? rcu_note_context_switch+0x730/0x730 [ 231.385272] __should_failslab+0x124/0x180 [ 231.389495] should_failslab+0x9/0x14 [ 231.393281] __kmalloc+0x2c8/0x760 [ 231.396811] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 231.401817] ? _copy_from_iter+0x39d/0x1090 [ 231.406122] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 231.411152] ? tls_push_record+0x10d/0x1400 [ 231.415582] ? __check_object_size+0x9d/0x5f2 [ 231.420660] tls_push_record+0x10d/0x1400 [ 231.424810] ? _copy_from_iter_nocache+0x1050/0x1050 [ 231.429902] ? __local_bh_enable_ip+0x161/0x230 [ 231.434565] tls_sw_sendmsg+0x9e6/0x12c0 [ 231.438638] ? tls_sw_push_pending_record+0x30/0x30 [ 231.443641] ? lock_downgrade+0x8f0/0x8f0 [ 231.447784] ? lock_release+0xa30/0xa30 [ 231.451766] ? __check_object_size+0x9d/0x5f2 [ 231.456253] inet_sendmsg+0x1a1/0x690 [ 231.460048] ? ipip_gro_receive+0x100/0x100 [ 231.464380] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 231.469907] ? security_socket_sendmsg+0x94/0xc0 [ 231.474649] ? ipip_gro_receive+0x100/0x100 [ 231.478961] sock_sendmsg+0xd5/0x120 [ 231.482665] __sys_sendto+0x3d7/0x670 [ 231.486457] ? __ia32_sys_getpeername+0xb0/0xb0 [ 231.491130] ? wait_for_completion+0x8d0/0x8d0 [ 231.495703] ? __lock_is_held+0xb5/0x140 [ 231.499760] ? __sb_end_write+0xac/0xe0 [ 231.503725] ? fput+0x130/0x1a0 [ 231.506993] ? ksys_write+0x1ae/0x260 [ 231.510871] ? __ia32_sys_read+0xb0/0xb0 [ 231.514923] ? syscall_slow_exit_work+0x500/0x500 [ 231.519753] __x64_sys_sendto+0xe1/0x1a0 [ 231.523799] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 231.528812] do_syscall_64+0x1b9/0x820 [ 231.532685] ? syscall_return_slowpath+0x5e0/0x5e0 [ 231.537600] ? syscall_return_slowpath+0x31d/0x5e0 [ 231.542522] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 231.547874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 231.552706] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.557881] RIP: 0033:0x455b29 [ 231.561484] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:13:38 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000000)=[{0x2, 0xffff}, {0x0, 0x0, 0xfffffffffffffffe}], 0x2) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1000, 0x8100) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}]}) semtimedop(r0, &(0x7f0000000240)=[{0x0, 0x51d}, {0x2, 0x2}], 0x2, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x10) 01:13:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000b94000)=""/246) readlinkat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/183, 0xb7) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000e9f000)=0x60020d) pread64(r1, &(0x7f0000000540)=""/103, 0x49, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x0) [ 231.580713] RSP: 002b:00007ffac41c1c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 231.588409] RAX: ffffffffffffffda RBX: 00007ffac41c26d4 RCX: 0000000000455b29 [ 231.595665] RDX: 00000000fffffdef RSI: 00000000200005c0 RDI: 0000000000000013 [ 231.602918] RBP: 000000000072bea0 R08: 0000000020000000 R09: 000000000000001c [ 231.610185] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000014 [ 231.617440] R13: 00000000004c0f8b R14: 00000000004d0e88 R15: 0000000000000002 01:13:38 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f4776710") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 231.679171] ================================================================== [ 231.686790] BUG: KASAN: use-after-free in tls_push_record+0x1091/0x1400 [ 231.693536] Write of size 1 at addr ffff8801b29b0000 by task syz-executor7/15895 [ 231.701059] [ 231.702673] CPU: 1 PID: 15895 Comm: syz-executor7 Not tainted 4.18.0-rc1+ #109 [ 231.710048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.719386] Call Trace: [ 231.721970] dump_stack+0x1c9/0x2b4 [ 231.725597] ? dump_stack_print_info.cold.2+0x52/0x52 [ 231.730771] ? printk+0xa7/0xcf [ 231.734041] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 231.738786] ? tls_push_record+0x1091/0x1400 [ 231.743185] print_address_description+0x6c/0x20b [ 231.748031] ? tls_push_record+0x1091/0x1400 [ 231.752445] kasan_report.cold.7+0x242/0x2fe [ 231.756864] __asan_report_store1_noabort+0x17/0x20 [ 231.761874] tls_push_record+0x1091/0x1400 [ 231.766108] ? lock_sock_nested+0x9f/0x120 [ 231.770354] tls_sw_push_pending_record+0x22/0x30 [ 231.775181] tls_sk_proto_close+0x74c/0xae0 [ 231.779487] ? lock_acquire+0x1e4/0x540 [ 231.783446] ? tcp_check_oom+0x530/0x530 [ 231.787490] ? tls_write_space+0x360/0x360 [ 231.791718] ? rcu_note_context_switch+0x730/0x730 [ 231.796632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 231.802155] ? ipv6_sock_ac_close+0x356/0x490 [ 231.806646] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 231.812171] ? ipv6_sock_mc_close+0x162/0x1d0 [ 231.816653] ? ip_mc_drop_socket+0x20f/0x270 [ 231.821043] ? down_write+0x8f/0x130 [ 231.824754] inet_release+0x104/0x1f0 [ 231.828547] inet6_release+0x50/0x70 [ 231.832242] __sock_release+0xd7/0x260 [ 231.836111] ? __sock_release+0x260/0x260 [ 231.840243] sock_close+0x19/0x20 [ 231.843693] __fput+0x35b/0x8b0 [ 231.846988] ? fput+0x1a0/0x1a0 [ 231.850272] ? _raw_spin_unlock_irq+0x27/0x70 [ 231.854764] ____fput+0x15/0x20 [ 231.858050] task_work_run+0x1ec/0x2a0 [ 231.861926] ? task_work_cancel+0x250/0x250 [ 231.866234] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 231.871764] ? switch_task_namespaces+0xa2/0xd0 [ 231.876422] do_exit+0x1b08/0x2750 [ 231.879949] ? plist_add+0x790/0x790 [ 231.883651] ? mm_update_next_owner+0x9a0/0x9a0 [ 231.888307] ? print_usage_bug+0xc0/0xc0 [ 231.892355] ? graph_lock+0x170/0x170 [ 231.896141] ? do_raw_spin_unlock+0xa7/0x2f0 [ 231.900540] ? rcu_note_context_switch+0x730/0x730 [ 231.905457] ? lock_acquire+0x1e4/0x540 [ 231.909423] ? __lock_acquire+0x7fc/0x5020 [ 231.913665] ? debug_check_no_locks_freed+0x310/0x310 [ 231.918858] ? kasan_check_read+0x11/0x20 [ 231.923006] ? do_raw_spin_unlock+0xa7/0x2f0 [ 231.927399] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 231.931964] ? kasan_check_write+0x14/0x20 [ 231.936184] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 231.941360] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 231.946890] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 231.951989] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 231.957515] ? futex_wait+0x5d2/0xa20 [ 231.961325] ? futex_wait_setup+0x410/0x410 [ 231.965638] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 231.970823] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 231.975913] ? graph_lock+0x170/0x170 [ 231.979707] ? memset+0x31/0x40 [ 231.982990] ? find_held_lock+0x36/0x1c0 [ 231.987057] ? lock_downgrade+0x8f0/0x8f0 [ 231.991205] do_group_exit+0x177/0x440 [ 231.995083] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 231.999651] ? __ia32_sys_exit+0x50/0x50 [ 232.003701] ? _raw_spin_unlock_irq+0x27/0x70 [ 232.008202] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 232.013221] get_signal+0x88e/0x1970 [ 232.016921] ? ptrace_notify+0x130/0x130 [ 232.020976] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 232.025386] ? graph_lock+0x170/0x170 [ 232.029183] ? mntput_no_expire+0x18e/0xbc0 [ 232.033496] do_signal+0x9c/0x21c0 [ 232.037032] ? lock_downgrade+0x8f0/0x8f0 [ 232.041168] ? setup_sigcontext+0x7d0/0x7d0 [ 232.045483] ? kasan_check_read+0x11/0x20 [ 232.049615] ? do_raw_spin_unlock+0xa7/0x2f0 [ 232.054013] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 232.058593] ? _raw_spin_unlock_irq+0x27/0x70 [ 232.063075] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 232.068095] ? exit_to_usermode_loop+0x8c/0x370 [ 232.072763] exit_to_usermode_loop+0x2de/0x370 [ 232.077330] ? syscall_slow_exit_work+0x500/0x500 [ 232.082158] ? do_syscall_64+0x9a/0x820 [ 232.086119] do_syscall_64+0x6be/0x820 [ 232.090008] ? syscall_return_slowpath+0x5e0/0x5e0 [ 232.094935] ? syscall_return_slowpath+0x31d/0x5e0 [ 232.099861] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 232.105215] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 232.110052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 232.115231] RIP: 0033:0x455b29 [ 232.118410] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 232.137635] RSP: 002b:00007ffac41c1ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 232.145332] RAX: fffffffffffffe00 RBX: 000000000072bec8 RCX: 0000000000455b29 [ 232.152595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bec8 [ 232.159861] RBP: 000000000072bec8 R08: 0000000000000033 R09: 000000000072bea0 [ 232.167113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.174367] R13: 00007ffcad60f15f R14: 00007ffac41c29c0 R15: 0000000000000000 [ 232.181622] [ 232.183231] The buggy address belongs to the page: [ 232.188142] page:ffffea0006ca6c00 count:0 mapcount:-128 mapping:0000000000000000 index:0x0 [ 232.196527] flags: 0x2fffc0000000000() [ 232.200410] raw: 02fffc0000000000 ffffea0005ddc408 ffffea0006caac08 0000000000000000 [ 232.208299] raw: 0000000000000000 0000000000000003 00000000ffffff7f 0000000000000000 [ 232.216159] page dumped because: kasan: bad access detected [ 232.221849] [ 232.223455] Memory state around the buggy address: [ 232.228365] ffff8801b29aff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 232.235709] ffff8801b29aff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 232.243054] >ffff8801b29b0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 232.250403] ^ [ 232.253759] ffff8801b29b0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 232.261111] ffff8801b29b0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 232.268450] ================================================================== [ 232.275788] Disabling lock debugging due to kernel taint 01:13:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f47767") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 232.281357] Kernel panic - not syncing: panic_on_warn set ... [ 232.281357] [ 232.288733] CPU: 1 PID: 15895 Comm: syz-executor7 Tainted: G B 4.18.0-rc1+ #109 [ 232.297475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.306829] Call Trace: [ 232.309405] dump_stack+0x1c9/0x2b4 [ 232.313022] ? dump_stack_print_info.cold.2+0x52/0x52 [ 232.318202] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 232.322994] panic+0x238/0x4e7 [ 232.326212] ? add_taint.cold.5+0x16/0x16 [ 232.330364] ? do_raw_spin_unlock+0xa7/0x2f0 [ 232.334772] ? tls_push_record+0x1091/0x1400 [ 232.339163] kasan_end_report+0x47/0x4f [ 232.343124] kasan_report.cold.7+0x76/0x2fe [ 232.347445] __asan_report_store1_noabort+0x17/0x20 [ 232.352476] tls_push_record+0x1091/0x1400 [ 232.356717] ? lock_sock_nested+0x9f/0x120 [ 232.360963] tls_sw_push_pending_record+0x22/0x30 [ 232.365939] tls_sk_proto_close+0x74c/0xae0 [ 232.370280] ? lock_acquire+0x1e4/0x540 [ 232.374258] ? tcp_check_oom+0x530/0x530 [ 232.378318] ? tls_write_space+0x360/0x360 [ 232.382551] ? rcu_note_context_switch+0x730/0x730 [ 232.387476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 232.392997] ? ipv6_sock_ac_close+0x356/0x490 [ 232.397491] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 232.403037] ? ipv6_sock_mc_close+0x162/0x1d0 [ 232.407534] ? ip_mc_drop_socket+0x20f/0x270 [ 232.411951] ? down_write+0x8f/0x130 [ 232.415683] inet_release+0x104/0x1f0 [ 232.419489] inet6_release+0x50/0x70 [ 232.423213] __sock_release+0xd7/0x260 [ 232.427138] ? __sock_release+0x260/0x260 [ 232.431347] sock_close+0x19/0x20 [ 232.434840] __fput+0x35b/0x8b0 [ 232.438158] ? fput+0x1a0/0x1a0 [ 232.441476] ? _raw_spin_unlock_irq+0x27/0x70 [ 232.445997] ____fput+0x15/0x20 [ 232.449285] task_work_run+0x1ec/0x2a0 [ 232.453176] ? task_work_cancel+0x250/0x250 [ 232.457516] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 232.463068] ? switch_task_namespaces+0xa2/0xd0 [ 232.467756] do_exit+0x1b08/0x2750 [ 232.471302] ? plist_add+0x790/0x790 [ 232.475018] ? mm_update_next_owner+0x9a0/0x9a0 [ 232.479686] ? print_usage_bug+0xc0/0xc0 [ 232.483739] ? graph_lock+0x170/0x170 [ 232.487544] ? do_raw_spin_unlock+0xa7/0x2f0 [ 232.491955] ? rcu_note_context_switch+0x730/0x730 [ 232.496883] ? lock_acquire+0x1e4/0x540 [ 232.500860] ? __lock_acquire+0x7fc/0x5020 [ 232.505144] ? debug_check_no_locks_freed+0x310/0x310 [ 232.510355] ? kasan_check_read+0x11/0x20 [ 232.514519] ? do_raw_spin_unlock+0xa7/0x2f0 [ 232.518930] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 232.523521] ? kasan_check_write+0x14/0x20 [ 232.527763] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 232.532951] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 232.538504] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 232.543617] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 232.549157] ? futex_wait+0x5d2/0xa20 [ 232.552945] ? futex_wait_setup+0x410/0x410 [ 232.557252] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 232.562433] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 232.567537] ? graph_lock+0x170/0x170 [ 232.571348] ? memset+0x31/0x40 [ 232.574613] ? find_held_lock+0x36/0x1c0 [ 232.578679] ? lock_downgrade+0x8f0/0x8f0 [ 232.582836] do_group_exit+0x177/0x440 [ 232.586732] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 232.591317] ? __ia32_sys_exit+0x50/0x50 [ 232.595376] ? _raw_spin_unlock_irq+0x27/0x70 [ 232.599874] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 232.604887] get_signal+0x88e/0x1970 [ 232.608585] ? ptrace_notify+0x130/0x130 [ 232.612632] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 232.617043] ? graph_lock+0x170/0x170 [ 232.620840] ? mntput_no_expire+0x18e/0xbc0 [ 232.625157] do_signal+0x9c/0x21c0 [ 232.628681] ? lock_downgrade+0x8f0/0x8f0 [ 232.632816] ? setup_sigcontext+0x7d0/0x7d0 [ 232.637124] ? kasan_check_read+0x11/0x20 [ 232.641261] ? do_raw_spin_unlock+0xa7/0x2f0 [ 232.645664] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 232.650244] ? _raw_spin_unlock_irq+0x27/0x70 [ 232.654728] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 232.659754] ? exit_to_usermode_loop+0x8c/0x370 [ 232.664421] exit_to_usermode_loop+0x2de/0x370 [ 232.668999] ? syscall_slow_exit_work+0x500/0x500 [ 232.673843] ? do_syscall_64+0x9a/0x820 [ 232.677800] do_syscall_64+0x6be/0x820 [ 232.681680] ? syscall_return_slowpath+0x5e0/0x5e0 [ 232.686590] ? syscall_return_slowpath+0x31d/0x5e0 [ 232.691502] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 232.696858] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 232.701723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 232.706910] RIP: 0033:0x455b29 [ 232.710078] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 232.729249] RSP: 002b:00007ffac41c1ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 232.736942] RAX: fffffffffffffe00 RBX: 000000000072bec8 RCX: 0000000000455b29 [ 232.744192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bec8 [ 232.751461] RBP: 000000000072bec8 R08: 0000000000000033 R09: 000000000072bea0 [ 232.758730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.765982] R13: 00007ffcad60f15f R14: 00007ffac41c29c0 R15: 0000000000000000 [ 232.773818] Dumping ftrace buffer: [ 232.777347] (ftrace buffer empty) [ 232.781034] Kernel Offset: disabled [ 232.784640] Rebooting in 86400 seconds..