240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x630b}], 0x0, 0x0, 0x0}) 17:58:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008601) 17:58:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0xfffffffffffffffc) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x80) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000040)={r0, r0, 0x2, 0x1000, &(0x7f0000000840)="a4f852579a6af930d59e0f0bf0abcc8e3fb0f1fe4f89649dcfbfc4b10e8d894373bf1e5274808679aeb84ed20795309331054d1e639cadae32e89871941d08a6365af3ce26fa291f2fc61493d647b0df35a1758471827a05b8c3e8f04cd8be0a3e091f088085d70b628717e5ed71c2d8499fdce6d98d85ea49b23bc8a8c85608088158eda4d40f9771546cbc078a36961a2edfcb1cc0426739a1d15771e908fcd080143d3e70c79b062da7d260b947dc10a16c027b7114f27b2b450d0c874949818ab35270ee0fb39fe066d4b402f7b31f1bfe7248f076c797da5d042c7ee9f6e4964c4492df4af50dbde18dfd8eda5bd676705fcdf4c267350f5d424e9d4ffd1616baf4905171f42cff438d7193bad95b9d5c97d5b94fc1131b4299ed02a33e422d23e39e0dd9e50fa6156b934b7a348d0cd0872d240719d6749cfd15c68fa202c9325829826328700a608cdda2410779070766235e41c5ac1da4e3bd86b7339927a101e53a9816b3359695998ba111fc64981ca379407a91d2933b78d687b2edfc554b3006df5e41b115a34155172b9ae943f54d9aeb2c913ef50e196a2f95b3a26b221badd88eb6c4635546aef8b9973b8b41b7b013339b5abf20bf26a9eba5455ff823f3ec7a66d9a5fa6028f993111fc282c80aa08ec2d758c77a7000ce17ba13ad58358af0491d6b62cc2ac33cbe39da229c37f50b4bc3db26bb6186b92ee052aa4803d0586fc70ab28d0b3f5929912fb07d2eaab1ce5dca25fa508c43a93a40e27a6fe9f9446c3b31523e5274eb18b92f53f316632eb36c7c549cd41dba521b1df90662097d5bed7eeaf45a0e2a0cd1a7722fb33be1bf6fc872e469e500cb5fa2d01c8e1763bc28948f8915f6e38a26f18b49d868d577e6a52322ce14d01ab60d9d2af3ef32e0a49ad1a86ab8b73a1bb9e8deb51247da22a9c14afc4d858eb869ef76ba1bf2a5d1cb55c94965362927dda496b291529fb4b02e04b837c3b6440cc78ebb75bbb340ad9181fef38b812c3986a8dd362da1a24dc2b63102156a0d6757d7a111e22e936051b1061afcf7862f6d9b9cc4921a75dc4bd52793bdd276189364d3fc39f3963be0023d975b9ae3cd1b5df54c84b4d4163ad654c0e3dde4a09f8ce1499235327f27f103ab5ea8ad88d2f03680d3a17068af3c35370b375d4b0e9ee824200f40690b2ef8aa942bb1e911bc6e9818da9e3c1c3af17125e40062f9e323df3b244de05c2cbec5835c63355c1fdea132a555169732c75723076ec4fe642ee70eebe37af19d565b21a1a2e431a443ca63cedeba60604b6c82ea93443b4b07251ca767004c025175558df4dbc7313b663896898f520dfce38dd82a0c183dad65c7e8354e3bcf15b49b5bd3e78608084d474eeeb8841933ecf0e1cd5d4066071fe74245e3a2d9e1cbec585f5a0242033250d83cadca8146babd6819a1dc46295388f670bc8a448ebece49142ec8a6976e56f81355628aeee2ddbb9306c108d85c2629af343e346a65e0a65facaa3f1ba321ebfcadef28bf1b66725505be5de1809e3f033c937379f371e65af98304a933e8fb35fcca91e7268be6d5faece214dd5f228d2c475b931a0254957e90a395f13d054a4731e87068ffc33edea44518220d6dd7a754eaa7b370dc36c1b714c75d9a7b673717c5bb10ad3cbf9beb93adc025514dc8aeba6e767953910574ee87e8e58c70dae5b5e85241b52fc4f855489f23612b19186703e06db3c9b556f0a683ddad8e587009e4e6cf526970117af73b2eece8bf61eed2eb260b9ab53bf6784efa0aec062d9e276759a4c14fd0bc5ef5d722a3927614e67de3e545be388fd77bf23da69ec1437b51751356dbbd841b522196a6a5d7617d796409f519ae9e3e05fdc87771eb6f3780cfed0eb7844b51fed1b44b4e5ef543bc12eca1c3a05b21749b141c4f11ba0736c6e8feee5d5600e3267e3716fe082842c16eb4f057e22f99923339c8039b1b77f7e7f4350a72ec2726708472383494cf10ac4c11cfdbc5ecc37dd587e38a22b3ebcd28455fa039e76cdbe473650f704f3c5f25d1575a2cc69bc48e6903a02c935a7ab58ae897cec20d326dcc07a37b6bafa4eb8be3d6f77a457877c34cdfbe27e7db78c71985d8b56ec0287ff6c765058871369a1455445b0a0ca7491fad5b54d5ba50d601421c95f6610a38097f147df44d8088800c23968c61b1f5a073f773550ef15efce5f49e64288be26dd7f816ad48fadce3c6d163a10f4f2abf0a4d6d5b3166367fb6be264742ac194bcd3b23d82f4710fa877da2d60e6215cfa5af00242c8e7e09caaea96a0bd0a793a079d67fda16c794f5c557db3ad499a0edeb05fd547575f92f3f55c2426877fc6d01fc1d57939e7426150d12221d739af74ffa4166b20a6fb05c642cc7ba68fa5c7d939946c6ab4909d422e3a2d7ae054d36fb35115912b36c388be929f0d5c496bb2ee8f0f8462e7d880bc757799eb5770b7a2fee8390d1fcf805e81d20ccadf3932e041e9d30dce0e27230d6f84045b1d81241480d222ec21569ad57d556038e23d4a867bfc4c4882a0222663befeef2d15533241178dec8ac46f8b77aca5ca35465271fc3484ea269d24cf380fbeb51bec86816b90c56db01ff5089cfb11991f67479f5e6a22cf805b8303349dab8733494c89a7f18cc587d55c47aa1d829b62293e56aebc70de146a1e711a991ea0ff2efe9d5b6d44bb048e6ed81e0abfa1e674f0ff36d241337353d1e3ab353e733eed1e92b0f17e9c624e7c25e717c69ddb462e7e22953659024f7784816cc230293447c9734240149ecfba01bb8d6b72d90f76ae901b1f5e305cbbe22f1f471e00eb316dc2503b81ba5af7c4ccab2d349461c277bff526b96e9bc83bea40456cfa67efc2c63fdd016c84e4e14495d50b50014726719647c5a88b12e3bc1d8f62f227e4f5ef1a85b924a38358f334392695d80fa1fb0f54ed543f2bf6f7ac6aa1bca3b419fe7ddcd2657d793757276c3505746399fb1ce619a360b0bf7d3ee5f75e5cb2ec9cbe8e4498dfb1a3a6b5259cdf129e24822ff25f0ef09b6766f414c212a78a1d7c8e7ac0280abc972f31768e325a038e4b19a9a1d13e9f63dac9fb6488cc2807629eddad25d7c7fcb54ff212257c601313c099f6768faf62573402119ded88e7561331e143a8f0248efaa6c9dd8121e925fc819c6a1c83575b558c4a2338e4bdf5ffbe13439c80d279aee6273dc2b0aa97b9a29ce29b8d29ac064aa23448783d9866f02c8fb15833d269f61d4633fc4c3d7ad07a438acf026c34eab86b13625cb79cdd0b5e571db1f11866fb15e0a6f47a42026e49e1290af2ee8ba9ee38d6e7daf81f247da2b0fe03c28b93d4ace5adecfc4beb09987ad8bb6b8279b63988f47c1e0907704e463e14ed67d83498e32ee8d90700f4cb061552959452b22254ef4c001c8d237e7c13140cce5a0865198651f168915d5cd9e4a6ede6926ab8eb6f1f108759b1d6473c5efc530acbc05b8671855e5df8a8db0c9a50c7356b71f60804a09611cbc2d7498fe9df744adc442793c6f1564b521a0acdadab95f8cc1e7d566ab7961ad8f4a1620b0762bf14381b903733316715802c17b81215044c65719c164614db6ec16431629425e852b6aac2debff27bf735d9a094aa1f418dfd7f9e7d9f7f4a0d9c7a9fd7a7c3b7e1c1f277d6fb0d680a494cc1382667d6574e7944a5d3bcc941a5e5a61013101ba0b086ecf1b18db035ee9b4e492f760bc47fbbedca0da86ffe89bf6e9066e28afd500a8ab3e3a1929331f25ba45069f0299ec2496e923bb47813f9598bcc3a2ac1d44feea0fd70cc4f6573cf7eae8b0dcc7f07f42ed3de0ed684310c0312fc06de52d68bf52a3aca7285c46b44e3b1678eace834ffd9f73dba4c81c1cfeda647f9a6883806ff9502673a4e4da4abe21bc4e9c0b61e971960f7f9493c443bddfffc4a5996f01c98d4aa4ccf7b5d7f803ee72b9aaa7dd459093f12356c09ca4791646f7942361ccc947ad118a843843203714a1cbe04b003ab7c2bc4d4576e87a06377237c201a098bdd64e7c01c11db0c9cafb7f225fa4ea9e8dcb2eba75f543a96f1e622f732c648466b41ebf0c2476883de58eddd2e313f1879b105445665ba0810ad36be4451233ef0e5f45948d1f5ed5a179767cf3208b045230ab29f765aa71e09044bdcec1ced8306d7d535aa62f1a9bf480dc56b237d4d79364b128327f36a6c043019dd7689af3f9c8e8cc9259fc2cef4850caa7900a0aaa1d32d284a4abd85c14c00ceb233dfaf1756129fc8acd8e298449423038e7a4e5b0bfeb447254b3bc22eaff4763adc902722d6a686db6b696a2e59ce6f1bd6abcbde684b408a6d9d2008dbdcf1e43bbc86333f25c9977c6419d847e88f7bc450f287b7cf0e57a8ede3af6afb55c576f9627ffd5743bee0cd9e33b624e2707ec6e2c78ed0ef34a84fef255761542a14e47b0dcc53a090189e0c790c0e3509baacb48016aa9a1f3ea127addfaa3864f21a55bf6397f3b777af1ac63d9e5ecfa990bdac1d00b3b7efd1ee9275273c51fd165b312a75cda92062aee808962dc2d32926eaf5515b238896b0f98b75a102188bb255c11e47a7af482601e889dbf0491dd0037107c6859a5d72d8369f4dab030c4ef23d2d41d90cf6f45377c546d63d293ae3904d51acecc78395b5506278f249bd0986fc70c63d4f6a95fcbecafa6be8a33a1eed84d9b1e75e94592430f4e031f0bf8fcfc9fd72a29cf9f009874e75fd7c63d9872f701fa46b196d5a4fc9ca02059e69d393f8185efc8ac8cbf35f0eb33d9e5ded539e1887bdaacc8adf2f4ffa146257bdb81acf52bdc37e6090765f70ee35555dc800195ad42935a089161262e038c22a1be43becb5d7b18b165439c661c437040b6adaf3cf34dfb96bb3a769acdf7719ad637fd1f7e8d11f100914e8cdaa85651cbf9f5359d1be40ec9914cf19e9325de5397c7673df2aca9e1ab32dd008cb7b165844d6067a631bb8ccd63d6718d576f5209d31b5420a4f4f92de0dceee6897c46fe21142d13f94a2c9dd04fe709df34f0b5c24c558f0d8cdbfe22884df8cbeefeb22418f747363487a39f8772003447d47a8a67c5b4ed224e19f82051dd7da1a777333ee9dc8b24d56ed9d538f03a223f852b7f8ff3c70d8ca08151df452b0f8ef33da7dac8f3ef6cfef25e61444d4c8bef772a617792ba6b5db0bc87cad984825a7ff5b89a07054dc22d5b42d6b2ef5346423332c01c51c4d7704eaa807d071b4c22f9c20d307409d4d9c466f2b8ab2ec2879278559b229ea7a9a313ba0664e45a36ef75f4a353924fd8ff68a0e3605255dabcc65efe35aa735d94f3083dc7d13da94244389533f802518dd33a0bf229df76fac3408b1db525d93d98429992ed4f28bc43a6946914ca9293ee9542640f4c281095b776d6775f2f3fff3c1e926c7a20d2e50de91eae64ba48e45fdc4568f33584367fe4f63818809fbe837d9ca07a51b7ea2fa8c7d27fdee84423b29b3277e779766631f887a702870e3cc654f00cfe64dbe5faee9cb03c51ea4e0c377362e9e707a6b5a3962b8826004f1c9be7a965616ff3bba1086f7cbbb484c6785bad844e95b9327becad9af498da48a9f04e8df4c9076518ee65f7ca3547b9bc89a13ceaa64ecc6664f508b3a944c7f18cb63e613e41038e179d49efc88e968711da8512265cfdabb98a5ebc54be7c6361e8021c5020668f97d0a2612116aafb0a900907bd5ceafb7694696ed1437ac1a0d81c6948bed747572cc0a63509dc6fcaeb", 0x1845ed46, 0xfffffffffffffff8, 0x20, 0xd5, 0x1, 0x2, 0x0, 'syz1\x00'}) gettid() connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000280)="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", 0x587}], 0x1}}], 0x1, 0x880) socket$vsock_dgram(0x28, 0x2, 0x0) 17:58:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mount(&(0x7f0000000000)=@sr0='/dev/sr0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='udf\x00', 0x100000, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) fcntl$setlease(r0, 0x400, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r2) 17:58:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) fcntl$setstatus(r1, 0x4, 0x42803) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) [ 1090.754872] binder: 4619:4624 unknown command 0 17:58:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x2000000000000) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@random={'btrfs.', '/dev/amidi#\x00'}, &(0x7f0000000140)=""/83, 0x53) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{0x0, 0x785a613182a33f75, &(0x7f0000002480)=[{&(0x7f0000000280)="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", 0xffffffffffffffd3}], 0x100000000000016a}}], 0x1, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x40, 0x20000) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x21, 0xfffffffffffffe7c) 17:58:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008700) [ 1090.794133] binder: 4619:4624 ioctl c0306201 20000240 returned -22 [ 1090.850237] device nr0 entered promiscuous mode 17:58:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000080)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r1) 17:58:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x630c}], 0x0, 0x0, 0x0}) 17:58:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008701) 17:58:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000280)="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", 0x587}], 0x1}}], 0x1, 0x880) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffff9c, 0x8008563f, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=r2) [ 1091.084266] binder: 4844:4848 unknown command 0 [ 1091.096213] binder: 4844:4848 ioctl c0306201 20000240 returned -22 [ 1091.404368] device nr0 entered promiscuous mode 17:58:32 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x840) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0x5, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) umount2(&(0x7f0000000100)='./file0\x00', 0x5) linkat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x400) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f00000000c0)=""/45) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008800) 17:58:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x630d}], 0x0, 0x0, 0x0}) 17:58:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xfff, @rand_addr="75ef01cfd4613b6ec1c900dae49aeda8", 0x71}], 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000280)="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", 0x587}], 0x1}}], 0x1, 0x880) 17:58:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000000)) tkill(r2, 0x30) fcntl$setstatus(r1, 0x4, 0x42803) [ 1091.715739] binder: 4965:4969 unknown command 0 17:58:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008801) 17:58:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000080)={@rand_addr, @empty}, &(0x7f00000000c0)=0x8) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x12000) dup2(r0, r0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000040)=0x100) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000280)="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", 0x587}], 0x1}}], 0x1, 0x880) [ 1091.741403] binder: 4965:4969 ioctl c0306201 20000240 returned -22 17:58:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008900) 17:58:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x0, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046302}], 0x0, 0x0, 0x0}) 17:58:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000880)={r1, r2/1000+10000}, 0x10) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x2, @mcast1, 0x100000000004}, 0x1c) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x2, &(0x7f0000000140)=[{&(0x7f0000000080)="1cb16113341255c7d6717fa3d1376b6729fb5bbe24e88999ead5f24bcc58e5", 0x1f, 0x5}, {&(0x7f00000000c0)="b0ed4c910fab27ed952e80a802e280b2a2f6c1a1251c98caaa99ad50bc683cd565ed7d53b8149278fc47655093947304de68830e55801b6ec766e064f7e0a94ef808db7d7bdbb09e1e3897e53c428660905ed353959a5aa76884182f1ae15435e9d8030214", 0x65, 0x7f}], 0x755063727fd38b1d, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000280)="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", 0x587}], 0x1}}], 0x1, 0x880) [ 1092.024053] binder: BC_ACQUIRE_RESULT not supported [ 1092.048162] binder: 5171:5197 ioctl c0306201 20000240 returned -22 17:58:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008901) 17:58:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = accept$inet(r0, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x400, 0x27}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x565c}, 0x90) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x76}) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f00000000c0)={0x2, [0x0, 0x0]}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r5) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000080)='vboxnet0posix_acl_access[\x00', 0x1a) 17:58:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) getpeername$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046307}], 0x0, 0x0, 0x0}) 17:58:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:33 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = inotify_init() open(&(0x7f0000000100)='./file0/file0\x00', 0x4000, 0xfffffffffffffffa) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000280)="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", 0x587}], 0x1}}], 0x1, 0x880) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000180)={r0, 0x1}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000840)=""/169) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40080, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000140)={'bpq0\x00', 0xffff}) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000040)={0xa, 0x9, 0x4, 0x7}, 0xa) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000100)) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0xffffffff, 0x4) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x1) 17:58:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008a00) [ 1092.484227] device nr0 entered promiscuous mode 17:58:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008a01) 17:58:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046312}], 0x0, 0x0, 0x0}) 17:58:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x60240) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000140)={0x1, 0x3ff, {0x57, 0x3ff, 0x7, {0x9, 0xce}, {0x3, 0x2e3}, @period={0x5f, 0x6, 0x7, 0x100000001, 0x9b97, {0x9, 0xfffffffffffffff8, 0x0, 0x5}, 0x1, &(0x7f0000000100)=[0x39]}}, {0x57, 0x2000000000, 0x6, {0x100, 0xe3a}, {0x4aca, 0x40}, @ramp={0x75, 0xfffffffffffffffa, {0x8, 0x48, 0x7e00, 0x5}}}}) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000280)="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", 0x587}], 0x1}}], 0x1, 0x880) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffffffffff5a, 0x8000) ioctl$TIOCSTI(r2, 0x5412, 0x0) getpeername$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 1092.692620] binder: 5477:5487 unknown command 1074029330 [ 1092.699017] binder: 5477:5487 ioctl c0306201 20000240 returned -22 17:58:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfff, 0x2) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000200)={0x562f, 0xfffffffffffeffff, 0x1ff, 0x56, &(0x7f0000000840)=""/86, 0xb, &(0x7f00000000c0)=""/11, 0x85, &(0x7f0000000100)=""/133}) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000280)="eb2a294ad5758046f6b4d12e7b146a6e6113af7147e2517bbbfc19b17c07f21b4b8dd42392cc6de999760878f1b322e2b79520ebdf1569177f3f743138f145062e0952f07c42e661c0d76c069eac77aff27e2c34f3f09f2354b335cf17e505b2b0c7b1ca743f958b904181fff7fdc281b827c0155636b9acd5f84c8c6dcae447272ec9a5c9f364784254dc5ad9eb49d6bdf7c0499a4970f4ec6e3704064e06f1bdcb8ff0629b88607b3a1cdc471326bcb55b92d872ab21ddfc87efd461ee6dceba8f45c67dea4f0914583e0d5dc288ad6669c082095206fc10b223b03812610fa6a0a34c617af7d3945c7fe9fd7a509b186ad72c084a7179e66e779e0fa6710f4f4e9fc8d21d96ccf5cd175f38673bb1bfa8e5095f5d9a869f4a888cd8d5d10eb4dcf60f6c581639c2dd246f33fad8993afd0e5ce756042b749635946b19c256ec827663e7f673301f21da6d4410d527fc92f6e477493bff1e0d883e7e22cbf64ecbe41fcc57c9fc503ebf9e74a3b8b31ecf68efb2bb00f099abeab27c1abb93ae58313a9a096efea6c4fc2387348e92ce7912914979a14e9e0cec06d74f4cfa21443e4093f32961ead48f927c053811047159cc89fa7196168f6fbe200a79b74621cfa2231a1c6f9dc2b856a476d3d33bb39ff757de51fb2ca94f0ff5fdc51c7d5c80d039c1d77f04ff244fc8084a86079ea806d514ab73d23143e5bd8bd8d24105e85ca44202570bfbf894afac537be284d999a9179f216f89cca53db3e4100ebb757a0e73850a2e6f959da020b1aa49c1f42c6602b46c185d066b117560753b8bb4707618803899ecadff701d7fc090a7ee033f6b7adad9c8e8ea8b11fcc05226dccb5af89032b3ef3c0352e8902d0afe3d2c011dd385f869ef3ba666be0441f2f2fabc20a49a67a223dc659efc7328cf43104f0320ed3e1bf63414cd3abd9c206a8fd430da62250a138bb24ffe3f784d78313132177d1420a4a77881b8e8d9b53cce0c1e8601d8978e67bbe38c32df063725d8dcc7f267e94f252089bdfb01055968eabc569450090329fb3fd382133ea61a19a9b6c3ed3c032b9dcef90752968e0ba25d7527aeee0e8af9e4478d2dd4dd5b08c520fedefbcf59831d7b0d0b274b5683f820b37aad962a68c6614a79ce3d7fcd156f96bc5120cdaf0130584aec0e56a75ed648c9984604e6621179e013b7bdbbe89267a6108bbda6e12cce0e306fc121d6386fa7f1272151c7c3bb69382f3c28f47e2f7c3b7b14d823f64509000daa84175796621cd922357efff901504eda51c04c19309d368ff628f4e8f59f322b07c2343f0f18883b44e9f5374f9205e1d9102ff870ad4991ae7e454c0b5d6d4489fa2f67bbd3be184b3034d6b741a5ef890d0e1facc3490b8177763b8a1040d12f46da6db6630dd759af1b8c741497a3e18c0af4a03c0fdb784839f5c7527f390e430ba1977cce7f31d6e0fe79ac63170513f48cb61ead2e95739b8eaffd7601752434bdc1965174d057f1b7c1aa1ea234d5f34d5cc9bd8c272de2dfa6f99f7641a4947495e1a1e8d6f98837f6f2f3e36b53d1a87a0c7e048fbe34527ec9705bffbd3f9e629ea43a6af95d0e53e7ca18d8c1f7a8f8749664d535d7d177dfb23eb0aefead9f12d91c358acd4007fe2d73ac398470f36988eb9896f43b84b5c0c5f3d2f8e506dd9ca6ac75e8858fe4a27297819c0e08f802144d41aa475e2c5e5fda6942e2e8acb19b7a3fab504b48896e625c8027d1aa0f647f0a3476c8aa3c61102ea875c2d09fafa97dea9f0bce2090d54f341889ad9821a4946db8addfa36bd3bcee2fffb4c8c22a7687b2434084b06b26c11fc13c244600e9beb9b4b67a6f358b15cd234585691122a57a95e6234edd3c169ca710bc72fe8d52f2bc1a13085e8b69435660f2b8cbfbaff61e4d14b820f76882b1990d3fb7d001dbce84fd9541e17a7f97889778e8d74c62265c24782120bc1d9a32f82858e60668369e3e4e11f974", 0x587}], 0x1}}], 0x1, 0x880) 17:58:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008b00) 17:58:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40086303}], 0x0, 0x0, 0x0}) [ 1093.135058] device nr0 entered promiscuous mode 17:58:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x100000001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xfffffffffffffff8, 0x0, 0x6, 0xae, r2}, &(0x7f0000000140)=0x10) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:34 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in6}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000280)="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", 0x587}], 0x1}}], 0x1, 0x880) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000200)=0x63, 0x2) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) 17:58:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x4008630a}], 0x0, 0x0, 0x0}) 17:58:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008b01) 17:58:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000000c0)={0x0, 0x3}) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = msgget$private(0x0, 0x8) msgsnd(r3, &(0x7f0000000100)={0x3, "8119fd8a76556fd3302868a4003cf25d78b54f6f7fed118c0e2c7b486877b8ebda863b0c122628a5a874ca5b4d2e9c8fbd3036ea0fce9f0391ee3412471c027f118644c2092dea8e322cb27c342eaf932225d5cc245ec2b89bf3110663dfc0b2d3b1befac61008cacb56d2160e1c77fb45e65f3fadbe719fd1f717421158f0856934d8f08453a89d8802c22b3f0207138f9d1d53a222f61992476998877aa45bfe331d13ad4cd16220698d8f17c34e23dc8c9c14"}, 0xbc, 0x800) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x8, [], &(0x7f0000000000)=0x8}) tkill(r2, 0xb) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r2, r3) [ 1093.377922] binder: BC_ATTEMPT_ACQUIRE not supported 17:58:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x1, 0x5}) 17:58:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008c00) [ 1093.408215] binder: 5877:5888 ioctl c0306201 20000240 returned -22 [ 1093.437193] binder: BINDER_SET_CONTEXT_MGR already set [ 1093.447182] binder: 5877:5888 ioctl 40046207 0 returned -16 [ 1093.485868] device nr0 entered promiscuous mode 17:58:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40086310}], 0x0, 0x0, 0x0}) 17:58:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008c01) 17:58:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008d00) [ 1093.988456] device nr0 entered promiscuous mode 17:58:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x40000000000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) bind$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x7fffffff, {0x7, 0xb9, 0x4, 0x8, 0x3ff, 0x3}, 0x5}, 0xe) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x3f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$P9_RMKDIR(r4, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x16, 0x2, 0x6}}, 0x14) 17:58:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x400c630e}], 0x0, 0x0, 0x0}) 17:58:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x3697, 0x5, 0x18, &(0x7f0000ffe000/0x2000)=nil, 0x2a9b}) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008d01) 17:58:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0xfbb, 0x2) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/139) r2 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008e00) [ 1094.323264] device nr0 entered promiscuous mode 17:58:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000001c0)={{0xfffffffffffffff8, 0xffffffffffffff7f}, {0xee2c, 0x5}, 0x200, 0x0, 0x9}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) accept4$tipc(r3, &(0x7f00000000c0)=@name, &(0x7f0000000180)=0x10, 0x80000) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000000)=""/18, &(0x7f0000000080)=0x12) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) 17:58:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x400c630f}], 0x0, 0x0, 0x0}) 17:58:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008e01) 17:58:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40106308}], 0x0, 0x0, 0x0}) 17:58:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008f00) [ 1094.793409] device nr0 entered promiscuous mode [ 1095.023930] device nr0 entered promiscuous mode 17:58:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20008f01) 17:58:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) fgetxattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="cb272f2481262e910000000000000000000000003fa49e0245ae81c6e280bc622f32cb1853ca90a452eebb3a25910b734e20e3a4ef97f381abb14d7c43200a311789f78d90a5ad86cd36d045c6e9373b0e328a448f9c7fe60fb05abc13923ca76da0a51f5eeb043432e5e15bd5460523f475a753c4227aea152c67afb05c1862d343c4cbb1f0287b490b6d081378f93d6434f039cf4ef30d9107f1434e9c4beb647945d504339d01c4642e9d1ff8773b4d2b69ecec52984299bc5797"], &(0x7f0000000080)=""/43, 0x2b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40106309}], 0x0, 0x0, 0x0}) 17:58:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x3, 0x4c, "afb421c3567f2a32a3cbfe5680fa93131cbcc4ced4efa7fb65e03d35a0ad58c3e4823a49d7d84a9251163f89c5367a777184dc0b0ebaef2ece05fbb6d044264dc00c324b21e470fc8ac76a2c"}) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000000)=0xdba) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r3, r4) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @random="7f441322d5eb", 'lapb0\x00'}}) 17:58:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000180)={0x2, [0x0, 0x0]}) r2 = semget$private(0x0, 0x3, 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x6, 0x3c, 0x5, 0x3, 0xff]) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000001c0)=""/73) socket$kcm(0x2, 0xfffffffffffffffe, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80040, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf1\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r4 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x800, 0x220000) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000080)=0x5c1a9a5f, 0x4) 17:58:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1095.274460] device nr0 entered promiscuous mode 17:58:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009000) 17:58:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40406300}], 0x0, 0x0, 0x0}) 17:58:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009001) [ 1095.427593] binder_alloc: 6879: binder_alloc_buf, no vma 17:58:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40406301}], 0x0, 0x0, 0x0}) 17:58:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009100) 17:58:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009101) 17:58:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) fcntl$setstatus(r1, 0x4, 0x42803) [ 1095.688295] binder: BINDER_SET_CONTEXT_MGR already set [ 1095.707571] binder: 7010:7014 ioctl 40046207 0 returned -16 17:58:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffffffffffffffd, @bcast, @rose={'rose', 0x0}, 0x7, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x80000, &(0x7f0000000300)={'trans=unix,', {[{@access_client='access=client'}, {@privport='privport'}, {@access_uid={'access', 0x3d, r3}}, {@version_u='version=9p2000.u'}, {@access_any='access=any'}, {@cache_fscache='cache=fscache'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@obj_role={'obj_role'}}]}}) open_by_handle_at(r0, &(0x7f0000000000)={0x1b, 0x0, "e489cdbca15a2e294d2b3dd0d94f0573947705"}, 0x800) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x40, 0x204000) ioctl$CAPI_GET_ERRCODE(r5, 0x80024321, &(0x7f0000000240)) 17:58:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40486311}], 0x0, 0x0, 0x0}) 17:58:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000700)=0x400, 0x4) close(0xffffffffffffffff) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000001, 0x400) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000040)={0x2e, 0x6, 0x0, {0x2, 0x0, 0x5, 0x0, 'nr0\x01\x00'}}, 0x2e) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009200) [ 1095.930951] device nr0 entered promiscuous mode [ 1096.018463] binder_alloc: 7153: binder_alloc_buf, no vma 17:58:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009201) 17:58:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40486312}], 0x0, 0x0, 0x0}) 17:58:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009300) [ 1096.246259] binder: BINDER_SET_CONTEXT_MGR already set [ 1096.277922] binder: 7351:7353 ioctl 40046207 0 returned -16 17:58:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009301) 17:58:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 17:58:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0), 0x0) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") fgetxattr(r0, &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f0000000300)=""/164, 0xa4) r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) accept$ax25(r2, &(0x7f0000000080)={{0x3, @null}, [@null, @default, @rose, @default, @null, @default, @null]}, &(0x7f00000001c0)=0x48) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x8, 0x2, 0x6}) [ 1096.584058] device nr0 entered promiscuous mode 17:58:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009400) [ 1096.850577] device nr0 entered promiscuous mode 17:58:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') bind$ax25(r1, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 17:58:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x2, 0x402, 0x300f, 0x0, 0x1, 0x7, 0x2}}) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x30) fcntl$setstatus(r2, 0x4, 0x42803) 17:58:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x300}], 0x0, 0x0, 0x0}) 17:58:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000000)={0x7ff, 0x5, 0x101, 0x7852d337, 0x81, 0x22, 0x1d, "fb4ae1b67bfc8ba992013738cc9abb60987078c5", "e5d2f99bb2c426a86bdcac54101d2897da595921"}) write$P9_RREAD(r2, &(0x7f0000000080)={0x77, 0x75, 0x1, {0x6c, "3307be124f0699c49945de0c4396856b748a2a8f99a696645b0b8f1dc9a1cc177c4c14c5a1246e59e756893302ef9ba1f0d09f252d46854f773a90ace0d1a4ad2fa9f0f3562e88568c56f690272e2aa95938db8715eec150c673b63a16f12b9e272d9362928d97a7c722f13a"}}, 0x77) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009401) 17:58:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009500) 17:58:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x1000000}], 0x0, 0x0, 0x0}) [ 1097.250202] device nr0 entered promiscuous mode 17:58:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x10) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000080)=0x9253) r2 = inotify_init() sendmsg$nl_generic(r1, &(0x7f0000001a40)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x30002}, 0xc, &(0x7f0000001a00)={&(0x7f0000001580)={0x44c, 0x60bb, 0x10, 0x70bd2c, 0x25dfdbfe, {0x15}, [@generic="bb1b042dac5358d0f8f50f33eb2a85a330f0fc9d7e384fba3c6c37caa9a9181b0f55147cebac2ea7ce8a0f61537b0ca9f7201187b0a26c6b23151b24e2af2563e83ee52dc84364496692ea41bb484900b5bb48c01f6c838da4c5837e23cb438ba5456c5b635af2c4e7e8e149ea5e81ab697fe2b31cb8aaaf17e1b35173f6131bc4042ddff0bc49ae79dfb767ffd183ebe22a632a3d50dc03a05e1ae7960e74653b964755eee1691bd59f77c337990fdd7a02195409b83999e36da0757dad7afb8142d342a2ca99c8ad950eea84df4b1fddaf4ebe98aaa163", @generic="ee14b5ff36656276222e1d9d3a37ec35989def856b3cfb3e1f64a445a01acb6e4a9d2cec76a3d52753443b0a7361736b547893323df432fedbd39b782293878b36f33474a3612b6ed92860b75f9336f8f78673a7b4094af19c98659c4236284891c12e2dd90e7c9f163f1120ada131bd34630878ee155a1d628d726a2b6ec9c55380f531ffc30cdca8dc7ef2178592de0d62460fc39c5453a3a6d9aab2d9f7158c748f554bfa25de17bfc6c6e4762f0baf3d1d8f9557aab3244ed6f5a2f6d91d808044fc9f2da662ea7efbcae61726a033dfc8d46427bd04fd2ba6ab9af17bed22351060f9", @nested={0xe0, 0x7b, [@typed={0x8, 0x7, @u32=0x3}, @generic="9d03e163af1ce0f92ef1b15fae73eb2bcb09040d760ac2d0e9ee7756b12f17658850448328e63afc15158ec6418d9773c51e47f1802dcd3b003f55fa6078e7246b43f619940a22889953b8542bc77dd197f4ee60003952f4af7c7217c7d149d2344837d2418832941ff3847ae2cd258a01a934f2b9beeadeaa419f5fb56573712795d869de1942e1330a1a87cab6e54362217dfdb07e069861efc0a95be02c392e83bd5c87b77b611f18b1d13e4fd480793ce859680780394c6c0bad8eb92b31e9fa9154ee5f628077d33dd87b67b21f5c34"]}, @nested={0x110, 0x52, [@generic="5601896eac9ba4c3ff225479aa931868581d6a9383d3c5d880b6bbc978014daf29dcfe3d08e15537cac77fb283e6e96a359cab4c7cba496381a0ccdb5854dc9dfe4feecb2a23eba3857e270b8035cc449399333a28c708bac1f61877182fe3d0f9c7315733bfbc6f2ea7c8bc4312989c2b11b0d20052e19e7355416649a176edd5", @generic="99d9dc74b538885a12f39545e56e8409207ecf70300d9dd11a32a3de8712c5a5cd187f8fe5aa60817f69f2a4f070e7d39b012de1724c7fd66509f55b662e08d6e9acb3f1e5f2a9fa8d5d99d2bc988ccd647bb5e3fb5e2f6b69094d69a4eb17b7a1857a1b97355a47c80b21ed9fdad9d21ab7c6b8f7d75196d2f19f65eed1de8d26", @typed={0x8, 0x6, @ipv4=@broadcast}]}, @typed={0xc, 0x6b, @u64=0xf08}, @typed={0x8, 0x46, @ipv4=@rand_addr=0x1f}, @generic="6d139092545a5dd75c370a38412b3ea2259a3bc9a77e3ffa82ba3e5a99c93506f1ca57cb6c59e34ec98433f7ea3e3324b616e93dcb22ef3711ab9f141e1fed5f5bf69371d31b2681c6be8bea9afdafb3b36401fe7e6c833317a950e9d90134e986a750e637862276d168a5c55d4af7d44ea4a7b6"]}, 0x44c}, 0x1, 0x0, 0x0, 0x4040014}, 0x800) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ac0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001bc0)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000002cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002c80)={&(0x7f0000001c00)={0x1080, 0x3d, 0x100, 0x70bd2d, 0x1, {0xa}, [@typed={0xc, 0x43, @u64}, @nested={0x1058, 0x8, [@typed={0x8, 0x71, @ipv4}, @generic="33ff0b23aab2a1675cb9c96993ff7139779ccc5d135f826b2efea29f3c8693c27b0d2de40167bba1226ec19ce5d238a7d8", @typed={0x14, 0x41, @str='veth1_to_hsr\x00'}, @typed={0x1004, 0x13, @binary="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"}]}, @typed={0x8, 0x3, @uid=r4}]}, 0x1080}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r5) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0x91, "0fecf62a13eb1ccb565fe395e307fd094b5fa2381aba0580702020975899c7b9039c90855be3ec95d9904b6bce9694521b3568c33be577bd570e1d4bb70acd35d97b242d4c863522df45cb334908c26bdcb018aadd478bd7d8a7ca0d2ff8cb548c343728a2894ad68d3b69d448fb559e9c4e157e52957b4339204e2d4b5bc2eb4dc476c6f9351b09234c76e21925d80fe9"}, &(0x7f00000000c0)=0x99) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000001440)={'veth1_to_hsr\x00', 0x8, 0x3}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={r6, 0xbdc}, 0x8) writev(r3, &(0x7f0000001400)=[{&(0x7f0000000300)="97f3cbb459995c5cea1e962fd147828b91ea53f2db037e36ea09c3d2a6f222b064c097428d4782d4fd6dbf9d221bdb55bacbec7d0e3092a26ab9f5afcfb61963e0b293c7", 0x44}, {&(0x7f0000000380)="508d2b622fe39c48b42328b7a4a62f5f69ea47eb02fff097fd66792a355b55ac2bd2f4c867ad168ffbdd03e53dd243406fc20f27f45944e3cb3aae58333c900ba24452cca5d8f240d6948c6a25c0c7e698def923ef53f72e0279326f", 0x5c}, {&(0x7f0000000400)="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", 0x1000}], 0x3) 17:58:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009501) 17:58:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x3000000}], 0x0, 0x0, 0x0}) [ 1097.796492] device nr0 entered promiscuous mode 17:58:38 executing program 5: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) signalfd(r0, &(0x7f00000000c0)={0x4}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000040)="66f4ff33829f0b5f97e8f6429d94210ca8c80235fb34c462cb0c3cf57f627105548c5b132a5270137b44057a206102e5af0be9", &(0x7f0000000140)=""/139}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x1000000000000, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000200)={0x8001, 0x0, 0x66e8, 0x2af, 0xdfa, 0x0, 0x5, "4b5609d6160b604bba504407b042d2893073c996", "16e92506c6c7d1ac8bb15c3a734bfa61eb59da90"}) 17:58:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009600) 17:58:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) fcntl$setstatus(r0, 0x4, 0x423fd) 17:58:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0xfdfdffff}], 0x0, 0x0, 0x0}) 17:58:38 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000300)={{0x3, @name="ccc7c5f4607a994f2dfc38a70f1d906930e2327865f792b23d0abb8f0b8fc25e"}, "2d02e5b6adf72e73bab74b398e03eea1cae5d4de1c2b7581dabd2a9b75361a6e", 0x2}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = inotify_init() syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x4, 0x9d534ac128cd5f5a) r2 = open(&(0x7f00009e1000)='./file0\x00', 0xcca946a1d9ba7860, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x12) ioctl$void(r1, 0xc0045878) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1098.045466] device nr0 entered promiscuous mode 17:58:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009601) 17:58:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x39, r2}) r3 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8042, 0x0) inotify_add_watch(r3, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) 17:58:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0xfffffdfd}], 0x0, 0x0, 0x0}) 17:58:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009700) 17:58:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009701) 17:58:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x100000000000000}], 0x0, 0x0, 0x0}) [ 1098.534641] binder: BINDER_SET_CONTEXT_MGR already set [ 1098.553851] binder: 8431:8432 ioctl 40046207 0 returned -16 17:58:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x28000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009800) 17:58:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x100004206, r2, 0x800000000020, 0xfffffffffffffffc) tkill(r2, 0x30) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x80000001, 0x4, 0x2, 0x7, 0x4, 0xd9, 0x0, 0x6, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r3, 0x6}, &(0x7f0000000100)=0x8) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x300000000000000}], 0x0, 0x0, 0x0}) 17:58:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x110) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x820c, 0xffffffffffffffff, 0x81, r3}, &(0x7f0000000180)=0x10) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000000)={'veth0_to_team\x00', 0xc2e}) 17:58:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009801) [ 1098.874032] device nr0 entered promiscuous mode 17:58:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0xfdfdffff00000000}], 0x0, 0x0, 0x0}) 17:58:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009900) 17:58:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x3, 0x0, 0x0}) 17:58:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009901) [ 1099.218169] binder: 8874:8875 ioctl c0306201 20000240 returned -14 17:58:40 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009a00) [ 1099.463690] device nr0 entered promiscuous mode [ 1099.654333] device nr0 entered promiscuous mode 17:58:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) getpid() r1 = fcntl$getown(r0, 0x9) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x2) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x61, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000040)={&(0x7f0000000140)=""/194, 0xc2}) 17:58:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000011, &(0x7f0000000640)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x1, 0x3, 0x6, 0x1, 0x200, 0x93, 0x6, 0x7, 0x6, 0xfffffffffffffffd}, 0xb) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@empty, @loopback, @dev}, &(0x7f00000000c0)=0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x30) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x300, 0x0, 0x0}) 17:58:40 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009a01) 17:58:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000080)=0x101, &(0x7f00000000c0)=0x4) open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000140)=""/121) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) fsync(r0) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ioctl$void(r1, 0x5451) setsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000200)="bcb92b80a83c37cf82eff4f6308da9ba798bbbc3dcb31e497a4dee5522a09440eff501b446fca362b21b94c1ca1b5154e7518aed59c9d82a92637ee5394be7acfde7d732ce82c9ef120d6875520dd8fc82c3ebf1dec1b778d37b610c9ee1353515c45fa976e8c4e2a907b23feddb48779ec6eb0a508b903abae2f264a4222030ad8cae192500fc306b9d95dac47fc52be6bbbc10b19e95e3b86d9bad2b4fd9280ebaceaa738ec166b602a0892b38fa34b5730450710449a64278f7235bcbf7868f157f7b9d7fda17a6d58f", 0xcb) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) sysfs$1(0x1, &(0x7f00000001c0)='\x00') ppoll(&(0x7f0000000000)=[{r0, 0x200}, {r1, 0x80}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={0x3}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) syz_init_net_socket$ax25(0x3, 0xceb4aac33e2e0562, 0x6) fcntl$setstatus(r0, 0x4, 0x42803) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)=0x7) 17:58:40 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009b00) [ 1099.875148] binder: 8987:8993 ioctl c0306201 20000240 returned -14 [ 1099.910815] device nr0 entered promiscuous mode 17:58:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) name_to_handle_at(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x12, 0xffff, "f169517ff69e80d9c7a0"}, &(0x7f0000000280), 0x1400) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x3) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r2) 17:58:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x1000000, 0x0, 0x0}) 17:58:40 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009b01) [ 1100.183390] binder: 9170:9179 ioctl c0306201 20000240 returned -14 17:58:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009c00) [ 1100.445103] device nr0 entered promiscuous mode [ 1100.686708] device nr0 entered promiscuous mode 17:58:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xda}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000080)={r3, 0x7}, 0x8) 17:58:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x3000000, 0x0, 0x0}) 17:58:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009c01) 17:58:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x4000, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='lo\x00') ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = inotify_init() r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x1) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x4, r5, 0x3b, 0xffffffffffffff9c}, 0x10) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r6) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000000)={0x0, {0x100, 0xe2a6, 0x4}}) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000200)={0x18, 0x1, 0x0, {0x1ff}}, 0x18) 17:58:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x8020000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4048000) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3e) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009d00) [ 1100.906930] binder: 9329:9339 ioctl c0306201 20000240 returned -14 [ 1100.922793] device nr0 entered promiscuous mode 17:58:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r2) 17:58:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0xfdfdffff, 0x0, 0x0}) 17:58:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009d01) [ 1101.186201] binder: 9571:9573 ioctl c0306201 20000240 returned -14 17:58:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009e00) 17:58:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0xfffffdfd, 0x0, 0x0}) [ 1101.425222] binder: 9688:9690 ioctl c0306201 20000240 returned -14 [ 1101.525735] device nr0 entered promiscuous mode [ 1101.736803] device nr0 entered promiscuous mode 17:58:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009e01) 17:58:42 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x10000, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4c000, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000080)) shutdown(r1, 0x0) r3 = dup2(r1, r1) msgget(0x2, 0x47a) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$cont(0x9, r4, 0x1, 0x3) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x30) fcntl$setstatus(r3, 0x4, 0x42803) unlinkat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000140)=0x1) 17:58:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x100000000000000, 0x0, 0x0}) 17:58:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x100, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000180)={0x3, 0x2, 0x4, 0x8, 0x0, 0x4}) r2 = inotify_init() r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000300)) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000000)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000080)={0x3, 0x7ff, 0x81}) 17:58:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/18) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1101.962109] binder: 9801:9810 ioctl c0306201 20000240 returned -14 17:58:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009f00) 17:58:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x404040, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) r2 = inotify_init() open(&(0x7f00000000c0)='./file0\x00', 0x8044, 0x800) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) [ 1102.077826] device nr0 entered promiscuous mode 17:58:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x300000000000000, 0x0, 0x0}) 17:58:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20009f01) [ 1102.226103] binder: 10003:10007 ioctl c0306201 20000240 returned -14 17:58:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) write$P9_RLINK(r2, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000000c0)) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x1000, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x454}}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'system'}}, {@measure='measure'}]}}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x100, 0x0) 17:58:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a000) 17:58:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @aes128, 0x1, "36e040a9e9e9ea08"}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0x80, 0x2, 0x1daa}}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket(0x200000000010, 0x2, 0x10) write(r2, &(0x7f0000000000)="1f0000001000ffd00e00000000000000030501000b000100040423ca0000cf", 0x1f) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r1}) r3 = gettid() gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x30) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0xfdfdffff00000000, 0x0, 0x0}) 17:58:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a001) 17:58:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) fallocate(r0, 0x40, 0x400, 0x7fffffff) r1 = geteuid() quotactl(0xf2, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)="2a09ce39ff99811a840473849429f14b1c7b97093d99ee5fab16777b5715f86eefe332265d32b5864ceb40d6b37995a2512bbc8cdef9e7abf998deb7985dd6bf9abee74b71f08b8dfda1999c3c8ac2ace9f794e93bed6a767fd20b3c51b11716bd8b150a2204b2dcf0469024cd3325ce9b0a20cdfc3c2765828ed0fc5136462fbe9edcdce5381b6b4d6d73baf9fa3082a6c19e6aa47b637178fc0b2efe07225ccb335ba1f6cf7351a87c37fb") r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000340), &(0x7f00000002c0)=0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1102.659263] binder: 10179:10183 ioctl c0306201 20000240 returned -14 17:58:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r2) 17:58:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a100) 17:58:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x3, 0x0}) 17:58:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1102.872130] device nr0 entered promiscuous mode 17:58:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a101) 17:58:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000080)) r2 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a200) 17:58:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0xfffffffffffffe2d) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x300, 0x0}) 17:58:44 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a201) [ 1103.335093] binder: BINDER_SET_CONTEXT_MGR already set [ 1103.352374] binder: 10524:10525 ioctl 40046207 0 returned -16 [ 1103.397661] device nr0 entered promiscuous mode 17:58:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000340)={{0x3, @addr=0x2}, "e9196d32a55b84379129210921a8963cd9ec1041ee57ad88b514828f1cc00368", 0x3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$TIOCCONS(r4, 0x541d) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:44 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a300) 17:58:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x1000000, 0x0}) 17:58:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x2, 0x2, 0x1}, 0x4, 0x1, 0x0, 0x0, "ea4aa697b8729646"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r3 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x30) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="000000000000000000000036e61ce0b672d3ae143271389225f55cc588248c1dcdc6985c387d2572a0eb480812fa5a36f34c1455ef0399b7751b1001432d0e2af15c18c37f4e2d2a6249") r1 = inotify_init() r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x4000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000400)) open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0x140) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00fb31010752dd25204590a618206189e2d94d3370acaae3ebae0f08fb7f3bb834f71b62abfb462d4c209df80000000000"], 0x31, 0x3) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:44 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a301) [ 1103.844131] device nr0 entered promiscuous mode 17:58:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$sock(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="4ab1edcd6bdccf6de79fd1dc59b17ddfa2cbd381635ad04b33f7bfefa0a4ea0bbe54bde26ca200f5963229ac3606d02cedda3965a52ee5e37c0a3a204faabe90460eee62dc0851dfc998d2f5be66e730e502274b862f35d47fcca00e3a026a047533da60e0cfda248712144a113860ec7f389affde20db1872577c14cefc8642b922998ecdd5c0bdb1a15293a388742dce18852489901d5dc8e64890620157dc5d37616f7780fbc07e506d8dcdada4b6ecb77abb5131089df107814aa08e810e745ec1decadddc71c9beb905820b9df3a7fef09c9805995fe787c5e7468c731ff9c2ecbbdddd4894", 0xe8}, {&(0x7f0000000400)="cab21d06eb33dfe7ea67bec515f70ed11daa1843cf166f3f601678cbed7df3a59178639f4030d5731fd6a7481891324a4cc163cde03861d23481642f3fce56bf768759008235b2c036e07acd3ff3c1bf8b9018b1b237e539d12d787303309a8ce09cda609ac9cc6babb8f23e37fbaa4e45c86c7b1aa21d944c40e215bdf90bea6ed5d25ea2829ba57b4b29d8ec1fe24808a6268d50f019f00f1bef221e4680816d71e6bf0591e74dfcd859c4f087a5d3fd2729e79ecc17db43a0d99b67b2ac406cf99a6ec5a2bea7de8629d21c1705b2b2c8fe3f984651f5a5fa79c047b1309e8f940e", 0xe3}, {&(0x7f0000000500)="8c9f72d91dbb01920e4e5f1ea26c27d680ee25e61822877935ba3694f1705ecd08cbe73b18967d8b93d18fc5f84b530bd0d8817a1ba0b5d00511726aa01199a355f964087843464c3fc4116e202a4a02062009a37e2c2ca606f1a4b82b49fc1527a9f0d8e6bf82c7e14729039741893eace8a9a75f5e14ae1c2f206984f96ac7900ea00b52f7d0eacf2592a0a9c3aa4bb79ad788885f25d7cd87a8f7464c1de6759ff8a6112e49b5b8fa8a12bfde1df73f7e111e4c1e6f1e488e7f0f77527b2b297e963d00d29f2980a1d1172f760614", 0xd0}, {&(0x7f0000000000)="0429398e885a9a92630f5acca1f3636272d6ae1a3353ba7a6e639ee4f87c1e87ae614e592e2b50c4eb", 0x29}, {&(0x7f0000000080)="d1e051d3c5d592339e2e446c8b1a508fe8691a6c4899da6ca2e4a1f1e792cf3a3f5ca577b60476ea6dc1c51d37eccdce952f78426837d914cdf9219e3c69af370a858b2ab282b891bd5150b101ebaf85f86533c442e5ea0c040545461d0b13d148f3a3b80e3ddd14b36cee38312b4a43bf01e286ce217a37f0aaabf9470a82746925964f676d7556228039da39ac540fd907f12519d64075c38f619df53feaf47fbfd6707fd1a0f1572119490bc526857fb8aa215dd650fd9f752f81e41242", 0xbf}, {&(0x7f0000000180)="765f8cec8b1130ddd41f97c02a8a6164fbac0eb103023ab5613dac78c93fd2802b021b43613539d69f63ffde2afcea3640a4458893a8261ec18f4dcd06207f9ef86ab0864d6d3c7734f7ea7979dbd8c2ef6cc2e8f3d8b3209bb6524b1fe1763666f3c50c8a621276e1c91ace319b521b9f4550526c2896ae2ebeb7a6b26f8c3c0dff6b3a53f01a80abe99d7b02f689ff2b86a372ca6ac25be1e4c0d7b27f1198d80ce1fde67c1b526563e88933e95236198ad130c456496e", 0xb8}, {&(0x7f0000000600)="a28a184b8ae91e9f649e06cac23a71f2935d8d4542a6106a0822455b33f2a37b4a46f865d36cfa9e5c", 0x29}, {&(0x7f0000000640)="87a1cfbe2089edfaa0c87aefabfd47f749c6d17455c23cac28a983071c5817dfe79f3219259b80bfb8621dbeea003a2e5ffe3ea4902bf11a700406fe0681edd25f4701e76f2215f76d57b38b7b683802c17e96a94cfc10718a2ee6b574d1496020a8d34f2cebfe60feb016b7cff56cb6caf6436e3cf4a40557582d6c95871c5855f1b3e5c8513361c05f6a1cff9b12bcad0945d8759bd28fb57e121bff6da07b51299c22568aaaecabc4bc60b994811c6b44971387", 0xb5}], 0x8, &(0x7f0000000780)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xaf}}, @timestamping={{0x14, 0x1, 0x25, 0x59}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x44b28f95}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}], 0xc0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)="6176dba2ca6813d16c5993239adf97ace5f48f2acf3f5e9898aedf88692192facdbedbd1f1d2e09e59d7b7ccc0b0b3e682f8fdbf99813e8fae77a4825449c28be0e63c9c9a04a55508ca8a334022ba683a37eaf89f05f80b951ddd3f7b457d34fd3d40d263a2d4cdded6842c6cc05a1b0a8a5bd0d27bc91bac8bbd057271be8fa28de6913fbbb7d65d3c0243e125498ae98d0398c65509010367df7098c1d2b9939d2baf0824b38cc37bad7e34d5e95b10082402718608cf5ac39aafa793be3ce0766929770a49e4167542ad27d0f850622e108c631396c64796d94e0d598934bd1ab81ef2ddd14f1fca2d", 0xeb}, {&(0x7f0000000940)="0043855f1c2853168fe53dfe21fb70b1e146ce43802166fc5c55c2388ca86994ecabd5fef2de9854683e570fcc5d8d5c3b7890a5cc41aae1d736a57aacc6058474f85eb6480fbb4308f9282a077c22091f5669ab9a88d7e40c28ad4edb43891e0cfcfdd3799a2adf464c6673d2ad799c56ad0cb58131f105d96505347a", 0x7d}], 0x2, &(0x7f0000000a00)=[@timestamping={{0x14}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000a40)="cd828173640921ed7ee01d0d7ea3729eb4a8151d51585ec2bcb28212ff7419f41c27037d0f8548c88d1d2f8ae1c50e08026d605e6b2119bb7b0d4ec500910b3f4ef616b7369668f2", 0x48}, {&(0x7f0000000ac0)="13e21137b60f376cf908b4661030a25428d808f9fbcd44381add9aef93d06b04", 0x20}, {&(0x7f0000000b00)="eff3b32c606b66af7ae8a2e30a52549d31ba3ccac943da2a09885ed4b7fae3cb0df858fd8e9beb030ae2f09a0acc53a8211123f2202a85ff3142e8862cb26f2f3c2fb24572c5266302e58fb632dd940edc564c36174f6640b845546e0c82013bb6c8b77223af3b18ab30d8", 0x6b}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="b56bb849a104ecc92452147e732b906725d4cb2abea309b5d70ab0ad2e0d15e44ee20c3c6c635921feeab6bd606ce685c186844f13f6fb6883794e9cae885f13dc4e2ec6e8d5d32a2c6cd834c6fc78ed1ccc8006236408c1529416d3ce7383dbf62e", 0x62}, {&(0x7f0000001c00)="7fcd297e2ad95e8edc0c495809c7be540284d518cd52fbc03425581720b0ea51ee81793da93da0b263ace11fe9984b24b35f061833aced27c7d40b99bf6f2abf27c8a650d9814c3ccdf77d8b1c917c6238bf8b9e5ce032c82805ce22351b4a663d", 0x61}, {&(0x7f0000001c80)="c618a20ab42ec8dfed730ac7cc3484496f43c1ffa665c911675209aee8dfc0df3f1c1633db8827752aeb", 0x2a}, {&(0x7f0000001cc0)="b49f0bc752bf4e5ab4347e57eb7b12f602c756b1bf4991bd62b69c2f1f2ed5eae9e82f1a6abd015e494db64e73972e4fc762214fbffa530f8c90f8100f919e9405996804e1b318e66b4e33f24553711d8336524a0ef17694883ee5250bde4c289999142837d0d2c1b8bb1c2647815991fc87385f2a34ff8eb383", 0x7a}], 0x8, &(0x7f0000001dc0)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x26}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x78}}, {{&(0x7f0000001e40)=@sco={0x1f, {0x4, 0x8, 0x7, 0x80000001, 0x200, 0x1}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001ec0)="0402c57d684231c5266a1bcf4f20cca6fe9c0acb09fe1818b873b8ea0d8b2ff0c878e7daa0a8a53ff832931c59c1bf3df870831d2800d24035bc070a5e75c338b0d8e3a2dd2966ac04d2dbc080f7aae0f93a6ce756e2ccbd24527240e1e3f64e8dce6ce914d3", 0x66}, {&(0x7f0000001f40)="a3bd6a6f73356f32d15435597327773904149b75ca58408e48f124ac1dbdeac0ec21426c147590921b2b5ac9cf11585ede0ad429680da0f25ec149a7f75278f63daa9e6eade239f2beeb29a7aafb6228dd90e75005246247d392e80d5842157202658d5fcc15c5a0eeb60e79d05bca121e0b372e6c48d052b54fb56643a1375dc0b8f7332643406034fd611428e702bccbface709e69fa88d0eef22b2eee854bbad8854d3b9c1a8f822c9fdcf61e3e0f7e74e28ea423507b176a5cc6c9333d70d09468d45f79b16a0522257a520b", 0xce}], 0x2, &(0x7f0000002080)=[@mark={{0x14, 0x1, 0x24, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x213}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x60}}, {{&(0x7f0000002100)=@l2={0x1f, 0x1, {0x0, 0x2, 0x400, 0x6, 0x1, 0x3}, 0x100, 0x4}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002180)="591a8c414a6b66a524b237006e880e3ae0f8461136160dfb378e2a309ee27e1a182ac68cdd35f6503b5f1067480f819339b5b52f926dc9cc4398cb2121d855e6a80945b0df2c047e7f55ecc4682351e36168cea56a12751efe611a5e08f297c192b7c7194611518ba08acb06a4005ea7ddd7297542e5c4d57f4fdcd9755c3432e6e99fbed8f1414fc9306581c13019262bbca109ccdd3836b8ba8de6e73e9c8ec0837cc3c25dcd34638e5526e3e1ff769e1316a7383cd1d641958141f3e6850f0421ba806e8297305845f2791f6903ab0ebf8c5163a556948085a18da47e1aa721df1dc845603e8d09882e0775629f4b3136c345443195", 0xf7}, {&(0x7f0000002280)="e9465992352d315f809b7dc9eaf1347438da77996999c99a50484955cadc685c6210e4106538a18cfd18ecf69704a61787649c853960e7d5", 0x38}, {&(0x7f00000022c0)="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", 0xfe}, {&(0x7f00000023c0)="33793410831efbe99f576ab96195a08ca95ef913fca57359be43db364430ea1d72137d6da647dd0e4e8ce39a628eb52c21c5810ec052bcc5c8b068e75c5fd1d4a8b618bebe9318087dd4929976f2da196b7619a9a8c5394981", 0x59}, {&(0x7f0000002440)="8560d4e9ad970a83d963731a86ace872faf2a9533fc19d60f0e05d658d9eda37e699b6e5773b6766dd646e35b84a23b1a4dbad20852cc4473a850bd3402419414ab3bb2305ee46f65c6c117487e19797c5b677bc8cbb65ffd48ff28139c0ed3b9dd725621fab4cbf81fd6356d21b944222b1f90a5b51700680e7267048c77d9416dfd0ab83478913ae96d5ee8e10a8f303ef1a4fd989ac58ccd7b38153b278eec349c51a55096e1c81e0e2ddf1215f4d", 0xb0}], 0x5}}, {{&(0x7f0000002580)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @remote}, 0x2, 0x3, 0x3, 0x2}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002600)="abe380098a22e41ea56322fd693d65ff495568d84ecea0235b19516865a9e1b17510f1f3b20107877cf85d9d4f3c8d09715db126af4ad5204fbaa6e494cd2bbcbf6e4b2216818194a76d2ed52eea04f2ad46346e0bca5b9c67c72a9d8b343956c7f6e8da1e6c41700373b3293b7be7a869940e95bda78890210b1553b52baa141576b90300e7dc39e83a30f3a2001cdf0d3162676b2aa83b1ff31bc3bca62adef1ab8544d8855111f6806db2609cee6b751040a29dca80c9edebd09b851786797e2c0c8472dc7b1b34ea48b3ed468435ed32b8ad87a483403c243deeb8804fe90524dd", 0xe3}, {&(0x7f0000002700)="06a888cbaa04b33f35c2d853cc2a38d139d1c2d44430bf7323f48a6b2b3b75fa3fffc6c785ff098a0d54a86c6c69837e5e48e1ef63a22c69f4f306a289e10d5e51bf1e44b8a9d31e0a765102ba50ecc6feacfbd6b6a0798680bef38ed0c5a31df11cfd5d0832c82e2fb972ec8f10a42442d3516c35de3d154663c381eeea87ca89efb57045ff2f24ab2c31e1625ef4c71507aa4df59433", 0x97}, {&(0x7f00000027c0)="7c5342a69f4080eb043b91c23c28259dbe68b57ba060d8bc964ec7cfced9e6b595f2a89eced1070ca955ab66e76e4a058b1230b1091fc0d71ccac192cca1e6a12699152ee99326", 0x47}], 0x3}}, {{&(0x7f0000002880)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @mcast2, 0xffffffff}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002900)="93f75883fba300e20f802e989f17eecef91471824856159284d713b44c7fd0a6b16254d9b277120ed944b4e8cdc717b3481b3878f74d5619c3c176d89f003e2abfe184027a31f1e24b8ac6e36f764a40b9798937011db03d86a71fe7cf2054e3a35ca643d55843b9c79d784d59650ffd44052159fc12da9cf2f519338943e836746a9f1ba2148fb92b5a3db827eee40806d9aaa811d5213d23d41460fc4f92ff07eb44d0", 0xa4}, {&(0x7f00000029c0)="a52e79f2f07560cfa5aa1f258f68e4e50b098bcbfc22f5802ac423f6b9d2cb94fbca61b4682a6e6fd3d4f2369a20c412fc73ed4f1e4a90c44ad0f3fc0db34a5036352ed2d6712447f7f0b528dddd31f2b2aa3eb9b0c6aa99443fa9c50abd08f28dbdb6bc8ea2814674bf56b3feadd995ac", 0x71}, {&(0x7f0000002a40)="b4eab10e6f3cac740e70b3cc25d22674dd34156dbb764ce76c5f2cf53f1b5db69063e9fc01fcfc087ffc2d3a89d270481a5ce03c6368ae9a0552633615bf72235dea17ff15ebbe2dc86cc4f60309b1dff120a1e22927d41b", 0x58}], 0x3, &(0x7f0000002b00)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x100000001}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}}, {{&(0x7f0000002b80)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002c00)="0d679b0ae60c29c0b0acc9b3882723f873c1da5ea84a68b6a864ca5180e70076f31d0fe1925e2daedde854be2256d29b1a30f03ff646ed60a3610b00358f15eab5e8", 0x42}], 0x1, &(0x7f0000002cc0)}}, {{&(0x7f0000002d00)=@generic={0x15, "1633523a11406427e70efac7a479dbce13565d288389b2f150027aef5b6825df1a898341e70c0e779ff1739ee4365b858e96ae2b9b1f263e2149b364a7dd195c7775c1cdd830cf7816f411da653b0110080420f0cf2f287f044a9c1c2ff8e34728416ef8b124059d3164588889da36698f41dd84d05ac03195a853464596"}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d80)="e6f82a5c40751f82567ada1d652c71f147938b7cadce9179d8bcf299ece03aa40d75f2bcbc06f9bd6a7d087f341899d0fce4b91f1a113a017865bd09f1d7125426c6a349e7aee663c5aeca175a90fab38ceec55deb3a23943aaf9eee407774f190a232d036e46699bf49c7b54db933272dba57ffbf03208fefba6f276e0f6dd6212ab9c37c3330678a19c87232de65c55241fc8435e9dc80a0f51d6bcc44742602d3a3af425a35e886f9e73322010f09ad060b03c8496b856e6845eac4affd0682008e56c05fe65bb0d8942c37a708390c9dcc2cdd2b614548", 0xd9}, {&(0x7f0000002e80)="d7822d4b18e18457055d353d4fc7", 0xe}], 0x2, &(0x7f0000002f00)=[@mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x48}}, {{&(0x7f0000002f80)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x2}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003000)="4ffa9941deacbee073e90dfa86b8f31aa92a50ca36a60971fb3bb83433463ced519a90f8d633659254246c74701738d8e066dcee116a1185d0125472dd67ce5faa097b32dddcb4c2e177510306421fb2b061cdd1a1c814e6417b9d3421e0c8a5404ddf8b58ffc7d1ee08cf9a3bc231c8d6c378f57affe2da668c30bb588a828c8a4d9186b02e08ea614f876ac48016e93b7aadd6d254b1b08b04007c8cba211417", 0xa1}, {&(0x7f00000030c0)="55f70da96c0ec87ffa9a581e2d69b6c821e69bd4b0b107acdd4f0eaa76436bfa424a4c02f313eb2528e9c1ec63212edf56cea29476a808d82598b7ec4ccc1d9114c2c046d28900cdd73a1ba0c5255bba3c23716a64300893d4e4ddc7f66617b7415c78f11db55fc20351e32ab158feba32addbe7607833a917b6b1d761d16cbfc2e8cb0f0e2ca011bcbd207357e0db6e7ca68d25c4e9ccbfbbb6ad26e3a3dcb5d50a946ec64632d6c95742ecc4d67a6c797167316faf09cadbc235b99f919c72de16bbd0a248745a9e9ee847d958e7af883cb9e6ecff42d113a1803ab9aed5cd1c40a22cc21473938106559ae71b4744139ef366d59b72", 0xf7}], 0x2, &(0x7f0000003200)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}], 0x30}}], 0xa, 0x8000) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) [ 1103.891198] device nr0 entered promiscuous mode 17:58:44 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a400) 17:58:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x3000000, 0x0}) 17:58:44 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a401) 17:58:44 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a500) [ 1104.665810] device nr0 entered promiscuous mode 17:58:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[]) r1 = open(&(0x7f0000000040)='./file0\x00', 0x48002, 0x40) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0x5) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x9, 0x30}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0xfdfdffff, 0x0}) 17:58:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) fcntl$dupfd(r0, 0x0, r1) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a501) 17:58:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={r1, 0x0, 0x7fff, 0x100000000, 0x95f1}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x47, "d138ddf06bc51e072cb8a79654e2297152d6d0ddf15e1f7feb0f4edb273f1bcdc30e1bf4863c408006657423613c3db1c72bc3166343ad790aff9e6e50c3df28a4cf4817a50b13"}, &(0x7f0000000000)=0x4f) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={r4, 0x8001, 0xffffffff80000000}, 0x8) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1105.027894] device nr0 entered promiscuous mode 17:58:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a600) 17:58:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f0000000000)='./file0\x00', 0x8044, 0x3) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) setsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000180)={@empty, r3}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in, @in6=@initdev}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000300)=0xe8) r4 = geteuid() lchown(&(0x7f0000000140)='./file0\x00', r4, 0x0) r5 = getpid() sched_getattr(r5, &(0x7f00000001c0), 0x30, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0xa7f1, 0x7, 0x40, 0x60, 0x2}) 17:58:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0xfffffdfd, 0x0}) 17:58:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x100000000000000, 0x0}) 17:58:46 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a601) 17:58:46 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a700) 17:58:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000640)=0x400100000001, 0x3d5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x9ffffffc, @local, 0x80000000}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000580), 0x37d) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) rt_sigreturn() fcntl$setstatus(r1, 0x4, 0x42803) 17:58:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x300000000000000, 0x0}) 17:58:46 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a701) 17:58:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800, 0x40) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x7, 0xffffffffffff8001, 0x401, 0xfffffffffffffff7, 0x800, 0x1000}) open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0xd7a9, 0x20000000, 0x0, 0x1df, 0x9, 0x0, 0x7f, 0x2, 0x7f, 0x3}, 0x10) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./file0\x00', 0x0, r3) 17:58:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:46 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a800) 17:58:46 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) accept(0xffffffffffffffff, &(0x7f0000000780)=@rc, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 1105.840593] device nr0 entered promiscuous mode 17:58:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0xfdfdffff00000000, 0x0}) 17:58:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r2) 17:58:46 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a801) 17:58:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x1f, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 1106.370948] device nr0 entered promiscuous mode [ 1106.603177] device nr0 entered promiscuous mode 17:58:47 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a900) 17:58:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x400000, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) mkdirat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x1ff) 17:58:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="eb7fc86d4f66732e66617400020441000500077008f80000d8c32d9d60c74a6528c1fe1ad0", 0x25}], 0x0, 0x0) 17:58:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x80000000000000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x4d, 0x7a2d, 0x200, 0x3ff, 0x4, 0x1, 0x9, 0x200, r4}, 0x20) 17:58:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) r2 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x2e, 0x40) bind$can_raw(r2, &(0x7f00000001c0), 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000200)) getsockopt$netlink(r4, 0x10e, 0x7, &(0x7f0000000040)=""/138, &(0x7f0000000140)=0x8a) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:47 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = semget$private(0x0, 0x4, 0x11) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/47) r2 = inotify_init() r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm-control\x00', 0x20000000000003fe, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000000)={0x101, 0x0, 0xfffffffffffffe00}) open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000300)={0x0, 0x0, 0x2080}) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000180)={0x2801, 0x9, 0x3}) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x100) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) 17:58:47 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000a901) [ 1106.893045] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 17:58:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x48, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/224, 0xe0, 0x1, 0x2e}, @fda={0x66646185, 0x8, 0x0, 0x5}, @flat=@weak_binder={0x77622a85, 0x1100, 0x2}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}, @register_looper], 0x9, 0x0, &(0x7f0000000180)="1f00c9d6fa3281cb7c"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="d9a464f67ac765fc49c4ad519199a72bd20fa17d43"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:47 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1106.990590] device nr0 entered promiscuous mode 17:58:47 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = getpid() tkill(r1, 0x9) wait4(r0, 0x0, 0x0, 0x0) 17:58:47 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000aa00) 17:58:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:48 executing program 3: r0 = creat(&(0x7f0000000380)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fremovexattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='s']) 17:58:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000aa01) 17:58:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ab00) 17:58:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='nr0\x01\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x804) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000280)=""/233) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r3, 0x9, 0x30, 0x7, 0xe83}, &(0x7f0000000200)=0x18) 17:58:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ab01) 17:58:48 executing program 3: r0 = gettid() unshare(0x28020400) exit(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000001600)='ns/mnt\x00') 17:58:48 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) 17:58:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ac00) 17:58:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f0000000100)='./file0\x00', 0x8041, 0xffffffffffffffff) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="6d7fcf72c90035", @ANYRESHEX=r0, @ANYBLOB=',mmap,seclabel,fowner>', @ANYRESDEC=r3, @ANYBLOB=',smackfsfloor=,wlan1vboxnet0,euid<', @ANYRESDEC=r3, @ANYBLOB=',dont_hash,fowner>', @ANYRESDEC=r3, @ANYBLOB=',func=KEXEC_INITRAMFS_CHECK,fsmagic=0x00000000000002b6,uid>', @ANYRESDEC=r3, @ANYBLOB=',subj_type={,\x00']) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) [ 1107.812995] device nr0 entered promiscuous mode 17:58:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04e3044000000000"], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000000c0)=0x8, 0x4) 17:58:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ac01) [ 1107.914330] 9pnet: Insufficient options for proto=fd [ 1107.934762] binder: 12600:12602 unknown command 1074062084 [ 1107.948497] binder: 12600:12602 ioctl c0306201 20000240 returned -22 17:58:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ad00) [ 1108.150348] 9pnet: Insufficient options for proto=fd [ 1108.176865] device nr0 entered promiscuous mode 17:58:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, 0x0) r2 = dup2(r0, r0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'caif0\x00', 0x4005}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x70, 0x4, 0x7, "49f002f690190ce81a18d0c7322bee41", "3cba78c6341dc29a9e761797a0b27eb6b2c1f1436cdb36349fa3d51d62eba7ed15509d448b1acb7065c858b5e22b1ec336480a089717a0c44e1ce41b751ce1e2fa8e42e277901d2c9a1e1b4cb3209e2f2d214f0965c7efc49014ac"}, 0x70, 0x3) 17:58:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463194000000004"], 0x0, 0x0, 0x0}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)=0x8, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x17c, 0x0, 0x0}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) 17:58:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ad01) [ 1108.466351] binder: 12714:12719 unknown command 1075405572 [ 1108.483510] binder: 12714:12719 ioctl c0306201 20000040 returned -22 [ 1108.493766] binder: 12714:12719 ioctl c0306201 20000240 returned -14 17:58:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1d9) 17:58:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x9, 0x1, 0x2, 0x7ff, 0x1, 0x255, 0x5, 0x8fcf, 0x6, 0x3ff, 0x6b8, 0x6, 0xff, 0x5779, 0x17, 0x1000], 0x4000}) 17:58:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ae00) 17:58:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x0, 0x0, 0x0}) 17:58:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9146e436953a17774d0328bc7000fbdbdf25030000000c0008002104000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x9, 0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x6, 0x10001, 0x554e0046}, &(0x7f0000000140)=0x60, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x7}}, 0x10) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') utime(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x3ff, 0x7ff}) 17:58:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ae01) 17:58:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) r2 = inotify_init() r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) getpeername$unix(r3, &(0x7f0000000180), &(0x7f0000000200)=0x6e) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) signalfd4(r2, &(0x7f0000000100)={0x8000}, 0x8, 0x800) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) [ 1108.823586] device nr0 entered promiscuous mode 17:58:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x40, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000200)=0x1f) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x100, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f00000000c0)={0x9, 0x80000001, 0x100000001, 0x300}) r2 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) getpid() ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:49 executing program 3: 17:58:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000af00) 17:58:49 executing program 3: 17:58:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vfio/vfio\x00', 0x400100, 0x0) getsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000500), &(0x7f0000000540)=0x4) 17:58:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:50 executing program 3: 17:58:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000af01) 17:58:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x60, 0x0, &(0x7f00000000c0)=[@increfs], 0xce318fbdee7d7428, 0x0, 0x0}) [ 1109.376593] binder: 13337:13341 unknown command 0 [ 1109.399495] binder: 13337:13341 ioctl c0306201 20000140 returned -22 17:58:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x1001000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@access_user='access=user'}, {@nodevmap='nodevmap'}, {@fscache='fscache'}, {@nodevmap='nodevmap'}, {@posixacl='posixacl'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nr0\x01\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'selflovmnet0'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nr0\x01\x00'}}]}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2$9p(&(0x7f0000000180), 0x800) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @rand_addr=0x4}, @in6=@empty, 0x4e23, 0x9, 0x4e22, 0x1, 0xa, 0x0, 0x80, 0xbe, 0x0, r2}, {0x8, 0x10001, 0x3, 0x7f2a, 0x100, 0x400, 0xffffffffffffffc1, 0x1}, {0x49, 0x70, 0xffffffffffff0001, 0x12fe54ae}, 0x20, 0x6e6bb3, 0x2, 0x1, 0x2, 0x3}, {{@in=@empty, 0x4d4, 0x32}, 0xa, @in=@loopback, 0x3507, 0x5, 0x0, 0xfff, 0x0, 0x6, 0xcb7}}, 0xe8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) inotify_add_watch(r3, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) 17:58:50 executing program 3: 17:58:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b000) 17:58:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:50 executing program 3: 17:58:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b001) 17:58:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={@remote={[], 0x0}, 0xb, 'yam0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) 17:58:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000280)={0x2, 0x7f, "45c0018be98dc2f3f176a13b46549ecd84dd7f90ebdc88679fede4296de798d8e677f02eb30bb47b31ecb107c42f26e1e8f17bb4756a6b92ba37d99d53e5046cfc2fc9bddad5a6101b71b4bd4ddc4387ff96452da3b73a3c8d5eefbeb538cb2a48319feb4b3ab0a03387e1636be86a874c0e856175022f97defe00d8b2a6bd"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) [ 1109.653445] device nr0 entered promiscuous mode 17:58:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:50 executing program 3: 17:58:50 executing program 3: 17:58:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x400000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x4, 0x0, 0x4}}, 0x14) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x6c, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0xfffffffffffff800}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x9, @rand_addr="8e4a1c43963a0c2ce1d80dbd848ec5c3", 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={r2, 0x80, 0x0, 0xc, 0x4, 0x9, 0x8, 0xb31d, {r3, @in={{0x2, 0x4e21, @local}}, 0x0, 0x5588000, 0x10001, 0x3, 0x1000}}, &(0x7f0000000280)=0xb0) restart_syscall() 17:58:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r2 = shmget$private(0x0, 0x4000, 0xd0d, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000180)=""/15) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b100) 17:58:50 executing program 3: 17:58:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r2) 17:58:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:50 executing program 3: 17:58:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b101) 17:58:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1110.275585] device nr0 entered promiscuous mode 17:58:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b200) 17:58:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x2, {0x7, 0x1e, 0x20, 0x80000, 0xffffffff, 0xd0e8, 0xfffffffffffffff9, 0xd9}}, 0x50) lchown(&(0x7f0000000100)='./file0\x00', r3, r4) ioctl$RTC_WIE_OFF(r2, 0x7010) 17:58:51 executing program 3: [ 1110.647071] device nr0 entered promiscuous mode 17:58:51 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0xffeb, 0x0, 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04630440006b0a17e8992643b0e7a61e09d5e0337de4421c45f423ec09adf912e6b292c734522b2ec85100"/55], 0x0, 0x0, 0x0}) accept$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f00000000c0)=0x1c) 17:58:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b201) 17:58:51 executing program 3: 17:58:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000400)={0x0, 0xfffffffffffffffe, 0x100000000000000}) r2 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x610802) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$P9_ROPEN(r4, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x10, 0x0, 0x2}, 0x6}}, 0x18) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x56, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'bridge_slave_0\x00'}) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r3, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r6) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='./file0\x00') syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x5, 0x8000) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000000)=0x1) [ 1110.839630] binder: 13732:13733 ioctl c0306201 20000040 returned -14 17:58:51 executing program 3: 17:58:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b300) [ 1110.968120] device nr0 entered promiscuous mode 17:58:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xa400295c) getsockname$netrom(r2, &(0x7f0000000080)={{0x3, @rose}, [@netrom, @default, @bcast, @bcast, @default, @rose]}, &(0x7f0000000100)=0x48) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:51 executing program 3: 17:58:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440ddcbf3a8ce2c64d0a75a3c5b94c820000000"], 0x0, 0x0, 0x0}) arch_prctl$ARCH_SET_GS(0x1001, 0x7ce084a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x400) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x101}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r3, 0x8, 0x10000, 0x3ff, 0x3, 0x3}, &(0x7f0000000200)=0x14) [ 1111.403881] device nr0 entered promiscuous mode 17:58:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:52 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b301) 17:58:52 executing program 3: 17:58:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0xffffffffffffffff, 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4080, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@initdev, @multicast2, 0x0}, &(0x7f00000000c0)=0xc) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) 17:58:52 executing program 3: [ 1111.612957] binder: 13975:13976 unknown command 0 [ 1111.623654] binder: 13975:13976 ioctl c0306201 20000040 returned -22 17:58:52 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0xa600, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000002c0)={{0x4, 0x1}, 0x10}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) inotify_add_watch(r0, &(0x7f0000000300)='./file0\x00', 0x244) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2102, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{r3, r4/1000+10000}, {0x0, 0x7530}}) r5 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r5, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0xf715}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={r6}, 0x8) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 17:58:52 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b400) 17:58:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1111.767063] device nr0 entered promiscuous mode 17:58:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x8000) r3 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000017c0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) r5 = getgid() r6 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001f80)={0x0, 0x0, 0x0}, &(0x7f0000001fc0)=0xc) r9 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002000)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000002100)=0x75) getgroups(0x8, &(0x7f0000002140)=[0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01, 0xee00]) r12 = fcntl$getown(r1, 0x9) lstat(&(0x7f0000003680)='./file0\x00', &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003740)='./file0\x00', &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000003800)={0x0, 0x0}) r16 = getuid() lstat(&(0x7f0000003840)='./file0\x00', &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000003900)=0x0) getresuid(&(0x7f0000003940), &(0x7f0000003980)=0x0, &(0x7f00000039c0)) fstat(r0, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000003a80)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000003ac0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000003bc0)=0xe8) r23 = getegid() r24 = getpgrp(0x0) getresuid(&(0x7f00000041c0)=0x0, &(0x7f0000004200), &(0x7f0000004240)) getresgid(&(0x7f0000004280), &(0x7f00000042c0)=0x0, &(0x7f0000004300)) r27 = syz_open_dev$dmmidi(&(0x7f00000047c0)='/dev/dmmidi#\x00', 0x31, 0x4000) fcntl$getownex(r0, 0x10, &(0x7f0000004800)={0x0, 0x0}) r29 = getuid() stat(&(0x7f0000004840)='./file0\x00', &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r31 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004900)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000004a00)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000004a40)={0x0, 0x0, 0x0}, &(0x7f0000004a80)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000004b00)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000004ac0)='/dev/binder#\x00'}, 0x30) getresuid(&(0x7f0000004b40), &(0x7f0000004b80)=0x0, &(0x7f0000004bc0)) getresgid(&(0x7f0000004c00), &(0x7f0000004c40)=0x0, &(0x7f0000004c80)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000077c0)=0x0) r38 = geteuid() lstat(&(0x7f0000007800)='./file0\x00', &(0x7f0000007840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000007900)=[{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000280)="85f4f459e0513ad9386dcb66314766b5de3e858b22282b667d91903690bfff66eddd692b5f6adf24c57024b896f16b36217eefb9545b44bc118d3e8ff314420cb914ff0f29718dc29d52f0476b0bce0925c30ca4ab4c0e554f6a9943ef0dbd20e82a9ddc750b7c07a5770cdbbb98b7512e96fb8dbeff4315d713c3d0f12923a8fe7f47275b0285b1122ec476f345fe1e327aa274cffbdaff4ac9778316f747370a70332d229513a518328b4947517e13f00649506d39ca06fac013fd7265778269f921dd54fea3e7df99ab4dd734d014f337be969e0789b96cb403b036253f2068718fb5", 0xe4}, {&(0x7f0000000180)="8e3b40540c5e7b8c14219bf95ecd69d0", 0x10}, {&(0x7f0000000380)="d0d1e248d3e42380d8005ad92c63bc4b3c0f346044826759c5013fa436b687412f7a9888b17e3a0623168b615f89c9abfb6f07c1eb2fd1f7f551c485ae8f0c6c8f2e8e7624e91a649a34ae78474e690ba0254285dc765ee542cb60016fc1dca2c7ecbb63fdc1045a8eb975e73247eaaf97d9fe94f80f9f86c614ca2430b2e60a6f30c2143aa5550c62ef328c2ca7e67f6d002c86f209f402f43c8331", 0x9c}, {&(0x7f0000000440)="2a74ed5c0aef0db56cba5cc8ec71a745a8b418440616b5fa113f2f8eb886cd6418aa9c01013ae76cc78a0d0625211e1492e713d8e9c50b7e57a4832e7f2e6e406d2169ffe6e2e94165d723929f517a7e480d8c15f13bffd77a0a512de11050c4ef33cee0986d71f78efb7020d3603830f7e35f33bea32534cc9023feb8588ef778af8ab3a3f01d924b573dc7afbf308e6a48367959f5459f320994ba39b429407727bab999055643590cc6e1f752e06bdf72d38450e9dde28ad556f4414a6a50515cdafea16a626a533e231d9bdba82fa808f8332119dbff89e6b0e2a1", 0xdd}, {&(0x7f0000000540)="7ae52799fefae5ed08b1257ea949f6220bc305212d4b5b2344c6b64a77493d35250f60156e92ac1df3121dae11f48b23cd71dff82b1315d0c21165a8d741c012dfeca3250126ffdf98eeb43b0ac02c4570f36635b952697e6754480c493bf831d863d83dfc91c48ac57fff85b331419d04e314affe051563e3daa71e6d9f9c43f5cb23845d28456f0ba82de6408628824f397a1f5fac5e7840df68aaead95af944f555c5aa400c1e55a9e521a19f3727a2c686bf83b7e45551e2f54451692be4921a7f5cb97a5eb72fe8b8bfcbc8ef699483863645ae26f1", 0xd8}, {&(0x7f0000000640)="2fb124767d3cb0551c57340c5dba8b2f2f20a406b68c61903a4324d2bb30547dc8535162ea5e23a081e5a054e2239f7111422a165ad3eaece8842dcbdde25a75ab2c395563b239527c451765c0bd79742e92c6b248d64a51e6f1e5f1915fbf721f1dd2d12deaba2c43f6ec176f5e7c864cdb1f2b70a9b8eb371e10c685a5acb9d86bbca637b4a0b67a6f5ea776e05687d539f121789fd88f5f300686c77f02033073840e6b11f2401e9f0bba811d40a3939015e544f80e0f2a9b122257ae3a36e66d0eeb402dec3b7c5a461825034de58dcb08eeede057ce3e8a", 0xda}, {&(0x7f0000000740)="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", 0x1000}], 0x7, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r1]}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r0, r0, r1, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r1]}}], 0xc8, 0x40000}, {&(0x7f00000019c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001a40)="999d463afc54d688395c8f23ccd6f1e3ef20ca10d704dbe51d1d2ed17ed56225973d431ce22dc4d6c031550c161033faad3a2159429b9a97d0f52245c38787971a1eb9656f605c83ac096694d07a8b2ee78148064122b2f111f275349e29be0eb9ffcda2db9a232636f6be402fca8fb0b3b2c51d0e9a087711666c8d512897580f", 0x81}, {&(0x7f0000001b00)="0e985e215c5aa7fc72e11166e778050fbf137ef2eaab7ce974dcb3fac56db2aeefc6efd54bdc2b07399bd686ff9921556aa6", 0x32}], 0x2, &(0x7f0000001b80)=[@rights={{0x10}}], 0x10, 0x20004800}, {&(0x7f0000001bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001c40)}, {&(0x7f0000001c80)="70e054983a33552979aff9e0cb7ac867c8b30b27a14344346ab3b474bd1d85cd2fa51c0afd0e57dfa082591c054ea8c824b109274cf7aa683bb0c82a488cf53e76524c9d933e0fe3181b7779d34e39d752d343e3c194eadc5ab727033c3e0fbaed67d8aa93044af16bae0be234386420b089815bb699b5e580f04c85175a2a651dfbcf7382adc5c487a484ef51afb6b87ac620750ca6837754f1525bad9a28ead91cc2", 0xa3}, {&(0x7f0000001d40)="c7fde9ff8c9b4b43b3e9963abbcafdda0ac43edc1945623512b04f29338ec8a425837892829e5b4e0cfdb4d0f09b70be597ee9335d83eb32566f40bd6fa3d1", 0x3f}, {&(0x7f0000001d80)="e30981bf2951b4298f06a2016f9e32657ccaceb64f40af376e2511b02c4145bd56bf23bbcd4ba3188d5775dec7a01a27de60287c1180f46d44c6f8807b21", 0x3e}, {&(0x7f0000001dc0)="fb4a412317cf7211506834bb1e1b319ba02174d3d911b309d08878a3128e616ce9658b3daf55b6ab926385858f612a47c62efd9d0979a3e9fef9fe4b14bfe118d80bca630cc54bcdde85a326847c26490e318da52c290a5e", 0x58}], 0x5, &(0x7f0000002180)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0xd8, 0x20000001}, {&(0x7f0000002280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000002300)="a24551b3d7a1d667c9731d049cbb1323417e33a35c0ab6cecc584c05e4f4d1d040bc3924dcb81244b108917fbc98d368cf44099bef3374361401c2ae5f2006be1b7852c596002a9eb9dbb9dada40a6f97765714257f4259a4290482a95cd4dc9e7e9daf5f1e9e883b17d641ca9a22a36dc4ef44dbb681e5c411bfb3180be58175a13f217b7ad0f6595bc", 0x8a}, {&(0x7f00000023c0)="08d769b6", 0x4}, {&(0x7f0000002400)="9ad36263997d062e0c1d2d90b702a5caaba5b0749e363b008220dd67bfada51696ac8e8bec50d97e40d44b7b0b8ae50c73ef2308630097935ed7e26f603b9511d95e4c8e8730da8780706e9f0566d5d9150d07f9d4a1c57ee2fa49e57526c4ad0cf2f40df51d9a499bcfeac35cd798050b79954cd8320962d4b2d72cd8ae430583c73c462522f20637fa3fff5597ed7361cbae88a56e962f0f65b4fa22f5e6c82b7fba81e3e46d0d498b4e23a87f7b77c101e4a07859bf186d83dbd40abe91e01d0cdff23fd302983b02bcb87a", 0xcd}, {&(0x7f0000002500)="095075a1bc413ba125df0e71e0b65bec465a1ea4a1cdaeffbcca17fd10ed01fe1e44e0c16ecf7c671ae64996c6afc99ea91b3395f4f7e7091b320574722fbc32cb93d2ae78595e1f0718e7919c7c4e72a93148d7f91a5c840eb3ad8293e9b8040ca5f6fe1ee221cfac0fa2692facef477e4546d0e7a0e928f1f53fc1e1da0224907b63dfb85b85d0b1d4e8618ae3aaa2e0f6a7f3436876d9791681926adb33f0dfe0459001f26d220fff804a444b50b8b5912fd01f", 0xb5}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="b9d7d87e35b30253a3fc116d29832b244ac02829b8828ae6", 0x18}], 0x6, &(0x7f0000003c00)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r1, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0xd8, 0x20000040}, {&(0x7f0000003d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003d80)="5272e343d50a2ad8c3250231a73ab13be5fb5117fa6bf3257d46d40389ba5cf8e0a82e9a6c527024ebdb7fa38db0a43f3ba98f0eeaee9f10c51d2e359f462db13d8f24f3bb3e0430caa4bece679d6423a2e49ce199bddd428d35d51962ed72450893f820d200c273c6d78c9b95da3a7a1d95a8966f559664236f1d397ae0c06a20338888b3ce1d", 0x87}, {&(0x7f0000003e40)="41eb943cea85393a2a32e54194dd4b9fdf7cf76487d266f816897f7e8d", 0x1d}], 0x2, &(0x7f0000003ec0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0x20, 0x4040000}, {&(0x7f0000003f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004180)=[{&(0x7f0000003f80)="8c74df021f0aff1ae25a42a892d50506c3f7e4e1ee0aa9efd0a8b26cc205726a0796a3eba85be9b03b18734e2980cccb7855d8967e6cbc4650575161b41ecc3b5bd1e06a56cb31b60fa3fb943d40cd305b5356b07cbffc1a7ca15fa33946f0c9969abbedb6ff52326c15dff4ed0d", 0x6e}, {&(0x7f0000004000)="af949bd3115df01609843565cdd5cb73a4f14b7ae8d7f8302de10e749a8b302fa52f947b221f58992679e0cce7b4848e167e966833b06b5408f296ccd0671d6fedcf13de20875273ca98e20d5a63541b55f1f5becb2466438bc3d635f1ebc3c711bb4c5e27a3105b3c0cb614d3d3285ede018a1d234669d795b13c60509cab19dd227b9e6feb4d73f03659524bf79a54054a8c105a107b47526cd832a3948075", 0xa0}, {&(0x7f00000040c0)="c3052ce78af0793060d0cca3ff5f9e851c13c5dc158a66df0aa4408aa37324c75a13accaebed8b0d6f4b173be4d5b45b96c0079ddaf2f8d30ed36b356c70fd9a28946ca64babdd467f58e9685d87a46b4cc32a320940d45382353103129bcf944ce163d2890de2297a4fe70ae68b91fec460e2470a6fba892b86d9b293ae6c2344d64bb2d44ea06960e67ecf", 0x8c}], 0x3, &(0x7f0000004340)=[@cred={{0x1c, 0x1, 0x2, {r24, r25, r26}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r1, r1, r0]}}], 0x48, 0x40c0}, {&(0x7f00000043c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004740)=[{&(0x7f0000004440)="7414c515de7f0616eb1603e67177f9a13058f870b4c21cbc441753f960ccc508f645f349bd7e19a0954175fb87e34e2bb176e7f48e0aa99cafb07f7749f62712d6f9652c1c3443e86e4ce146177bc7dbff699bfbff8841f47bd1bcf342d47911394602bbca0a21002689235b79b78417ad4d87153667436d0e0798763a44050275b0ae41f8a94b721ca528af4e008e536f1c855eac5f41689376f6b2fadabbad9759f5a0389ab68777f035919feafd5b0caa461a5f60bf210f", 0xb9}, {&(0x7f0000004500)="329f5cd06fa7f7c135837419c2ef758c5a55cfe2dda92e16da235cea4bc754bca1f25f7711fab690ce673ae7c0a466e274cad50251f9c9959fb11e5d31055daab6346358d4a6f3825d1630556eeb92d32a86e6972d0fa0f64583ae9b920e355c7f98f0d96d180c7cffcb40b22578c8bf4d68bf5bd5c7ac11b8aa4d2c7eb6c8c76f517b30390bda3b10e3fc9e5a7bd4e6bad5b9fe48c8e429f32ef08f4796f0f1a254887defd2", 0xa6}, {&(0x7f00000045c0)="de8acb119f1825cad885b57189e3aed4a72d9c9f967471cf6aeddd6af944226a3cb2d07e681814be8cb0dd3419442eb6c3d3d83622d10f3a3f7abeb43fe8285d0bfdc785a73bd2c785419bb83b997f43abbf7ee18b9c007d8c75", 0x5a}, {&(0x7f0000004640)="c182ff34141ab7d0721e8125972fdf42122c2da5810e42565b1cd8063316613592967361c8c7370ff186c5e2c6b3fa472bbaa26a36ce34a107386b81acfe7da0e1d47c2a421d2291e7a4b425efec835a80a6150c82539a", 0x57}, {&(0x7f00000046c0)="a8782650f8148e70fc7f53b6f33333865c5371a5a03550d8faf9d4e5c7d47f7db45cccabd24bc6af9b7a07412c3855f3a792c0534ef0f54c7a19d8fe5936752deb448e2d12", 0x45}], 0x5, &(0x7f0000004cc0)=[@rights={{0x24, 0x1, 0x1, [r1, r0, r0, r0, r27]}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r1, r1, r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r31, r32, r33}}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r34, r35, r36}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x110, 0x10}, {&(0x7f0000004e00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005200)=[{&(0x7f0000004e80)="5287a3371a4311f65e937b1cb52a892644430fd1919b785a03f9262b6893586a9e7d47efd478bccb829f57c61f4035e195892db6f347895f1ea59be06560b9d7394689e20b270aeb95fa42", 0x4b}, {&(0x7f0000004f00)="aa6f47e9ec099fb4d2dbbc3db20323465695d7e9dca6fcfa5a7563d1e26342bcc729c047ab23e6e0b2ebb543a7778b4b7b1ac579a6dc004ed04eceaa2e8efeb728b233dc55e49a36c3e4e74fbbc339905389f3d814080b3d147f094c651495c63b6910", 0x63}, {&(0x7f0000004f80)="64562bf70804c569cb0bb6014b7c7c76b780a5de0f1c9d75d7359b12208a3a65053913645c2725bc3acea9514ec0857a40e997250ee11b0ef14bf47d4f0279008971a21d479aa66f2a0f14d7d33a5b6ab0339874a8116b46bb7549550322fac2b940db41d6a0a6", 0x67}, {&(0x7f0000005000)="ab98689b9f2ba997ce8ebb398cbc9fca5c1fa1ae6eceb5b63f6fc6caca11698a7603153791662175f488ddbf86705c90a3d7f9ca2e2d963116f76ff07ae88860e5fe098c2032b217da22d3d0cb23ffa3990c880b1d6302506bff16", 0x5b}, {&(0x7f0000005080)="5e3b91acf094c728d742ad5dbe000956120653bc46fdce9983930f239dbfa07a09178f270c695183cfdec5f1f7f42d7e6b33d52f303e557672a733ce55f090579a0c610a4d75b1295af436a7f16ed76696b85279e0600d79cbd5164532610a70a2eb0efd931e6a9b6fecd89a3bf66d871f347beb7665296e054104114d5e1d03bf8f4a6e16919df8a6cb081cff02910af88fbbf9dfd9217222b2d8bbccfb7e6430fd176c77546aa7254068e9216324b17ec473494cd2a1494810f2", 0xbb}, {&(0x7f0000005140)="cdccb35495b85dcf6f5b2f36469d7cb5b12e66c27c24c27f6a38888a52ad31a17bc6a497dcf55f9d024971a827758aea0c2f1211862a42195db1cd2a72de1cf9fc34b6570d388ad0faf1dbbf1cee9f6d5f42fb931d26361e4aba7060a2cb035ae16fb7ccdd8c03cfdfdac18d7fa41edf31f4ddb387d610f973f137a2ba812eaaf851c5c2c8ad190de55271cc1d97a03853d21461352152f89897090ce0ecea99e563", 0xa2}], 0x6, &(0x7f0000005280)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x50}, {&(0x7f00000052c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007700)=[{&(0x7f0000005340)="d0bfeaf7baa61772be6fc38b6e35ac1ac10d5eb372b2cafbf95b86c7f8024ed2c21121c56b5c15af9107755b4fd9f3c890e7d7", 0x33}, {&(0x7f0000005380)="99cc0f37f6b1b96fe039a5c41046205e802716c10ad14ce133e0350052dcb1be17a7d2e4bbd7cff9ccd2538d372324db3d7a99505e1eea1a6c21fefabe9de8363ceeeddf185960bb894de9fd153192578abdaaefc6e1", 0x56}, {&(0x7f0000005400)="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", 0x1000}, {&(0x7f0000006400)="f07ea75c84ac017970d0f0f23e0b7ad4c9cb02f4a5", 0x15}, {&(0x7f0000006440)="d7cf1cfff9cd718f470810f6e9fdce0c00cdbd903a5f0784451ce27ac2ff9929567c399bc407c1e5f5c7ff235a322b1054d7dc3ae0022bc5d312be8240990c31dc2fd0f272a4b3", 0x47}, {&(0x7f00000064c0)="1b83e512bf7ad76171e4326613744d485efce0494008c7025cf551d23fdef9d03828cbb5cf48b6f85f751a43b164bd28b625a378e42138facd50d1702dfb7198ed80bf456d01340380156d4bfeb3690ec6094daa2689e1b08d3a0cade288f7efecc46ce96c2b2822482aebcd38", 0x6d}, {&(0x7f0000006540)="fcbb01a8cb8ce0b9cfc661ab494d72d0ffd10eb9377a38d6f9098a91c2241337a9149afc567eeae2d091f20e194d247ae7c04a9bd6391c91a702a1f58d7841c9e067d57856661027aedefaa91b15ec26d1e2f31201341171f40f568b34495859905952a78d9afd5fe9c6aff21bdcbc0c9704bc97510567d3b348a19b90326a34e3571301e5c4aef481baaf4f63ecb33d1fcd7189754591d91522dec34f0e78f58d4b68610a9f504a4067573023f0b669b0c21c6764cbf802d45f39c32ee0b8600dd10904d8af09d0388ac5f57ce79f48691865d936cfce8ecb4493e22d49598da6", 0xe1}, {&(0x7f0000006640)="966aa6f5effffa3091d80056cac2625d38984625e37d9b508ff1209445e1b5a52f0b16ca737ceb8990f13311b1e144c10e06cf5ae88ee6d9ff2d0e5fd6484faa607bd9f2791ff0ea2b7f5e7d6dbc9398a1d68bb64fc41fe7cc0e1f4fb17449bedc1b2f5c749cb07cd8648ed1ab05c98098ebb1d67480df103528186bc142948f8e1029c995e616bedcac4fc6da86ac39933bd8db02f74a0a7bbfaea7074aaa1fbbc06dcdb820bcf2b081b112916704147a55949ee7c0c629232cb8b531c5bf55d04d14add90eef5052971688eb7748376d0b6c0edb7bc75eb4680d98e473c2b591bb48319d9867faa823a7b783670435142d86e60a188df1bb4ff95ecba9b1710b12fe9f803ee84761eeb674108cd595506ecb18d922660ea4de215e52ab0ca265009ba21b3450da2f89c158bc119685ede50476408dc09ced4d19e936545a29e247009caabaff14d571c5fcdf958ebcac957e5908e76bef9e948d2587bb66b922828718f05c72016fc4fe0c131e5db6e9043e7787606ae8caf7468b8cadad950c78a4809dd52b285da8f9173dd0fccc0ac6e722d31f78d8e2efe3f9da758203b77e1ea96df40664579f39966852e58059d75214cf5a16496af14b917a66df5a7b8a7d427de169e23e10538a9825d7c08ae1be08bd2f99249aaaf1a6e23d1ed6d16b6a55d48a6ee23a7175a59da00a14bbf88ffc793f33f82d13588a0e9769e9f9c22108a1b968f0dd6e8d192b3c3227b69cec14c15f013855d9e343c079ede034a0b80c7f305289ff5a48d2216e13706e5d036f0255f87ebbe7e9ce2ac6156f35f7b53c0005833c848c9682019c2e91f9b1d6cce03e9c2c5d2efe6cbfb56b2426538a6e590317fcc89eea58e7e9189f5268a86b968bac02f3905844edc9c38cc200cfb1f472e9fadafd08f86cd16fbc9bdcd28c0f83af2a566c07cf5f8c7b5c47e4b96142c30aa357416d50b56d0d23da42346d6e8cdcd37377eeeb0ab211c29c8934c6b180d6efaef9c3f79643e678452d61f1c25cf19f0a577c15cc2cb566d1b3aa53eed3ed75d0ea71cc2d8f76b111aa476d4d1e95e9a2e8197df047c0c5d428c5471c3631e47ade25e9f213ace33f8e6109c867e28c1d9624bfdfea910374ca49c523b1af53cf6c62cfbb09b05beba1ae9387478e07f20cf32c45e424a42cb78fa1086a50a1a2639f6d362efc299cbbdec0558df63f8c7eeb612cb20d39a3f850570ac985fe1a14a30ff8944abc92f26b6391bf11bcdbe9fc3d04f38c7e9fed0bc4a0e666dc8bb4e81555844fb072c676103fb40fd647f4e63f4dc7fb52039c787c470f98849b1b68e764ee4927f2c63ec148aeb2a837e566f40c1c272fa6625b24c9e08e4b97718302096869fac7da01bb261b68a0e6f58450a444d9f3f0eaadfec7ee854f48036ebae5c8f9bf2cb8d67d7366acd065b4e34b41af932d2f2f53b5625483ed88dc7e82cfd6c71a9d263d95a133809cd5c6709f50d26d276ebcd0deea324a219d7120bce4b7ab1be533d306f4bcd54afec112450cd9df81c656f7831ef52ac97967b290cd50f8df9dbbb309e03c637db4faeeae049f18f6ecbec37f79be7ed4ae1997169d5fdac4d68f0c12b60b02dad8fe586388e6757e5d4bffeb94e449101624bc1eac1764fbdba25d0d1a986521c4758213db6af384a828037715c2f19363dd77e8db7b58f403da6859bbe33bf6b39a88279ccf13707a7c3597c560aa7a46223d4dde24bb79984fcdf1b076e281dbf0b570ccccf42bfb968bf52d1015429defedf121140074cfc277bd827618dbbb50d2ce47602540a4e51918417e090311d20599b94fd36d70649dc1413e28f66477c78934e09863a3d1edef1578222e9599bd07e3374ab354cfae933bdcd255781986ede9991d7dcf9087c2d9e232a6346f8d3fd4838bf02c0ec445a2b3deccb192e4a2d78e15cc086302d03f1220dd5cdae4e0c1b08357844ec78ce75c4a9b6ad3d977012f634e8f1f552fc3665fd2463bcd136c3941611f0bdf863222eb3b1d0a510102d0bc91b26b4366776a39078463e3b941d7948f4087e859050c027e114e3fa39be9b5fced5331732340e1560a56a980bce68ca663e6e0c657d61c8664435f41416aa25a67a3136dd816526e36c4050bf41c7d67f271a7caaa3ce65d36842e3ab81d660411483fbecc1afbb4f7243737bc90881707e2a762c7f42641e977c711b6e07e7acfcb8866a1d089c067e77ad0f19ddb603da48c140b7e1809231ae9624bbc2b3b9d02cd7681c02b1a58e6d46cb6e2594936a50efa2985b2985a18bbceef67b0bb207fc3269925a167a83015b4789ea8b3f346f8a403bfaef6a4cc7a34b32ed8f114542cb1bf327de70c8b8fbd2eac4b488162264aec99b05e935980daed4bbb07b7178ffd7c5dec65a2cf9a1f51fab0594c667423a2dbe7ee017211e75959cd814e0407621783e1b098a965dc0375ad8c8cf965e77f251bba5462ba32663265e9f162d174aaa0e732ab20620b59a6667efdc5b12d053d3716e3b9d7e075e7a1258ff6e9bd8d9ccf4a3bae6d09b6111269de79a2faa20710ae4f7f4cd407d00103943c7a6cc2716f6d6326c5a535715a17c99dbd38dd845265b01d57479ce6c9d7f7c99aba2421c1b6f8110b0b764b31fbfd15c04fec999ce76b2bb51bcddb23fd2f50be4f793389c46b60b1741dc2d5211fbe400564c21b05df70b9499511024c85e0360e1c25ed448f62d35d6cfee12dc0c2e8678d9187f501937879574b291ad90925002c1f3fe4ce2099545d783ce7167c5c31b15b2a9df7877171ad67c7b9bc4f36b436c3b844c9e553d298dcb152cf1590eebe611f4c837120660b66c43dace129294ddef762f52276266ca89385f5d0e9049796db043dfd2264dc153718ea402b29983f44bc7ac77218b80a77e1ad784feec98f1ae1997a5108f36c0effbd0fecc53b845e1a05f8ff09ba937664e97402d243def8d3b1c2680710d8ccc2badd0a954f30f38829b5284c63194dbb499e9345f60a7ff83b264cc428dc5042433dd38c69e84e930ba26372ac55f32ae0d7b285449f74733b327167559c3ca4eca825e2d5ee8283ed5940aae7717140f112f4428d352f115f79c41f1a97397f308e386928b9acdfdcd5002e5cb09560bfe7044e86dfb89afc89ee89bb0e335d66d9a2f65652c3d2ce0c3cea10561bbb00b5f33973e5b95d10431a070071cdc5a7fcc750203b492cd7132f4f1356af46a0d22c16c2fe3d8abc75fc637227b04a9c84ce666183fb7ed4d71c745f8c6e837f5e64ce04802e462f8baecc72868bc5e5b4da6772ab40b38aff57547ea1f89af923f76ceb563eb37dbf2b663b207c67c6bae8ad722a11a4f413cec1ad7657c9876c0a10d38647d74101969e33043fddb1325b21e2c655baa6a83002d63a462ebce638759479969d1358766a42ad5887675b4475f7b30dd79900d8a7d9afb30641a9e10266285432a044a1dd90b04868098ccc18634eec27236a843b6b4b923794f0dd2503c5a0170b92f0cd0a80aec5b07e377d8110a323faaefe0c4b902f531ca7de06b87257a2438756d1fb13a3a09b36c3105f612949bfe4a08605e29f8e888f6455e1a7314ac0508d869a3d71884fc5d2593502e20baa55ca59dbaf0fc6c6f8b57fc18b21f3064649cadc27462bd3b5129a91bdc4f72c825d47a824d85adb76a398c991f7c424aa6663bb42dea47c224c454ae2b833d5f4e6970ecea57238b0be7f434e2f4ea11678aad7e58f410ab395a24f1742c19eb41a4fa8abe6ed56012125b1fda7ef35f8b1246ee43a033ea9ab73f9f2949c96136131fdb81141fb6a2d8853f086bf9a0208e880a6726ee34c3f303359b07de8c99104f7de6c91069dd2c323e247274e6f2fac18bb8ed674677c470d5159acba6e049c23feab8f9d62037b1df583df566c1653a988351cfb4189b3f53af544fc83323e436c5394b2907850458f7388c28404bb1d3e61cf1dc1f98c0e8e870e1fc07fea37309d306f53135938ed9cdf9499df85680f0d759f69ef0cd1855eef0042305a21f7e246e0c6ef867f4a1ad53a46895eb976ea8056a3c6c3d412bdcfd853f979ba6a887e76a8380e43876d75a9d15759bfbe1942f6061620033ecd0426bd8bd83745690e9f6e8199237e5e724c4c808dd53371cba1306893d0f2b031ee8d4d2fc5677e3327351596ca37a5125bc2799d527a20d8fce417a0b365947bd268c4b55ed770f9daed5c12b67a30f27f7f67c50936bb1ec461beb489799dedcf7f7105e75fea4bbcacdd11c1a4ef6c0531d946497c8612eae1d7fb2e2acd1de02e14ef035c8e77c6dc44f0dc496d96899d60c3ee8bd45c207ea9db9f31b696f346c06f06b076f6bffae7fc52afa593a0108e8a6ae6f54dafa6d09469dc11978d92a62b169762291d7d70a77e2927a17756142c6dc4987e7ca4d74fe7a994d9b9dbcd8f405805720fbaf8a86b065d7d1f66da94b62bf2d74449016e10269318cb742b3308ce84e03bac85d8ab2431d34a6f8867ff7d703cc4b2091356e7758af4a99428b1ae8e4d4244c93124c7b6d4dc55f00871a40bfa55737b6079836b7b06415a886bf7ed5888bb645aeee2b435924b139b9bed187aac7090ab2af93bcea699ce0f70ef23111fe5866fb13169d3e581a3e0e9216328f46720d604554085806662d7fe5bbe817c17692bebb5e9671fe817949675cb71c3050d774a8cc7555f1aa257a15b1ddbf9f342cdbee659050522f3d82a9586ea5d3c42f54eab5c5f02a4acb188157592b0b322ee8aecbb6703a4e64fb34cb45e6aa63165e1746e2425a9945798c1584a0ff5f41cde5a32565dbd96eacea227223408470736f3157c3e9f5011c5545c612b57a23a5bad0528b2aafa9342164423492ab8575d0a1331167bcaa95ee1c45103b338895e70bcb0d07e074d9f9b2ee5f008089e44e2968f28d6ceab72fa2282a38e82bee8e7f8154c5d9b19478439e35e9fdb6799bce7daf31d234ae104fcb8e92e09b32a886b881b2726a443e2bbc542887857616163586032b0694768558a5e0afeeb0eaa679c48fa03b4521e33ba6694b71c917f31bcd0e49e756b066fa65f2018c4f27b7f46d4c6e0ab8e5d79e13cb8a7cb475cd428847728da3814e042973b4d03993d186191dbebf62e0e28607488ae511857099b961794e9ac42c37a3baf960dae4e0af7c2866c83e36d1d79c9b8d1944e95f1259c1e2d9d9b4498e61d1b0599b7dc86b58ccc29baf8baa20b08fcec0c166d4493ba58d5102ba53f61a1b9d1378184ac8a882aa7376ef65f40f5da032032f24a768b9d0e48a6a40e3e9fe9b073a5a15fb6f5036b85d665d266cba4fc93e47bffc3897891a3e8cb657490e477878bcb90314a7b8422c85240c06bf341609b9f126032b050d853d22ffd090cba9c1e183640ad513b220d5363abfed96b786e7a256edea2826fac3f77bb75caeea6ff45b5c307e380396383811c16f0cc42bd2d4926e0a2d6509bb26f99c6c32759fcb030b9aa285811fc9b3dd5aab8115258dac398c8f3b3ea51ec90a477deb49a0702bf2983aeac2a5f78b487804826e09a76a46a1264de0edf0048176c0b86907aa79af7488ff65732212ff6235f105345133b895a397eb2cf6d4d52bf2bea76f8d2d54837a0a8895ddf04aa08d21fb2abefa9d1331d8240f8c6416e36e9f7e17b6448a8342188dceacdc74247e7f0e767ba1e9e55451530da33c7febe6ede5841e9a3b16d830bd4b92defae9f483cd4919efda6ad1425e3048ca34474a47ca0d0574fe3df3afeef7382b720", 0x1000}, {&(0x7f0000007640)="fe7fb5a85f167bfcae1d30d506398197535f669072cc79bcc9f4e622d65a51318862e620a8e02b2e613d5f3c6b4a1fa4f6cb29b6654d06471a335678b1213f1a89ba5f0891ec5a91a07952269be0a9a320fcc0760c92cca8050984a7f6382ffa451938bf8f0d22241731ce1e14a7980c185b19bc7831f2106d6b58e285cf14d7cdec4ed01f6f706a2f6c1364c6317162aa915e75cc65462fadc0f8cec2da6d7d03cd026d6c60cb8a55cb", 0xaa}], 0x9, &(0x7f00000078c0)=[@cred={{0x1c, 0x1, 0x2, {r37, r38, r39}}}], 0x20, 0x44000}], 0x9, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:52 executing program 3: [ 1111.916912] binder: 14107:14109 ioctl 8903 20003900 returned -22 17:58:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:52 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b401) 17:58:52 executing program 3: 17:58:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8202, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x800) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, {0x1, 0x9, 0x101, 0x8000, 0xffffffffffff0001, 0x401}}, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4100, 0x0) r1 = inotify_init() r2 = open(&(0x7f0000000000)='./file0\x00', 0x8045, 0x100) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="060000000000000084040000000000000900000000000000e608000000000000b7080000000000000000000000000000fdffffffffffffff82080000000000000000000000000000000000000000000005000000000000007d0e00000000000000d06feae89cd239e2f459a6a100000000000000"]) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:53 executing program 3: 17:58:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b500) 17:58:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80000001, &(0x7f0000000040)="11dca5055e40cfec7be070") r1 = inotify_init() prctl$PR_CAPBSET_DROP(0x18, 0x22) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000080)) open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)) 17:58:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:53 executing program 2: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, 0x3}, @enter_looper], 0xb2, 0x0, &(0x7f0000000240)="ea350573dbca46a53f9d1b0743ab1fdbf2a948f76dd47d1d087a47c78267caa9e90e7e42c3bb8455f63dc018308199519c45a08f0784068d2cf11a0cf5e9cd80a8d988807f7a44a520fad036af8066f62ead16ad97f9ed1163d374bdb9f2455078d8436ea0c7bbff77cae4e931d07b39cefefbe52073c79aceb4ffb3ccf1167ea3976387232bac020f5ca35495445a1cd2048216593f13dac302fc09ca6c725bc5083efa9eec0abd7dc2e378b3db06daee55"}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) fcntl$setown(r1, 0x8, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x145100, 0x14) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x600, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3f}]}, 0x1c}}, 0x2000c014) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) [ 1112.393781] device nr0 entered promiscuous mode 17:58:53 executing program 3: [ 1112.733374] device nr0 entered promiscuous mode [ 1112.877257] device nr0 entered promiscuous mode 17:58:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x7, 0x70, 0x8, 0x73a, 0x5, 0x0, 0x0, 0x7f, 0xd0, 0x4, 0x101, 0x4, 0x40, 0xb6, 0x23c, 0x8, 0x800, 0x9, 0x8, 0x5, 0x3, 0x7, 0x6, 0x1ff, 0x4, 0x1ff, 0x0, 0x1, 0x80000001, 0x1, 0x1ff, 0x7f, 0x2, 0x7, 0x7, 0x9, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x0, 0x80000001, 0x1, @perf_config_ext={0x6, 0x3}, 0x1, 0xb33, 0x1f, 0xf, 0x5, 0x3, 0x100000000}) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b501) 17:58:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x21000800) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) ioctl$NBD_DISCONNECT(r2, 0xab08) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:53 executing program 3: 17:58:53 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$TIOCSCTTY(r0, 0x540e, 0x5) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000280)={0xb0000, 0x0, [0xfffffffffffffffc, 0xfffffffffffff000, 0x3b09, 0x1, 0x400, 0x5b2, 0x1, 0x1]}) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='-pids a \x00'/24], 0x18) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000100)={0x40000000000000, 0x4, 0xf3b, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:53 executing program 3: [ 1113.141404] device nr0 entered promiscuous mode 17:58:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b600) 17:58:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000080)) ioctl(r0, 0x104800890f, &(0x7f0000000380)="08ed0a9c70d8f86f000000000000cf6f1d2c9c612fe7ec5be0") r2 = inotify_init() getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x0) getgroups(0x4, &(0x7f0000000200)=[0xee00, 0x0, 0xffffffffffffffff, 0x0]) fchownat(r1, &(0x7f00000000c0)='./file0\x00', r3, r5, 0x1100) open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r7) lchown(&(0x7f0000000300)='./file0\x00', r4, r6) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 17:58:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:54 executing program 3: 17:58:54 executing program 3: [ 1113.385028] audit: type=1804 audit(1560362334.146:95): pid=14591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir811018203/syzkaller.XuPvoh/2114/file0" dev="sda1" ino=17553 res=1 [ 1113.432913] audit: type=1804 audit(1560362334.186:96): pid=14652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir811018203/syzkaller.XuPvoh/2114/file0" dev="sda1" ino=17553 res=1 [ 1113.651292] device nr0 entered promiscuous mode [ 1113.812235] device nr0 entered promiscuous mode 17:58:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1669, 0x4000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000300)=""/4096) open(&(0x7f00009e1000)='./file0\x00', 0x8042, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:54 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b601) 17:58:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063044000000000"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x6c, 0x0, &(0x7f0000000740)=[@increfs_done={0x40106308, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/161, 0xa1, 0x0, 0x5}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x7, 0x1, 0x101}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}, @free_buffer={0x40086303, r2}], 0x48, 0x0, &(0x7f0000000480)="3da8a2fa49e10f7134471dae713b67fe8392f4875e6152454dd273b401d82643a6ce20fe46eeaa97d0cfa623442a73f878f98ea86002b8e07abfb00f373f885672f8644f9d9a3068"}) 17:58:54 executing program 3: 17:58:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000007fc0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000008000)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000008100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000008140)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000008240)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000008300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000008340)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000008380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000083c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000008400)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000008500)=0xe8) getsockname(r2, &(0x7f0000008540)=@hci={0x1f, 0x0}, &(0x7f00000085c0)=0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000008600)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000008700)=0xe8) getpeername$packet(r1, &(0x7f0000008740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000008780)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000008cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000008c80)={&(0x7f00000087c0)={0x4a8, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x1a4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x815}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}}]}}, {{0x8, 0x1, r10}, {0xc0, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r12}, {0x84, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r13}, {0x18c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1000000000000}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r15}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x6, 0xb7, 0xa7, 0x6a6b}, {0x4, 0x3b, 0x9, 0xa0}, {0x0, 0x2, 0x2, 0x2}, {0x3, 0x7, 0xfffffffffffffffd, 0x4}, {0x7f7, 0x400, 0xd, 0x4337}, {0x9, 0x4, 0xc18c, 0x7fff}, {0x2, 0x1, 0x1, 0x101}, {0x8, 0x40, 0x80, 0xfd}, {0x51, 0x1400000, 0x200, 0xe9}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x8, 0x628c, 0x7, 0x1}, {0x4, 0x5, 0x8de, 0x40}, {0x0, 0x9, 0x80000001, 0x2}]}}}]}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:54 executing program 3: [ 1114.017174] binder: 14707:14708 unknown command 1074029312 [ 1114.017192] device nr0 entered promiscuous mode 17:58:54 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b700) [ 1114.061791] binder: 14707:14708 ioctl c0306201 20000240 returned -22 [ 1114.099016] device nr0 entered promiscuous mode 17:58:54 executing program 3: 17:58:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x4e20, @rand_addr=0x30f}}) 17:58:55 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b701) 17:58:55 executing program 3: 17:58:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() mount$9p_xen(&(0x7f0000000000)='\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4, &(0x7f0000000480)={'trans=xen,', {[{@access_uid={'access', 0x3d, r3}}, {@access_uid={'access', 0x3d, r4}}, {@access_client='access=client'}, {@mmap='mmap'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r5}}, {@smackfshat={'smackfshat', 0x3d, 'em1wlan0'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@euid_gt={'euid>', r6}}]}}) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r7) 17:58:55 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b800) 17:58:55 executing program 3: 17:58:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04630440e8702ebc4fb28a0000ffff69b7860a2c2327420711c3b5133442b40200114828ab26ac"], 0x0, 0x0, 0x0}) fstatfs(r1, &(0x7f0000000080)=""/187) [ 1114.697339] 9pnet: Could not find request transport: xen 17:58:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1114.801469] 9pnet: Could not find request transport: xen [ 1114.855104] device nr0 entered promiscuous mode 17:58:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x3f, 0x1, {0x3, 0x0, 0x59f0, 0x3, 0x7}}) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xd, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) fcntl$setstatus(r0, 0x4, 0x4000) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000280)={{0x3, @addr=0x7f}, "aceac0c56e445ae6561fc4a224dc79ab8d4b59774e223d4e6ef6ff0a89f1fe91", 0x2}) 17:58:55 executing program 3: 17:58:55 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b801) 17:58:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000300)={0x9, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e21, @remote}}}, 0x108) ioctl(r0, 0x400, &(0x7f0000000680)="11dc0bcfec7bbf7000000068c35e501708550b70783d530757121d8d2bc697132b3aec0697a4123348b815aa457e4763660ef4e9de4a6a1dc28a8fd1de26ca3fb64baee9fc6ff830b7a3e39b1d204f9befb14a3afbf5be5255f5f1d9f3b9018c846aa9f4cc5f1ee46ff504f177d2ab23a5c3fa46f8f0ab6aafb88a4d474229ef3190a9e63cf3ca5e5f79ff8aff1fb43e62294bc1b76268ad1fa9603a8f97535561b486f950ce8a26b9ae18a9cfe5") r1 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r2) 17:58:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1115.076545] binder: 15051:15052 unknown command 0 17:58:55 executing program 3: 17:58:55 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b900) [ 1115.133274] binder: 15051:15052 ioctl c0306201 20000040 returned -22 17:58:55 executing program 3: close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 17:58:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1115.253391] device nr0 entered promiscuous mode 17:58:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800001000008912, &(0x7f0000000080)="11cf89004f0bcfec7be0706adbef67f98850be1c9ff4e00ec57fe73dea767304") inotify_init() r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r2) 17:58:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x100, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x400, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000100)=0xbdd, &(0x7f0000000180)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) [ 1115.548340] binder: BINDER_SET_CONTEXT_MGR already set [ 1115.554340] binder: 15176:15181 ioctl 40046207 0 returned -16 [ 1115.594493] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1115.601482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1115.629521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1115.665078] device nr0 entered promiscuous mode 17:58:56 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x40000, 0x80) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000200)=0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, {0xa, 0x4e21, 0x1, @loopback, 0xe2b}, 0x7, [0x2, 0x3ff, 0xffffffff, 0x7, 0xa18, 0x2, 0x7, 0x2]}, 0x5c) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'nr0\x00', 0x4005}) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x301800, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x2, 0x59c, 0x7, 0x1}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='nr0\x01\x00') ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:56 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000b901) 17:58:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04cc6c8573412804000000000000000000"], 0x0, 0x0, 0x0}) 17:58:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) msgget$private(0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e) inotify_add_watch(0xffffffffffffffff, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) r2 = fcntl$getown(r1, 0x9) r3 = getpid() setpgid(r2, r3) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r5) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0xdc, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="675958a45f62e92ed47fd12fb666cf445cf32a7b93dc5fb6245eb62cedb893d75ef0b42b7fdfcc3daa0ceb87eb20e56cd2dde1fd19b13d2e13024320c60d2e7d7b118fecddc15658e40faa65e041a824da1558c7204eb98080d96af5f61756d4c73dd409cfafbac5d2a07318f2cb4f193b6661e0ee", 0x75, 0x10001}], 0x11000, &(0x7f00000003c0)=ANY=[@ANYBLOB='codepage_umask=00000000000000000003271,session=0x000000000000003d,quiet,fowner>', @ANYRESDEC=r4, @ANYBLOB="06581a986e656602962b56d88f07e77dc0e222646478641df08ead68dbdb41c30c6c884c6d2a61f4535872e6724efc0ffe7822f3592b", @ANYRESDEC=r4, @ANYBLOB=',hash,\x00']) 17:58:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:56 executing program 3: close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 17:58:56 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ba00) 17:58:56 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ba01) [ 1115.996555] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1116.015975] binder: 15397:15404 unknown command -2056467452 [ 1116.026824] binder: 15397:15404 ioctl c0306201 20000240 returned -22 [ 1116.071088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 17:58:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r1) 17:58:56 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000bb00) 17:58:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000100)='$:md5sumvmnet0\x00'], &(0x7f0000000280)=[&(0x7f0000000200)='/dev/binder#\x00'], 0x100) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0463044000000000e379e97d8c82afbe8a839a2ff31ca42b046d9d150aac8e02e927e949695140512e8188723383ed73d264b3638d431630db03de3d986983ddbb38e860053a88fc8a3a1b15116ea7f1896efbeed0c55db50a287f48c24f62d163be1c5647dae6716fcb327d"], 0x0, 0x0, 0x0}) 17:58:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x10000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hwsim0\x00', 0x8000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:57 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") inotify_add_watch(r0, 0x0, 0xa400295c) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}}) 17:58:57 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000bb01) 17:58:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = dup(r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000300)="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", &(0x7f0000000080)="312de07dcced8ecb038b37de67099c0eaab6dfbf32f7dfee304a22201084a081872313e3ff8c51813e77b35c22a22b21b6f4d1e52727db75965c43e4af9237dfa5be9ae8c06143a03ec7b21f6352e6437b8a683b81be88ea03afe8fb2e80560ea52749ced326e5d70b6bcb646879ac0c232b8a07a227b2a304361e78f31127b5ff745b16427ab9b15598f44a55db186e0767e60565db3448e09c9f66747d9ac23610a63a06024e1612492c2609c76325a4a84a648e91b88a43", 0x1}, 0x20) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x4, 0x6, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4}) 17:58:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400, 0x0) openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:57 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000bc00) 17:58:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x3, 0xb, 0x5}) sendmsg$kcm(r1, &(0x7f0000001980)={&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x2, 0x6, 0xffff, 0x800, "64496a940afede7a5f0d426a686d3cff96aef015fdafeb918fb04c815887d755c12b0efae21d8ba34560446e5a6ad93fdd3dc7e6e354dd3b26c83dc35f2f17", 0x14}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000300)="245e6e9fbf2d639eefc26d099cd0f532b28966bdfb41236fd8061b5b8ae64bdacdabcc19976cabf0d89c8d4c4af1c608c0406731c2cf96ceb4d113089d31a26d89add16aa74a47b2c6e7cb9a1c8385d00c34616a8803f51b3d5080281d1269b4b8334bed778ce9c91a484b3f281ae58dfe4c7f709c5edae6b3a3817080c83c483fe2b44ef63cadfb41ebe657195d501323762b5b15a439656e2d5632bc395eb7a3094b96c36493f5e23ae44163a990307ebfdd463a7e12a3cf538e25385edd3da5ba9353351008be7ca49de7a632965ab647f0fc0ebbb5692365669a", 0xdc}, {&(0x7f0000000180)="de93452adfc0d07482e4b1d4e97fd852951a769b3ae7a62d6c09ca721a334445c3d6e77a3fee4a30f3dbad8c8dc1264a865dab828183bfb9b5202e392165bf732053697d38a22369ffe46e625e3f397983b97269660258cdee9017633f6cae44ad4c3bcbd06c438d1eb8b881fc03cbb1f97b2fd41b387a702d8ad25397fe85fc32dd2f60eb722a2ba8be4186", 0x8c}, {&(0x7f0000000400)="239169b7a7a704ba06a27b6fe03f897d", 0x10}, {&(0x7f0000000440)="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", 0xfb}, {&(0x7f0000000540)}, {&(0x7f0000000580)="d13e13afabde3e08bc2b305086b53f633776350cd1efe0419ddd527962d084dce09ba5d0b006e3ddee519503f230e99a33a779b5bf73", 0x36}, {&(0x7f00000005c0)="d600a9b18df57084c2753c9f2380bdf302df1875e2f576d6d376a3812fb5a4b6615f4546f3cbc4019d712b32c30b703ee937711fe4dbbe321d3d5ebfd0081ffe80aadb234db2bf3fc617f595fe3e38fb59fc00c77c84f25a444ba467852f3c12cb79fb286e109399d8df6112103e24ce529c9d7bead4e1c327793684910f31b8ec623fd30206cb8bb12501e63329cdb00bc6541ab5338d4fc4e8d44b9e60478f9e85c0554e68eaeb5a2d38730cb7edb01abd0c700681da6b525302513a8e291940afdc150b18387b8f7f97957e721137dc4bfd6fa563a59dd396", 0xda}, {&(0x7f00000006c0)="f6a24729d974fdd2f10a33a4bac32b89a7623ea0a90472dd0059f8191615fd3ad83675edd69235d0604a86a5d1a45e7db5c80e7be7233a1a449c1789", 0x3c}, {&(0x7f0000000700)="1a9361fd7d80d51671e9a9dc4cd6b0b2b0c4f5c58d56a61c526abf1f899bb02744174083bc0c5b2558acfa34f2c17450af82c00d3e7d7f9d48e4fda8929c202d08b318fd2d41e0a9bde2bb0a23dfc7b68acc10d21ac92de43922b7c7171061819cf70efeef5e5c020ec1dc7ae882db104c5cd3a135570ce847ab097eee5241053aec202020a2c4192fc93d59e1889eb1fa8bf262ad894e1655940bb945adc0d3faf26357b73cf19961cd9b98ec6dc1ac1c586c4ecc351e9cb6b8098d09f3ce0f8f45feff3961e5bb61b940e844b32b7673b061e3c2bc51f66e7f5ded3c24", 0xde}], 0x9, &(0x7f00000008c0)=[{0x88, 0x11f, 0xc294, "ed32b326dde28d41f0134ca6b43c6ba70c5751d99368d214765116db2a38285a1d23508d2dce068b56d420201159a79f93f261d31806b876a12f4a5ac55a4bb60a22069119bfff8c0ff3dfa1ada880e7921f5d970de72e0c92b869c01dce3c44aec6a71add45b7c39f34b98e80c760f76b2e8271325f"}, {0x1010, 0x3a, 0xff, "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"}], 0x1098}, 0x4000011) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = inotify_init() r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000540)='./file0\x00', &(0x7f00000019c0)='trusted.overlay.nlink\x00', &(0x7f0000001a00)={'L+', 0x8}, 0x28, 0x1) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000001a40)={0x0, 0x9}, &(0x7f0000001a80)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001ac0)={r5, @in6={{0xa, 0x4e20, 0xdf, @mcast1, 0x5}}, 0xeca1, 0x44}, &(0x7f0000001b80)=0x90) 17:58:57 executing program 3: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') sendfile(r0, r1, 0x0, 0x88001) sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0) 17:58:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, 0x0) 17:58:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x4000000000000004, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x7f, 0x6, [], &(0x7f0000000080)=0xe2eb3f2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:57 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000bc01) [ 1116.833683] binder: 15873:15875 ioctl c0285629 200000c0 returned -22 17:58:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, 0x0) [ 1116.901412] device nr0 entered promiscuous mode 17:58:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'ip6erspan0\x00', 0x0}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000001600)={r2, 0x3ff, 0x5, 0x1, 0x900000000, 0x2, 0x2}) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000080)={{0x4, @name="21ba0897e7fa2a3d58d7141b7a1f9c8d477f1b433eb73e8a080c0d8a40379076"}, 0x8, 0x7ff, 0x9}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = inotify_init() sendmmsg(r1, &(0x7f0000000cc0)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="304db22806b88c8d2ac48e7a1e35fde52dd4e79c79e75490b39595af5df74fc549a2feffb08a15314921afca5658fdc2be4532dbd49e835c816bf516929763d1e89c8ff9e4c5c90cfcebe99ee49848281a4bb4129533df2dfe637670416c9df1f86d5c4dde5a93ff94b5", 0x6a}, {&(0x7f0000000300)="7621b0396f8bee9547fd05061c791ab2584f7181feb284e7d3cd2347dcd2c51a2267151a078621ddfd091daeb53b11893c5d053e97d312d9ce6a8381950b2aaf9e0c004c263ec80558cba75fe4e1b0fa70f9f36b48c2d3b17bf93afb34153a4f469631529d4761f3fba4e895a184d866936597c03dfe8c7c88e40afdf0e07a55e4efc83210b9f2021966c4eaa9058762b41c10c240760c04cea988caac4ccdcf", 0xa0}, {&(0x7f0000000200)="f4a40cbc7a74578662e952755f66be75f87293d39803dc2e817f722392d316c96529ac", 0x23}, {&(0x7f00000003c0)="223c836cf76dc38b5fa77f6b1e679d1cdb3cea6fdf9ea3844418b8a3f29e1121cd82a1ab8746829a082e2c4a0c707ad312", 0x31}], 0x4, &(0x7f0000001640)=[{0xc0, 0x102, 0x7, "037127ebe359afee3d2c285531d3070f58a28bf8815ac748332e313b056bf3eb856b8f56ee1cb166f7baefc2bc01b4a2200ffbb36b0df5dd9f71e6f20d189ab333f625dba696a960a02a61f6ff2adf791778c9abf56de0465bba7a8a4a0e1b231c35a36ddf24917888af69756e75746e249d98b10c5d4eb5991ea15c5bf8db746140fa1eb7a20cac6d1dd439176d4468b3b7df845d0a0b26b3c02d8018d1866231149bb5a3b3070424e1eb78d3bf"}, {0x100, 0x117, 0x1, "a7f5056fbaf3d2242cace303a4d4e1423c40c6ff833a91ec3db8a2cf39f6aeb22698863cea1d08afba46a16747e5775bef74666accf9569daef8463025a57c8080360214e68658ce63c6a7fb3f4d78eeab1a6e2b355e8d87593505087945962aeb137605e3e3f626e87aec4fdedbcb920324a1faeccf4a349b53d905504b900217dd08b6c73753ee29b1cf84651f0c0fd7eb7b74e8928d89256f5bd1ae00164c112f6fb6ce0f5e76ceb111e7faf9b309ec0b49c1a00af003c7b4bbf75692aa167f8f76fc954c21a6b55fc2985f3ed67ba69af2cbed4d2fab7e9f4dad375b0c2ad5863eac0c6e0c8387e3"}, {0x70, 0x10f, 0x81, "14ac0ed6b1d8c941536b781dcb7107e2df877ca647af4ac558f1e782683303fb377cb62f299dc37dfab9d00a6e5080f28553f8b12861a7579babcbc2e8d9fd48eeebb13885f2ed3516e32b7fe3197227466dae2411e298a585"}, {0x110, 0x100, 0x10001, "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"}, {0x80, 0x10f, 0x6, "b430fbe7638abba3b6e2e0e8eaeeff135dcf7e0fc7557a8fcd6865acdbf324eff78e59a769b27531bb18043b31b166de4f841126948df09b9f11fc6d2505c85365ce33580e9b7f106e2ca88a800b7ef1b0f74930568705e012ae73879890a405157ff4ea1b62059783d1e4795734e6bc"}, {0x1010, 0x113, 0x7, "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"}], 0x13d0}}, {{&(0x7f0000000440)=@un=@file={0x0, './file0/file0\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)="897275cf2fd086381579ffed", 0xc}], 0x1, &(0x7f0000000540)=[{0x98, 0x117, 0x40, "671d5a463c1009b6c6f699dd40018900ae1e6a3961c3f08b9814c7b03e5c21ea21148fe58ba948cdb9ca532a9f8cb88313c68861fa3231212e911a9478a45c2ae9d97a0ebc47d22ea86cb7d39ce178b7480c3f6915912cb0001e8c3ceb687ae1ea94e8cc19950502b87b81591ed987d18bb4b9e41b3c5f0c01a9938f1407e5172af3160a9c"}, {0xa8, 0xff, 0x1, "c2d40f1923e6ffc67dda24cac75f5254cda834e3918da66336d80489a52ab388e7c107db94b160c9bce1f7bc31dbd29850b8a2c48ebb3759f65d16a83fb7e13468440c4d690f2603489f3feb992a4e3e577d2ddae5ad0e871621e36e1c7a54ee0d6648f7caa6b0c4a050206c67759e36c25d1e9da4205809ed1d3bc258eef39cfe00e4693ca8e96908fe343c3eb67e81c03e46261d2a42"}, {0x60, 0x102, 0x81, "7c60232717501faba6e3747f1e30260460591997530a6430182f6cb04ed6631cb28a325c7983b883b9123f24636dd9178e6c9fb7911bad051db1eeac6406a80fbcfa88eeeba222d41ff9e05a"}, {0x30, 0x189, 0x5, "44fcb23a7f907ffa1012759296b05dd3d87ad3bb60d1f1776565"}, {0x70, 0x117, 0x101, "0c4aa53e21e5d5bbb3a2b2ff8374abcd78424fb690668ffe19fed74ea2d85078a4cfd9330045c9a6c379095f66fe8f8bda13d090933d9dec50520c83d6203ebea758edee48c1f910942b6ee9f2becb4a042880acd3a4ac3d28cb"}, {0xc0, 0x13b, 0xfff, "ffadea0a2ecdea4a7a26a68583371316391eff07030944ec821a1d546c530ed013a3ddbfb9f1505806d399f74621a5e4bb5d746c1793203ad98974331afc5941c03fb435b6f4be62ee9a3c133f7a5261fa14c925118c4450ef2f9043292f74b55b0e0f97861b37f448a3d1bba56d75febe8598ddef884a538f498092af5134d9745697aa7a58751fcebc64c558c98aab17b533171afeb6ce7ae030b34b214ccb25bb79459e3eda2625dfab"}, {0xc8, 0x11d, 0x3, "947eaec2910f238d2e06bc66cccc6682417c426e38536d2be25cdaf629d29ea4fefad0561018c1b618b15ed8a4c872a238e694527e9afe9a3a562272d97fd32598dae0769085a3f959a70fb00a45c406a0fa88696f3b11aeebb78e1f7372da38b48a4ca9cd2277ffaf646d3e5f81361ed23028a56b8e377dec8df8cccc1f394823ac835d979741124c30fcaa2e74b2bedef9e17d2037381c99ae335133b7d9279f9784a51b3eaf8e9fb0934ae550d26a6e"}, {0xe0, 0x109, 0xfd, "45d297971870bb21da501359733ea4c904f3e9a46d269d8bf6df6a634524a56e0d960b00512b35e87ddc839deb3c18a0f1318c236e32714c61503ffeb9d12080edadfbd4af14ca4d64ae804ff52c57fc9201bd7b0105ff6fdcd50bd6c8ad973b60dddedc14d82d9f4110cd41e6432dcc6d8e38eda80144d3169e5215b67c6608cafed4bc47770779273a4da04d3ad9961da6f815744e6a47068e9fa2d0a849e80182e993e0d4facd3216ff8bb74a1e8daeff4ded08441d8a47b973c90b333b8d7c1d288f0bc078ea9f7b2263ecd680"}, {0x38, 0x101, 0x7, "0ad5bf0d4f63ea89cc7086f10fee72c07726e338c984b9611f1e01534e461c07dd2f54e9ad9fb896"}, {0x40, 0x111, 0x100000001, "01d07fa2d5c0952b9e6bb16701438034cfb7e8abbc5c242ec22de159b78850212aa3f95a5c63ccf9fa9b8e3e"}], 0x520}}, {{&(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x0, 0x3, {0xa, 0x4e21, 0x9, @mcast1, 0x9cd}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)="fcad98799d8669ccbce4f61a5a47ca245db2cdd9b58ff5626a77d030c10447a425fa9bf3b9e1db7d4f201d870be8bf81588d942311fc57291ccda98d0e16b468042b1022423221a042e2e7924147604da44be7d89a2da208708b7b6a0bdf56eec061769f13f7849d155db90e485a366b3cbc3ba94511aeaece19b55e13f5ce907727eb9857e2fb89d5ceef58a32dd4f956b6dd9bf0ea2a552e044d1add17178a490e85ac31d96cad2b198fc84c6ff4f9dd4e4bee0fff9985928000b392da300ee30dbc0f5f7aefc06cbbd9d64a8d133cf499911f345a", 0xd6}, {&(0x7f0000000c00)="dd2e4400477afe9ff096c52215f76a03a77f2798ae7833bdbab433a2a9c0ce34207e7a570e3a6e81c273610e8f8e2b74f4a5d2cd64a89fd74ed8ce621b63ed6aa8210fba4c795747cce53f2617df35602349f0b0afb24279d40e65411e905b", 0x5f}], 0x2}}], 0x3, 0x81) open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x2a) inotify_add_watch(r3, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) 17:58:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463044000f92000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="046304090b000000dc38e0fe385df335e899a959337281deb5fa6e9d497569444b3dc4f713a569666b7dd8ce555326d1093f23baa37c1bdb4870bf6e131014e09b80ac701eb364d2fe3c17de1053210dfba3750eb63e9d6511"], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4000, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, [0x6f, 0x0, 0x0, 0xff]}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0x400}}, 0x4ca, 0x7, 0xc5, 0xfffffffffffffffb, 0x6}, 0x98) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000180)=0xff, 0x2) 17:58:57 executing program 3: syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) syz_genetlink_get_family_id$team(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x5, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 17:58:57 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000bd00) [ 1117.076208] QAT: Invalid ioctl [ 1117.080252] binder: 16087:16089 unknown command 151282436 [ 1117.086270] binder: 16087:16089 ioctl c0306201 20000240 returned -22 [ 1117.086370] QAT: Invalid ioctl 17:58:57 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000bd01) 17:58:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:58 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000be00) 17:58:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40c00) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) [ 1117.519086] QAT: Invalid ioctl [ 1117.532611] QAT: Invalid ioctl [ 1117.542350] device nr0 entered promiscuous mode 17:58:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x4000000000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x800) getsockopt$llc_int(r2, 0x10c, 0xf, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)={0xffffffffffff367c, 0x1, 0x5, 0x1, 0xc3, 0x3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:58:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfe95) 17:58:58 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000be01) 17:58:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bcsh0\x00', 0x4100}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r2) 17:58:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, 0x0) 17:58:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 17:58:58 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000bf00) 17:58:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x2a5) fcntl$setstatus(r1, 0x4, 0x42803) 17:58:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x100, 0x1d, 0x6, 0x10000, "66012f81b10ba6f04b9f4d509fc2ff461477b82458fbe6668af9fb148c190ee5"}) lchown(&(0x7f0000000100)='./file0\x00', r3, r4) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0xb341}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={r5, 0x308b}, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0xffffffffffffffe7) 17:58:58 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000bf01) 17:58:58 executing program 3: mkdir(0x0, 0x0) inotify_init1(0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1118.101439] binder: 16743:16752 unknown command 65535 [ 1118.119032] binder: 16743:16752 ioctl c0306201 20000040 returned -22 17:58:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r3 = dup3(r2, r1, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@loopback, 0x4e20, 0x8, 0x4e21, 0x0, 0x2, 0x80, 0x20, 0x0, r4}, {0x2, 0xd6, 0x0, 0x1, 0xa8, 0x5, 0xbece, 0xb5}, {0x4, 0x34, 0x4, 0xb392}, 0x5, 0x6e6bb9, 0x0, 0x1, 0x1, 0x2}, {{@in=@multicast1, 0x4d2, 0x32}, 0x2, @in=@multicast2, 0x34ff, 0x4, 0x3, 0x5ac6, 0x1, 0x6, 0xfff}}, 0xe8) 17:58:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0xcac0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0x4) 17:58:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000080)) r2 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:58:59 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c000) 17:58:59 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xc7}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1118.465403] device nr0 entered promiscuous mode 17:58:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0x3ff, 0xd65, 0x9, 0x3}, &(0x7f0000000200)=0x14) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f00000003c0)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r2, 0x4}, &(0x7f0000000380)=0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x68, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0d63000052634840000000000000000000000000150000000000000011000000000000000000000060000000000000001800000000000000d0525c538665c289b820329003f0290b0c", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB='\x00'/169], @ANYBLOB="a900000000000000010000000000000005000000000000008561646600000000060000000000000000000000000000002600000000000000"], @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="000000000000000018000000000000004000000000000000"], @ANYBLOB="400400000000000007630440010000000f630c400100"/32], 0x26, 0x0, &(0x7f0000000600)="783845b5fdb66753d49a06eaf1a3080c1e3389e61f55b864db1b24c710582999638d0cbf85d5"}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r3, @in={{0x2, 0x4e21, @local}}}, 0x84) 17:58:59 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c001) 17:58:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="24000000260007031dfffd940101830020200a00090000000600001600f0ffff0d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac43a6268e3406cf055d90f35a3", 0x4c}], 0x1}, 0x0) 17:58:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r0, 0x0, 0x0) 17:58:59 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c100) 17:58:59 executing program 2: r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000080)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1) r2 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:58:59 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c101) [ 1119.060159] device nr0 entered promiscuous mode 17:59:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getrlimit(0x8, &(0x7f0000000000)) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') socket$kcm(0x29, 0x2, 0x0) 17:59:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 17:59:00 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c200) 17:59:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x8002) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x7, @empty, 0x1ff}}}, &(0x7f00000003c0)=0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={r5, 0x4}, &(0x7f0000000100)=0x8) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e23, 0x2, @local, 0x7797b90000000000}}, 0x4d1dea3d, 0x1ff}, &(0x7f00000000c0)=0x90) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f00000004c0)="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", 0x1000) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000440)=ANY=[@ANYBLOB="010003000180c2000003ffffffffbfff000000000000"]) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000480)={0x6, 0x31364d59, 0xff, 0x8, 0x2, @stepwise={{0x7, 0x3}, {0x80, 0x5}, {0xefd3, 0x6}}}) 17:59:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1) 17:59:00 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c201) [ 1119.371926] Unknown ioctl 1075883590 [ 1119.385559] Unknown ioctl 1075883590 [ 1119.398350] Unknown ioctl 1075883590 [ 1119.422455] Unknown ioctl 1075883590 [ 1119.440035] Unknown ioctl 1075883590 [ 1119.460055] Unknown ioctl 1075883590 17:59:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r2) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0/file0\x00', 0xe, 0x2) [ 1119.474493] device nr0 entered promiscuous mode [ 1119.480962] Unknown ioctl 1075883590 [ 1119.510195] Unknown ioctl 1075883590 17:59:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xcaf, 0x30000) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="043a00408000200033e30d412305f4f02c5f520b9b98763c14975686a676e99535d3aae45d865b65625088cf625cfd15faee7a22d00a7324afd47f07e08895afecf8db1e51c1c5c7676addadc269521908fb0f46e8fd23985a09f6442c94d58e688f1c38ddcaa80ef815f3ab4a85ec364359748b799c66d3d63d64ee716e79f35360055be22ac1fc630c5806aab065df45f62814c1736bce465fdc35e9c6ff0c758ce715625c93dd6e20992616d05c497b76a7bf3a7ef63a966ef63c718a3a"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:00 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c300) 17:59:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0xa, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="006d656d6f0c7b8d664ebe727920"], 0xe) [ 1119.528739] Unknown ioctl 1075883590 [ 1119.565286] Unknown ioctl 1075883590 [ 1119.570102] Unknown ioctl 1075883590 [ 1119.587028] Unknown ioctl 1075883590 [ 1119.596674] Unknown ioctl 1075883590 [ 1119.614600] Unknown ioctl 1075883590 17:59:00 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c301) [ 1119.641352] Unknown ioctl 1075883590 [ 1119.661396] Unknown ioctl 1075883590 [ 1119.675207] Unknown ioctl 1075883590 [ 1119.684059] Unknown ioctl 1075883590 [ 1119.709683] Unknown ioctl 1075883590 [ 1119.718119] Unknown ioctl 1075883590 [ 1119.731682] Unknown ioctl 1075883590 [ 1119.746904] Unknown ioctl 1075883590 [ 1119.756534] Unknown ioctl 1075883590 [ 1119.777332] Unknown ioctl 1075883590 [ 1119.804899] Unknown ioctl 1075883590 [ 1119.839032] protocol 88fb is buggy, dev hsr_slave_0 [ 1119.844209] protocol 88fb is buggy, dev hsr_slave_1 [ 1119.849420] protocol 88fb is buggy, dev hsr_slave_0 [ 1119.854504] protocol 88fb is buggy, dev hsr_slave_1 [ 1119.859672] protocol 88fb is buggy, dev hsr_slave_0 [ 1119.864935] protocol 88fb is buggy, dev hsr_slave_1 [ 1119.873316] Unknown ioctl -2126991741 [ 1120.072964] device nr0 entered promiscuous mode 17:59:01 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c400) 17:59:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x1b, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r2], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) 17:59:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 17:59:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") eventfd2(0x3, 0x1) r1 = inotify_init() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001500)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x3, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="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", 0x1000, 0x7}, {&(0x7f00000000c0)="72dc16a109d6548263a505b09da3f571854ffe4c0382f63f29a9c8c3214549fb98dddb278e763e2d91b6bd678ae1e8bfb6b963ef97aa7b50c8460bf4d42bbdd198c9400d1212e5cbfdef68be2afaa639aa", 0x51, 0x4}, {&(0x7f0000001300)="7a659e12d4472809a480b7c2695bf722f7ada25543a83b24261bccc9dd526ee6b2d48c703ef1b73d985638d16f7a7d5502854ef90fe6b6b388175fd156082bf7c32a81bd1881318761c24fee36cef22f31b907b5a1d595e97db6aa2a799678e08c5ea1efa0c16374a8020bc1065afed9920d5a5fce2d3f96f988a23d8e4afaba4aa76d6005295ae27253a6b37acdec6f7f086f096f04af0caaf4fa0f99749f8d739bdd047f104360335583ffaf6308d5c79d82ab1edf95c15bcdc63a9cf563e1b96dbb9c39312be8661943a4927aa0e8946f", 0xd2, 0x5}, {&(0x7f0000001400)="a177e7f2c11caf06a101c3bb636d3a613251e0144140b66e93e5fa54a7ecebd03bf6eee4cc16b77f77f980adc3cfa94b1a43d582753450ce5201d0eae68d5d29063578ea422780be9e975cf29b4cfdf237057c6a7844370a5406cabc711a33efa67d5d4d7a868e07923f5257eea8335ae011a2efdffa07796902f610250d129bf1ab5d358a2ae43b59d1e6e957c1e9e1c57c8f28858aad068aa1ec90215436f8a08584ad3cdf7aaf1fc584c543ba292cff5726aebd2cbc36ab8584b2b8f848cb2d", 0xc1, 0xffffffffffffff4e}], 0x800090, &(0x7f0000001600)={[{@fmask={'fmask', 0x3d, 0x90d}}], [{@appraise='appraise'}, {@euid_gt={'euid>', r2}}]}) open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:59:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ip_vti0\x00', 0x100}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r4 = fcntl$getown(r0, 0x9) kcmp(r3, r4, 0x3, r2, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 17:59:01 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="21be6c46b2403c143216159664b548b87fed5424c3", 0x15}], 0x1}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000880)={0x1, &(0x7f0000000840)=[{0x9, 0xfffffffffffffeff, 0x0, 0x8}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='trusted@(#ppp0eth0%[cgroupcpuset\xb3proc:/(/\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="2e0000001c00810ee00f80ecdb4cb9f207c804a00c00000088000afb0a0002005209da1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0xffffa888}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000580)=r2, 0x4) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000540)='cpuset.effective_mems\x00', 0x0, 0x0) [ 1120.345007] binder: 17854:17865 unknown command 3 17:59:01 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c401) 17:59:01 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000006880)={0x0, 0x0, 0x0}, 0x2) close(r2) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)) close(r1) [ 1120.367018] binder: 17854:17865 ioctl c0306201 20000040 returned -22 [ 1120.386846] Unknown ioctl 1075883590 [ 1120.399588] Unknown ioctl 1075883590 [ 1120.407815] Unknown ioctl 1075883590 17:59:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0xfff, 0x0, 0x1000}]}) [ 1120.425373] Unknown ioctl 1075883590 [ 1120.430543] Unknown ioctl 1075883590 [ 1120.435181] Unknown ioctl 1075883590 [ 1120.465719] device nr0 entered promiscuous mode [ 1120.475000] Unknown ioctl 1075883590 [ 1120.499533] Unknown ioctl 1075883590 17:59:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=[@increfs], 0x0, 0x0, 0x0}) [ 1120.516748] Unknown ioctl 1075883590 17:59:01 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c500) [ 1120.548376] Unknown ioctl 1075883590 [ 1120.565419] Unknown ioctl 1075883590 [ 1120.578585] Unknown ioctl 1075883590 [ 1120.599255] Unknown ioctl 1075883590 [ 1120.619891] Unknown ioctl 1075883590 [ 1120.628162] Unknown ioctl 1075883590 [ 1120.639206] Unknown ioctl 1075883590 [ 1120.643522] Unknown ioctl 1075883590 [ 1120.654910] Unknown ioctl 1075883590 [ 1120.665977] Unknown ioctl 1075883590 [ 1120.676949] Unknown ioctl 1075883590 [ 1120.688184] Unknown ioctl 1075883590 [ 1120.709041] Unknown ioctl 1075883590 [ 1120.713158] Unknown ioctl 1075883590 [ 1120.734286] Unknown ioctl 1075883590 17:59:01 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c501) [ 1120.756196] Unknown ioctl 1075883590 17:59:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="0452628000000000000000f68ffd5b98f1780d83cbc0793decd92ad46761261fbb8cdd63233bf7a5ceaaf418"], 0x0, 0x0, 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001740)='/dev/mixer\x00', 0x40001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000017c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001780)={0xffffffffffffffff}, 0x117, 0x1}}, 0x20) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001880)=@add_del={0x2, &(0x7f0000000000)='ifb0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000001800)={0x4, 0x8, 0xfa00, {r3, 0x6}}, 0x10) r4 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000016c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) io_setup(0x1dd0, &(0x7f0000000080)=0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000015c0)="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") r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0xa100, 0x0) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000001580)={0x6, &(0x7f0000001540)=[{}, {}, {}, {}, {}, {}]}) r7 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1, 0x200) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001700)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000001900)) r9 = open(&(0x7f0000001480)='./file0\x00', 0x400000, 0x50) io_submit(r5, 0x3, &(0x7f0000001500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x5, r1, &(0x7f0000000280)="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", 0xfa, 0x1, 0x0, 0x0, r6}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000380)="9f4a06fadb75e4a6b427a9c2e65e53bd07c9467ee6875403ca57b0abc5f2e18512efd80df17ee37f2889db0c0b9af2597a6ba15681a35bad48e02bc5899e2b40d5b049394eba5dfda16df594ba5b3fee2b99e4074e76e1ab6c7b9b1fdb248fef9c3cfdaa893f6acf6ec9363bce8944a9e2a84310d59f3dd0c2f950a435d6beddc548dd0c258ab64d998181937d3403a69714fb85d2414889a47a745cb35be7b4ed63d2bad62ccc75be1a5c3c600408c031128ea77abef2dfe7f481e214804a36a0", 0xc1, 0x1, 0x0, 0x3, r7}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0xf, 0x7, r0, &(0x7f0000000480)="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", 0x1000, 0x3, 0x0, 0x3, r9}]) 17:59:01 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000580)='ip6_vti1\x00') 17:59:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x44, &(0x7f0000000000)=0x779, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0080e) 17:59:01 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c600) [ 1120.970549] binder: 18189:18192 unknown command -2141040124 [ 1121.014966] binder: 18189:18192 ioctl c0306201 20000040 returned -22 [ 1121.052482] binder: 18189:18192 ioctl 41009432 200015c0 returned -22 [ 1121.075075] device nr0 entered promiscuous mode 17:59:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x84800) write$P9_RMKDIR(r1, &(0x7f00000002c0)={0x14, 0x49, 0x2, {0x10, 0x1, 0x4}}, 0x14) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x4, "43c50aaa"}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={r3, 0xfffffffffffffffb, 0x3, 0x5, 0xffff, 0x7, 0x3, 0x45f0, {r4, @in={{0x2, 0x4e20, @loopback}}, 0x3, 0x8000, 0x6, 0x4, 0x7a07a938}}, &(0x7f0000000240)=0xb0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)={0x1, 'g'}, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:59:02 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c601) 17:59:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0, 0xfffffffffffffd9d}, {0x0, 0x2f0}, {0x0}, {0x0}], 0x5, 0x0, 0xfffffffffffffc89}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00d67) 17:59:02 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000180)=0x9, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x800000800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000001380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/4096, 0x1000, 0x1, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000001280)=""/233, 0xe9, 0x0, 0x23}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000100)={0x0, 0x28, 0x50}}, 0x440}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:02 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c700) 17:59:02 executing program 0: ioctl(0xffffffffffffffff, 0x1000008915, &(0x7f0000000100)="11dca5055ecfec7be070") r0 = inotify_init() r1 = open(&(0x7f0000000040)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) accept(r1, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000000)=0x80) 17:59:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000000c0)=0x400) [ 1121.526002] device nr0 entered promiscuous mode 17:59:02 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c701) 17:59:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000300)={0xc0000000, 0x0, "46dc23331f15a3c7b2ec20850cd8765a383fc085aa15bb3507373cde679c37a0", 0x7, 0x8, 0xd0, 0x100, 0x6, 0x400, 0x0, 0x9, [0x7f, 0x2, 0x3, 0x5]}) lchown(&(0x7f0000000180)='./file0/file0\x00', r3, r4) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000080)=0x5e, &(0x7f00000000c0)=0x4) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x125000, 0x20) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000000)=0x4, 0x4) [ 1121.868745] device nr0 entered promiscuous mode 17:59:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xa, 0x0, 0x100000000000914, 0x8000000005}, 0x2c) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xd1, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) r1 = gettid() perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x4040a, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x853, 0xb7, 0x6, 0x3, 0x0, 0x0, 0x8, 0x80000001, 0x8, 0x888, 0x6, 0x33b, 0x0, 0x159, 0x0, 0x0, 0xe4, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x6}, r1, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) 17:59:02 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c800) 17:59:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0xc0, 0x0) execveat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f0000000780)=[&(0x7f00000001c0)='-[\x9fbdevppp1nodev\x00', &(0x7f0000000200)='keyringvmnet0+&@selinux)\x00', &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&', &(0x7f0000000240)='\x00', &(0x7f0000000280)='nr0\x01\x00', &(0x7f00000002c0)='wlan0\'\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='em0+)mime_type&\x00', &(0x7f0000000740)='\x00'], &(0x7f0000000840)=[&(0x7f0000000800)='posix_acl_accesscpuset\x00'], 0x100) socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="4fd152557177ad0a274652add7b82f209b95106eb3cac02b87370374152c896a47a84f59e236e43ead1cadf783243bac53083b2503c563e0c5604178fc2505a1339a91a33d2869d8f041c276adc305dd1feb5aa43e77f3f4a2f558cca987fc956123c5e8ae2de4a880eb8f6131481576201393bd25b4601bbe6b6b45d393425d3f63d487057fb7a440f45a5009d1f13d533ef1d8975bb06440cca5aa9859be83b2ba2222410a823047c1fba46e3c97840784b4a8da624f73372f001e917230f3d38f080c28af5fa7f5201819ced17bded099201cb464da812a3791e0800455dd1bf2d34b102240eb7cc30f38", 0xec) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, r1, 0x0, 0x25, &(0x7f0000000880)='wlan0system^systemwlan1,selinuxeth1\x16\x00', 0xffffffffffffffff}, 0x30) ioprio_get$pid(0x2, r3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x143400, 0x0) accept4$alg(r2, 0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:02 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c801) 17:59:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000040)='nr0\x01:\xf2.\xa3\'>\xf8]\x81$?\xfa\xbf1UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x06\xa4%\xf4\x94\xa8>\xb1\xb1\xa2_&') 17:59:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/186, 0x7cd) getdents(r1, &(0x7f0000000000)=""/2, 0x72) inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa4002d5c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000100)='./file0\x00', 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:59:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) chdir(&(0x7f00000001c0)='./file0\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 17:59:03 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c900) 17:59:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463044b33748b0200000000"], 0x0, 0x0, 0x0}) [ 1122.274016] device nr0 entered promiscuous mode 17:59:03 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000c901) [ 1122.369099] binder: 18860:18865 unknown command 1258578692 [ 1122.400434] binder: 18860:18865 ioctl c0306201 20000240 returned -22 17:59:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0963044000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:03 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ca00) 17:59:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) chdir(&(0x7f00000001c0)='./file0\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) [ 1122.641123] binder: 19075:19077 unknown command 1074029321 [ 1122.655962] binder: 19075:19077 ioctl c0306201 20000040 returned -22 [ 1122.898735] device nr0 entered promiscuous mode 17:59:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl(r0, 0x7, &(0x7f0000000000)="ddd7623efdfaa45e1682c8f79b383078cc204cc5ffb5db6d2ddf861e535be33342a075916c0b20a6775117332d4fe756c5f07d57021d4dd7ee856307da421ffc06f5c86333233a4845d527128a7b77d59aa44cf74d876acad4d54934587203ced27911735791cf8f8d7eadf1bba0d09366067b4a46d7e41f3873227076cb") 17:59:04 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ca01) 17:59:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40400, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 17:59:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000300)=""/4096) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r3) 17:59:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) chdir(&(0x7f00000001c0)='./file0\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 17:59:04 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x4040a, 0x5, 0x0, 0x8, 0x1ff, 0x10000, 0x5, 0xc6f, 0x1, 0x0, 0x6, 0x0, 0x2, 0x5, 0x6, 0x853, 0xb7, 0x6, 0x3, 0x4, 0x58aa, 0x8, 0x80000001, 0x8, 0x888, 0x6, 0x33b, 0x0, 0x159, 0xffffffffffffffc1, 0x0, 0xe4, 0x0, @perf_config_ext={0x3}, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x0, 0x6}, 0x0, 0xd, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@ipx={0x4, 0x0, 0x8, "f3cbafb12fc1"}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) 17:59:04 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000cb00) 17:59:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x10000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) chdir(&(0x7f00000001c0)='./file0\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 17:59:04 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000cb01) 17:59:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80600, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f00000000c0)={0xf, {0x2, 0x100000000, 0x64ab85fd, 0x7}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) [ 1124.267302] device nr0 entered promiscuous mode 17:59:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) sysfs$3(0x3) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000000)="912b1a5f191c57d819ba8f3e4eca96bf6c61369cde0321e723b2d23144346d64b19034dfaed651d423d296a8de5c36a158bb4d48cd20dced7de79c4a1fe53cdb9028d1e02469de13a571f1776658f6c10fbc64a2a9b7f76f728ce9859c28a66aa38d87c5dabcfd933473a0cbc3c031f304504e37332e1342033d896008a9fff89e139bad07cf7c4fe00ada1c9384f500d36de05ed35aae5c680be3a1476ab18524ef78f230e7cc", 0xa7) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 've\x00', 0x200000000005}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) 17:59:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000cc00) 17:59:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000180)={0x30, 0x1, 0x0, 0x1, 0x41a, 0x101, 0x2, 0x9}, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r3 = fcntl$dupfd(r0, 0x406, r2) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xffffffffffffff7f, 0x0, &(0x7f00000001c0)=[@increfs], 0x319, 0x0, 0x0}) 17:59:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r2) [ 1124.743458] binder: 19624:19630 ioctl c0306201 20000100 returned -14 17:59:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000cc01) 17:59:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000240)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000200)={0x9, 0x14, [0x0, 0x7, 0x9, 0x1, 0x7ff]}) write$UHID_INPUT2(r2, &(0x7f0000000180)={0xc, 0x5c, "fe4cd78bc24110669b4152524a0198bbbc28d014806eeaec7c744baba01dbe5c15b065a2f9219005d51df85c2c99dca428a0792f7223a568e45de8fc0955bb90e4027682138fac6a1de5d9b4869566674a19a596e2db6f7b3636ab91"}, 0x62) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000080)=[@increfs], 0x0, 0x0, 0x0}) 17:59:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fstatfs(r0, &(0x7f0000000040)=""/109) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = inotify_init() open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r2) 17:59:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000cd00) [ 1125.197523] device nr0 entered promiscuous mode [ 1125.481831] device nr0 entered promiscuous mode [ 1125.602608] audit: type=1400 audit(1560362346.366:97): avc: denied { map } for pid=19959 comm="syz-executor.4" path="/root/syz-executor.4" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 1125.654790] audit: type=1400 audit(1560362346.366:98): avc: denied { map } for pid=19959 comm="syz-executor.4" path="/sys/kernel/debug/kcov" dev="debugfs" ino=15024 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 1125.796917] IPVS: ftp: loaded support on port[0] = 21 [ 1126.108144] chnl_net:caif_netlink_parms(): no params data found [ 1126.138023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.144580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.152136] device bridge_slave_0 entered promiscuous mode [ 1126.160187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.166619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.174162] device bridge_slave_1 entered promiscuous mode [ 1126.308381] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1126.318322] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1126.457837] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1126.465183] team0: Port device team_slave_0 added [ 1126.470984] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1126.478207] team0: Port device team_slave_1 added [ 1126.484108] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1126.494698] device bridge_slave_1 left promiscuous mode [ 1126.502161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.565823] device bridge_slave_0 left promiscuous mode [ 1126.572046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.862078] device hsr_slave_1 left promiscuous mode [ 1129.904455] device hsr_slave_0 left promiscuous mode [ 1129.964258] team0 (unregistering): Port device team_slave_1 removed [ 1129.978171] team0 (unregistering): Port device team_slave_0 removed [ 1129.990688] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1130.023641] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1130.116961] bond0 (unregistering): Released all slaves [ 1130.173968] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1130.252305] device hsr_slave_0 entered promiscuous mode [ 1130.289818] device hsr_slave_1 entered promiscuous mode [ 1130.349834] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1130.356863] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1130.371912] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1130.415606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.460968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1130.475773] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1130.483393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1130.497603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1130.507775] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1130.514546] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.524882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1130.532964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1130.541650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1130.550292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.556652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.566505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1130.575098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1130.583227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1130.599629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1130.607295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.613705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.625221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1130.633537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1130.647739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1130.655666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1130.667636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1130.675433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1130.684736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1130.701120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1130.715319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1130.723173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1130.738192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1130.749258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1130.767194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1130.775503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1130.790259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1130.800898] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1130.806947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1130.824830] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1130.837269] 8021q: adding VLAN 0 to HW filter on device batadv0 17:59:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1) 17:59:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:11 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000cd01) 17:59:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = inotify_init() r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0x9, 0x9}) 17:59:11 executing program 3: r0 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r0, &(0x7f0000000300)={0x2, 0x1004e20, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000c00)=0x2, 0x4) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) read(r0, &(0x7f00000003c0)=""/139, 0x8b) 17:59:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x963, 0x0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000240)) socket$kcm(0x2, 0x0, 0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r4, r5) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x24, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @remote}, &(0x7f0000000140)=0xc) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r7, 0x1, 0x6, @random="91d7e111de76"}, 0x10) [ 1131.138399] binder: BINDER_SET_CONTEXT_MGR already set [ 1131.149254] binder: 19971:19986 ioctl 40046207 0 returned -16 17:59:11 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ce00) [ 1131.200596] device nr0 entered promiscuous mode 17:59:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x48000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@deltaction={0xb4, 0x31, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x15, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x7, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0xc, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x14, 0x2, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0xc, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x18, 0x1e, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x20000010) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = inotify_init() r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8044, 0x0) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) write(r3, &(0x7f0000000080)="e58517de92fe9a9ef0d15de68cbcc8c69ae3e7c64a777d09ded9c546a651de9c344b8cda64533394aa797e479afef3b50a370ac5a99c6fec66456fa2ad81fb3f9e4e46d4bfedb2f2c48a2ffecb317f24b96ae63c24cbff02bd00768aac02347a308026f39340da7ba199211d66756b527260b852db8a480cc69747dbcd3659c6a54786cc10", 0x85) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) syz_open_pts(r3, 0x10000) 17:59:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = dup2(r1, r0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) recvmmsg(r2, &(0x7f0000000000), 0x2cb6d742e7363f3, 0x0, 0x0) 17:59:12 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) close(r0) 17:59:12 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ce01) 17:59:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x49ce, &(0x7f0000000280)=""/213) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) dup2(r1, r0) 17:59:12 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000cf00) 17:59:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 17:59:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipmr_delroute={0x1c, 0x19, 0x309}, 0x1c}}, 0x0) 17:59:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x81012, r1, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r2, r4, 0x0, 0x8000fffffffe) [ 1131.926011] device nr0 entered promiscuous mode 17:59:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000040)={@rand_addr, 0x0}, &(0x7f0000000080)=0x14) bind$can_raw(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x81, 0x8, &(0x7f0000000a00)=[{&(0x7f00000001c0)="100fec13afb5879a76506dbe2ec144a4b9bd0942d7374ae65b1feb6c3c601fa3151a105c0c147d295f6349923ab643aea3000698552dcd4841344db4d4d4ed30691e534ae64d579a5e387e6ebbcd9dab5c9a35d5640ee9dfb7c1afbca0f3f9c361c4c3be679faf66781b3251c0fb35b40596d7afb284b0c66333b6cc112a84d7dede3c20f99799290748a28fd8c943710bb372eec697983065f6f30ec5711ad442ee95baca391ce67a53d3d371ff9743d3c4fea7f4955ca7e02478a7f839d17312", 0xc1, 0xe42}, {&(0x7f00000002c0)="49cad344f3954d8edb8a136da012d4acb2e2887e4bb89ad0d815", 0x1a}, {&(0x7f0000000340)="3157e7c2155b867888c34f948fdc2b7f415edb1d88cd85b9d6b655633db4f5c9c7011825fb45371d7f25a9d3a3feb59a3c04444ad2e5dfe1c803b48dbcd942df9d04ccd4870bac1a1c75a6cccab21cd285561e29fdf13168f3a0104217b1336957ee53d1021db4ec7aa9aaed78de18751ca01af87e029369ff634656f8f2b9dc6ede57839fdf2201eabcdb401862788c5ecd46796d551ee49f0d48fe77cde8a57d66037a5947a02099804f61b6fe9d1836c11721423e6dc9e036ddccf69cfabe611d2e51103a7b786c9d7cc478014f0ed73200ddcc4a42544478f553d44c2df92dd7799d158475bab3d117f0ac", 0xed, 0x80000}, {&(0x7f00000006c0)="c55d1158b07f51b31b31a57d6880352128ad9e4f1c6f5b09f5e12ddde47aed9cdb801544eef0f4202a7215ee0ffa87885e6ad76685fe0d46a3963453fe0a4fa982440da0ed7eff2c39116c95e08e8fb0ab0acf0164f85de11e15a41da8a375609452aa61cb02f6e7d5f9b207d324be432509b70f32fdf788b26faf64e0ee3163a20144203de69d46366045d3b687446ba0494aa275e35ef63d8d816c9daf3c2e1668e53aa362f4b243a27cea7974ee74116c568a32c582bd796b966d99ac92876df01bad99346d59e5d46d", 0xcb, 0x1}, {&(0x7f00000007c0)="15958ea5589ab15be19015d3f9e2171b03f4e0ab530f090ce60574a3f9f4d9f43e59878a183e24b1af577c52a46f514dfb1e384fcb512ad9ad163ef71407635d8d764fa48d16243505e76bfe3a005a449419a3ef42cd098d2401a1e221e1313827f5686798ed59fbe6287101917f79114f9e9aa047d81ae789c9a08ce6d9bdefe51f759930e1b4b85d252fb067a540440e0a5e16e68f3905d8ba792f1cfd23e3e63a3ef7823746b1173bd459de94fa7b6cf4c427c7bf8acb94aba9180bb1894cd4e71ef380da4b7aaa", 0xc9, 0x8}, {&(0x7f0000000440)="d6067bb8c2fcfb096109784ac958a3bc34afecc0347a0862cb79dcabdce21421af6d3c662edaabcd3d988a4d990c3118dd948cb2a989faffcceb7550e213351e200d874781c67808df806f37d4e39ff25c1c565838", 0x55, 0x3}, {&(0x7f00000008c0)="88990222f2b6276f3096a4282c099f1d723ef0a1aeb11dd667021341fbef55acc1f43d402a83134962ef3453861522e776a79dd7090c1af3fd1aff096bf04ce437655a278bfb419661c5c5d398fbade7bb44519102fbda1300de1425720eefe158ab37ce48969fc64d4b125a35c6a564d28f52de932b7ab920dc7067e3bc3466cbf87e3927d52b3317aca95c9f26355ce23c", 0x92, 0x3}, {&(0x7f0000000980)="6a55be1e92b6f9c28ef696edc2651d1fb9ecb7108aa6484614163d573bffd99ae1119f270aadedaa5eab4e1e00b2e2a70a73bb699f9d9aee01eccc31e16b33efe1495a311e86bcb13b0d75381b7a29f8e0e93fd38373b9bb835d7fc095f1e63ebf54fa757c30ab66ea4b842c00", 0x6d, 0x10001}], 0x10000, &(0x7f0000000ac0)={[{@creator={'creator', 0x3d, "7baa2caa"}}, {@umask={'umask', 0x3d, 0x19}}, {@file_umask={'file_umask', 0x3d, 0x6}}], [{@subj_user={'subj_user', 0x3d, '/dev/net/tun\x00'}}, {@dont_hash='dont_hash'}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfsroot={'smackfsroot', 0x3d, 'wlan1&'}}]}) 17:59:12 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setgroups(0x4, &(0x7f0000000300)=[r0, r1, r2, r3]) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) 17:59:12 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000cf01) 17:59:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0xfffa08f38f0, 0x5f70b710}) 17:59:12 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB="d13088140ee401db24bca71f7cab6fb790587e23defea446c63aa26f0ea0c1cfaf5a28f652b1e5f6f582f3501fd313a8ccb227b6ce34e6f1678604dbe2bbb9a9c57dd4140b6f3d7ebb6bd435a7eca1eaf6857e5cd048372ae4a6", @ANYRES64], 0x0, 0x62}, 0x20) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000100)={0x4, 0xebf3}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000015000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000800)=""/125, &(0x7f00000001c0)=0x7d) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:59:12 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r1, 0x9) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) write(r1, &(0x7f0000000000), 0x1000001e4) pipe2(0x0, 0x84800) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ptrace$peek(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') write$P9_RCREATE(r2, &(0x7f0000000540)={0x18, 0x73, 0x1, {{0x40, 0x0, 0x2}, 0xff}}, 0x18) r3 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) fsetxattr(r4, &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000100)='em1vboxnet0\x00', 0xc, 0x3a70004d1609af18) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) sendfile(r3, r2, 0x0, 0x2000005) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000440)={0xfff, 0x4, 0x0, 0x6, 0x73, 0x8}) [ 1132.241096] EXT4-fs warning (device sda1): ext4_block_to_path:105: block 4294576371 > max in inode 16567 17:59:13 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d000) [ 1132.357672] device nr0 entered promiscuous mode 17:59:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0xfdfdffff}], 0x0, 0x0, 0x0}) 17:59:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0x0}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000080)) [ 1132.394470] hfs: creator requires a 4 character value [ 1132.403519] hfs: unable to parse mount options 17:59:13 executing program 3 (fault-call:4 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1132.493407] binder: 20746:20747 unknown command 0 17:59:13 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d001) [ 1132.518387] binder: 20746:20747 ioctl c0306201 20000040 returned -22 [ 1132.541668] binder: BINDER_SET_CONTEXT_MGR already set [ 1132.583505] binder: 20748:20750 ioctl 40046207 0 returned -16 17:59:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0xfdfdffff}], 0x0, 0x0, 0x0}) [ 1132.977036] device nr0 entered promiscuous mode [ 1132.987120] hfs: creator requires a 4 character value [ 1132.992774] hfs: unable to parse mount options 17:59:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x4) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0x71fe, 0x100, 0x2, 0x401, 0x8, [{0x7fffffff, 0x9, 0x4, 0x0, 0x0, 0x1200}, {0xfffffffffffff38b, 0x8, 0x14a0f918, 0x0, 0x0, 0x80}, {0x3, 0x9, 0x6, 0x0, 0x0, 0x200}, {0x3, 0x81f, 0x3, 0x0, 0x0, 0x800}, {0x0, 0x1, 0xf50, 0x0, 0x0, 0x2001}, {0x811, 0x20, 0x9}, {0x80000000, 0x9b8, 0x8001, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x1}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xb4, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000080)) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@v1={0x2, "8b1e00eae3d0b9649481107856ab"}, 0xf, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:14 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d100) 17:59:14 executing program 4 (fault-call:5 fault-nth:0): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:14 executing program 0 (fault-call:7 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1133.362348] device nr0 entered promiscuous mode [ 1133.374514] binder: 20974:20975 ioctl 81009431 20000480 returned -22 [ 1133.395164] IPv6: ADDRCONF(NETDEV_UP): nr0: link is not ready 17:59:14 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:14 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d101) [ 1133.410254] binder: 20974:20975 unknown command 0 [ 1133.415361] binder: 20974:20975 ioctl c0306201 20000040 returned -22 17:59:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x2, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1133.456744] binder: 20974:20975 ioctl 81009431 20000480 returned -22 [ 1133.487003] device nr0 entered promiscuous mode 17:59:14 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)=0x40084) 17:59:14 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d200) 17:59:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef620440000000ca"], 0x0, 0x0, 0x0}) [ 1133.665900] binder: 21110:21117 unknown command 1074029295 [ 1133.677937] binder: 21110:21117 ioctl c0306201 20000240 returned -22 [ 1134.003602] device nr0 entered promiscuous mode [ 1134.149622] FAULT_INJECTION: forcing a failure. [ 1134.149622] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.169414] CPU: 0 PID: 20973 Comm: syz-executor.0 Not tainted 4.19.50 #22 [ 1134.176452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.185807] Call Trace: [ 1134.188416] dump_stack+0x172/0x1f0 [ 1134.192060] should_fail.cold+0xa/0x1b [ 1134.196047] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1134.201167] ? lock_downgrade+0x810/0x810 [ 1134.205333] ? ___might_sleep+0x163/0x280 [ 1134.209590] __should_failslab+0x121/0x190 [ 1134.213834] should_failslab+0x9/0x14 [ 1134.217642] kmem_cache_alloc+0x2ae/0x700 [ 1134.221811] taskstats_exit+0x6c8/0xcf0 [ 1134.225796] ? taskstats_user_cmd+0xcf0/0xcf0 [ 1134.230331] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1134.234900] ? acct_collect+0x699/0x860 [ 1134.238888] do_exit+0x3ec/0x2fa0 [ 1134.242356] ? find_held_lock+0x35/0x130 [ 1134.246496] ? task_work_run+0x118/0x1c0 [ 1134.250570] ? get_signal+0x384/0x1fc0 [ 1134.254468] ? find_held_lock+0x35/0x130 [ 1134.258537] ? mm_update_next_owner+0x660/0x660 [ 1134.263229] ? _raw_spin_unlock_irq+0x28/0x90 [ 1134.267736] ? get_signal+0x384/0x1fc0 [ 1134.271710] ? _raw_spin_unlock_irq+0x28/0x90 [ 1134.276247] do_group_exit+0x135/0x370 [ 1134.280154] get_signal+0x3ec/0x1fc0 [ 1134.283891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1134.289442] ? fput+0x128/0x1a0 [ 1134.292741] ? __sys_recvmmsg+0x410/0x790 [ 1134.296986] do_signal+0x95/0x1960 [ 1134.300553] ? kasan_check_write+0x14/0x20 [ 1134.304799] ? setup_sigcontext+0x7d0/0x7d0 [ 1134.309175] ? __sb_end_write+0xd9/0x110 [ 1134.313255] ? do_sys_recvmmsg+0x102/0x1a0 [ 1134.317504] ? exit_to_usermode_loop+0x43/0x2c0 [ 1134.322182] ? do_syscall_64+0x53d/0x620 [ 1134.326260] ? exit_to_usermode_loop+0x43/0x2c0 [ 1134.330941] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1134.335546] ? trace_hardirqs_on+0x67/0x220 [ 1134.339972] exit_to_usermode_loop+0x244/0x2c0 [ 1134.344569] do_syscall_64+0x53d/0x620 [ 1134.348480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1134.353765] RIP: 0033:0x459279 [ 1134.356966] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1134.376056] RSP: 002b:00007f3e9e656c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1134.383784] RAX: fffffffffffffe00 RBX: 00007f3e9e656c90 RCX: 0000000000459279 [ 1134.391061] RDX: 0000000000000386 RSI: 0000000020002e00 RDI: 0000000000000004 [ 1134.398339] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1134.405624] R10: 0000000000000022 R11: 0000000000000246 R12: 00007f3e9e6576d4 [ 1134.412900] R13: 00000000004c65a5 R14: 00000000004db2f8 R15: 0000000000000006 17:59:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x84) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000040)) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'nr0\x01\x00', 0x4007}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:15 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040), 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)) 17:59:15 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d201) 17:59:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x20, @ipv4={[], [], @multicast1}, 0x8}}, [0x3, 0x5, 0xfffffffffffffffb, 0x3, 0xa93f, 0x0, 0x2000400, 0x5, 0x6, 0x4, 0x4, 0x5, 0x8, 0x7]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x8001}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d08080022367699165d0fe9160c499bbefaae64ec5923f0f3d4eaff49b5c20061bb9f3146df6ff309dd1b9f1b3c157cc008d7d9e9cd91d6ba043572f900cd2a3e6297d4d5495dcf3e8b8dce1d63b4131d416f53572fa5b920a305d0bd882dbc3b51471801c417c786e7dc7476d25306d3da"], 0x0, 0x0, 0x0}) 17:59:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4b47, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) [ 1134.532456] binder: 21305:21307 unknown command 526445 [ 1134.582349] binder: 21305:21307 ioctl c0306201 20000240 returned -22 [ 1134.598119] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready 17:59:15 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x80000001, 0x2) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000380)) 17:59:15 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d300) 17:59:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x105, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xff, 0x101102) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x9, 0x1a, 0x8, 0x4, "aafc06cfef5505cb2579f28b92e508e4a5e7c3b4e1379da20a2a985ef9f9df0d"}) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0xfffffffffffffffb, 0x0, 0x3, 0x80000000}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000180)={0x8, r4}) 17:59:15 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0xfffffffffffffffe, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x4b49, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1134.857026] binder: 21533:21536 unknown command 0 17:59:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x8000, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x2, 0x3, 0xfffffffffffffff8, 0x9}, 0x10) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r4 = dup3(r3, r1, 0x80000) timerfd_settime(r4, 0x1, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000001c0)={r5, 0x5c, "1d2a9553d3bdff69801fbd2241f120e056ac3a6a721cdfdb344d4ea882b6f079ada37eca31c09047ae40fdcc11b2a8786bb3b1925dc8f927fc324858e29d1c10c4082e64883a870204ddf3122a18d78733d486b569d7bba223bda270"}, &(0x7f0000000240)=0x64) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:15 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d301) [ 1134.888988] binder: 21533:21536 ioctl c0306201 20000080 returned -22 17:59:15 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) 17:59:15 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d400) 17:59:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 1135.074515] device nr0 entered promiscuous mode 17:59:15 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x400000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10082) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r4}}, 0x18) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000600)={0x0, @empty, @multicast2}, &(0x7f0000000640)=0xc) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x2) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x28, r7, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f00000004c0)=""/246) r8 = fcntl$dupfd(r5, 0x0, r5) ioctl$EVIOCGREP(r8, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000380)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 17:59:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe4a}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x404c800}, 0x14) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/147, 0x93}, {&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f0000000280)=""/132, 0x84}], 0x3, &(0x7f0000000380)=""/212, 0xd4}, 0x81}, {{&(0x7f0000000480)=@sco, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/99, 0x63}, {&(0x7f0000000880)=""/8, 0x8}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/58, 0x3a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000a00)=""/82, 0x52}], 0xa, &(0x7f0000000b40)=""/18, 0x12}, 0x20}], 0x2, 0x0, &(0x7f0000000c00)={0x0, 0x989680}) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f00000007c0)={0x68d, 0x8001, 0xfff, 0x1, 0xe0, 0x24, 0x14, "e23867b5599599619cd22b7652b7fb7470acfc0b", "ece48471cd638575bd92e7829e4c39580fd1ba7e"}) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d401) 17:59:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04630440000000002f7c356a90474ca5b645b67043b3fdb6353ccbd5051c7a737b9009799542c9fa068139753a67f73008d64621292749a57a1814b415645a0b61f0617f920f9d061d3ce5171e8a199749e90609bfda8d15111ca073ba05da18553901e49fe1d489b4fbed2d2ede621fd710b5226dbd5270a81ba6f7892e6c0605adf35a225d768a8904ac103691eebc2131ab72e5fead177e0aa1e81e0fe393f198fbb6b8d5569bd9ff746359bdc7a1fa9a8f2b117a89e3e58efb7f3c4a6a5c205c51d355f5ec4b03d6c7250682a624fbba3deab5a8892790c0a63cc20e274da4da54c9b9ac90cb9ccb"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xffffffffffffff79, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) openat$cgroup_ro(r3, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f00000001c0)={0xa, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="d461f91b35fbe5eb0bce296a937a5050664c7a9dcf41525210d3b89b2605c2211f8cf09084ee269a5178fca0213e1db81836ce7f1bd99176c956c7b0238dcd46e87caf328cbede9a5caead41", 0x4c}, {&(0x7f0000000280)="9bb05d1c65232c91de34a20d6646df625f049a4cd3744c11661ec5fa27e85cae1d6c4e3f6471ce5f88da6daaf06e88b179d575c9c532cd261f768d6b4af8b3510915645e2b1d60120baa1bb835483a16af57145bc96e7874b4612c159ca38205ba83642aabb483e8319cbb00e5421b2aa869e9780d93daa438b3d409b106c0a8f5991c01e657170b11dc56c2ae2f681b81279b491976b37d3af7e860ca80484dd228f85b1d1568954b286ced11215d46478e78349707da020b20a8369cb6bf72346ecc52b078d4c44e5655fab1a30c3d2e1de7840da3b7270f2366ec038e401e945cc2af111b980ec525ae15c869480df1aa8ab91810e5", 0xf7}], 0x2, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x9}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffffffffffb}}], 0x68}, 0x8800) 17:59:16 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d500) 17:59:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x541b, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1135.608379] device nr0 entered promiscuous mode 17:59:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x45, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) sendto$isdn(r1, &(0x7f0000000140)={0x9, 0x0, "900ee1c4495cb12c9adbb82eb95e4bb3c7779d4837ca70bcd4f92163d075a4c2742db4f0fb6b1ffdd55ff1dc682f6f8515e895f4d8f0c1b0db7158af58c580e6fc68bd39ce47bf70b299a618e8ec97321c7b8bcf32a95d5adcc48b4b4b30271b05f26ffe692026dfe4c4ceda33797552433e6a875792a7c6fe3aa84aedad203b6e4c6c743991ac02b379b6e534e173c952af60f2b4426934fcd6a0be53fe88e25740ff7ef8206b1afcdb61b87ad1eb72c4c6b167"}, 0xbc, 0x0, &(0x7f00000000c0)={0x22, 0x4, 0x5, 0x3ff, 0x3}, 0x6) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) close(0xffffffffffffffff) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x1, 0x4, 0x5, 0x8, 0x20, 0x28}) r3 = socket$kcm(0x2, 0xfffffffffffffffe, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ftruncate(r1, 0x40) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') sendmsg$nl_netfilter(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x378, 0xf, 0x4, 0x2, 0x70bd2d, 0x25dfdbfb, {0xf}, [@nested={0x2b8, 0x78, [@typed={0x8, 0x3f, @ipv4=@remote}, @generic="6c6a4c21644a74657a8f1a97dc2eeb1df723ce91bbfb78d57fbc496a60f3099da00d76aaa8ac2537da1e1d63894c52dfbc75d1a5d839879814979ede75699c47996d2883327cd3bc75b12f8317ed414a9e15df6b59d5d20ee90c3e4f1b6f4e83577dcefff55ab91e9ff124b0b1a6214202", @generic="df0066bcfea22456c6746b6f0530acb615372a089fb0c766b1dcffa93a8631ce495a5067a8034b37517353332d58f84785c097ff3c2f4604a896b386fdda9fd576f11f93a5103b82bc5ca91702582c021ef4598d0eadcf88d26afc63cbf93235b2bd829ead8756d77e3fcbac9c1b5024fe0b5bdf18b29c154a08c348ac6c2f92557c5bf04df87e5e322ce77affa6ba818fe23f401086f8caf20fdf75e06ad46d48442f393454c3930c2e722a887e7a613881fab27ec9a9f78b9c61560a14460857ab609fedc052fed6539f", @generic="29140f0d355e39d3ea9d6658c1dc46186549ee4c78af1e2d2c016e89b108fb063b870f715524d734af0f17c8ef7ba355eb11b30f54fb07b42cc980da711d6604f03220b784b7ac9c1ac1e25b65602cd5b1962c09b3b43bef7f5cc55e5e04c39eb1a2181dbc59a21a2ba85cbcf34acf58c89d96cca4e6012f3f7cff4c0e6405872e6e4350e495caab8d655d99491b16f380ec8cae4d0006adec5660d2c37065f2330ae10cc84585f88907bc3fab4a68", @typed={0x8, 0x2, @ipv4=@broadcast}, @typed={0x8, 0x7d, @fd=r3}, @generic="273fd291f76f3754f30622cf893f23b4a0522825e9acaafd941a8700d927db637d49cf3698a1bcbbd6e1a742fdf6ce94cbbe6b8a95b655aa52b2ae5240355f5b4cc8d5c7778919e0b1778b926f0bd29ede77e9ca2d47933aca9463b2f23f38c4082f5aa7a92bca97f7", @generic="d5e0209f100320658f891aff93bdd9472e192417b515d2ba2e9238aac96ba850994e4b7a902b7ea2ffcd5558e31300c628656b72964907a9fc1aa3090a77ea2ba666e1694617aa"]}, @typed={0x48, 0x63, @binary="d726dff122218f11fac9520e6eaa0ce337ef0253dac8084f4bc2a99623b6b6ecb1ce139e32607cfef796c07c6431747048d030db7b0f73d8a361607f444bf9c25165b89b"}, @typed={0x14, 0x26, @ipv6=@dev={0xfe, 0x80, [], 0x19}}, @generic="9b3972e860afdd360eac870b4e8bf0e3dee0af519c26ae617eb2e2bc157bd2b3f2e0bae13d865baf93e3dfd482b43702e6e7ffce0d9fa038b3bd8d79b04fc61e449b6f93b7cba2f6049c91ee575faa97"]}, 0x378}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17:59:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r5 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet_dccp_buf(r5, 0x21, 0xf, &(0x7f00000000c0), 0x0) 17:59:16 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000040)={0x3, 0x45, 0x81, 0x1}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d501) 17:59:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5421, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:16 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x400) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000380)) [ 1136.024383] device nr0 entered promiscuous mode 17:59:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f0000000280)="e070ce8d97f7989bff8a3cd2f022f9c6d22256a06ae8abef5362256ae555399f08e2aff2615cca14921df91e099291761509ce197228d8df5f453cc4a9eecd82842a2f5e6c83921fb519404be17c1adc4cf3900f146a7a2e4ff821769d06a76cdaff8674a6ea5270dfff2b215310c39d7f80542701af52834ea24cb7d02a714edc66741b6473d42fbf60caf05682d7eb3045bfcbee9b35e487bba64b8b9c546a8631b393718d340593c879") r1 = socket(0x11, 0x803, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x105000) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x100000000) r3 = socket$inet(0x2, 0x88001, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r3, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d600) 17:59:17 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = semget(0x1, 0x0, 0x20) semop(r2, &(0x7f0000000000)=[{0x1, 0x8, 0x800}, {0x3, 0x9, 0x800}, {0x4, 0x2, 0x1800}], 0x3) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0x8c61) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0xfffffffffffffffd) 17:59:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x182) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000200)={0x1, 0x0, 0x100, 0x7, {0x5, 0x7, 0x9, 0x1}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r3 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000100)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) 17:59:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5450, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d601) 17:59:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:17 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) r2 = msgget$private(0x0, 0x4) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000003c0)=""/4096) 17:59:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5451, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="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") 17:59:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d700) 17:59:17 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000040)={0xf44, 0x1ff}) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r3 = dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0xbf, @multicast2, 0x4e21, 0x2, 'nq\x00', 0x18, 0xffffffff, 0x57}, {@remote, 0x4e23, 0x0, 0x260, 0xffff, 0x9}}, 0x44) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000100), 0x4) [ 1136.770825] device nr0 entered promiscuous mode 17:59:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d701) 17:59:17 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d800) [ 1136.942240] IPVS: set_ctl: invalid protocol: 191 224.0.0.2:20001 17:59:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0xa) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000200)={0x7, 0x3, 0xf6, 0xffff, 'syz0\x00', 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000000c0)=""/67) 17:59:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d801) 17:59:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x20000000005, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40100, 0x0) 17:59:18 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000000)={0x48}) 17:59:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000340)={@ethernet={0x306, @local}, {&(0x7f0000000100)=""/7, 0x7}, &(0x7f0000000180), 0x40}, 0xa0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1', "d7e6a55dda5cca34fd3fdbe0e078606167c60096b52ce3eb2560e0abd7198564a3ecf3ddaa0e88fd3ea1254703a27e34a8c1e32103ee29"}, 0x3b) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000200)={0x4, 0x5}, 0x2) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000280)="89ffdaef22260ac2df5bab91cd917a99eabba6a35e2b7c43df8f7cac8e7103e1d744772da48f2341cab76e4e3d203918190d01ca78262a16fad19b6aea1cb14f9d7363fc1f02db7ea2f498b6543d40f8f6027f6907dfafa64d4739f76dc3425b1e9899ab80f95b1cc5257dc95a4a601240baee35b62b35510c738e8835beac42eec3fb9976840e8bb9c1039a9c238a78cd1953", 0x93) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d900) 17:59:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000d901) [ 1137.607183] device nr0 entered promiscuous mode [ 1137.645531] IPVS: set_ctl: invalid protocol: 191 224.0.0.2:20001 17:59:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x4b3, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x5, 0x0, [{0x80000000, 0xffffffffffffff89, 0x6d02, 0x9, 0x4}, {0x80000019, 0x9, 0x401, 0x5b, 0x8}, {0xc0000000, 0x800, 0x3f, 0x0, 0xff}, {0x40000001, 0x7, 0x400, 0x522b, 0x3}, {0xc0000000, 0x0, 0x90, 0x101, 0xa0}]}) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0x78, "6e7db9abb03a5189a542b4e00a404b03f92c25a53a4914fd8f88d2611e8d382fb29bf28021402da376a43517acfef6283ee5a6169a334283df67273f9923a7b8b316b3b3130c3239cbfc6ef18d087fbe8bcebcbc919a5590e65763af262de2b35cba56671b23740722ef4314a13e9804a3b986daf912507d933ea448617c7a7b"}) r3 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0xfffffffffffffc3f) dup3(r3, r1, 0x0) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:18 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000200)=0x4) keyctl$describe(0x6, r1, &(0x7f00000003c0)=""/171, 0xab) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r3, 0x40047459, &(0x7f0000000240)=""/174) flistxattr(r2, &(0x7f0000000480)=""/244, 0xf4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:18 executing program 2: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5460, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000da00) 17:59:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000da01) [ 1138.051742] device nr0 entered promiscuous mode 17:59:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netfilter\x00') ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000000c0)) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2180, 0x0) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000040)={@null, @bcast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:19 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={r2, @in6={{0xa, 0x4e21, 0x5, @empty, 0x1}}}, 0x84) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r3 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f00000003c0), r4, 0x3}}, 0x18) ioctl$EVIOCGREP(r3, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463044000000000f66f4e67dab5dcfd2128001a6e0d919acbabb8e614da60f6d18c571d62d3f54b82d277797a2519612f1847a611d94274ee43a8d15c4e87225a80260000000000000000"], 0x0, 0x0, 0x0}) 17:59:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000db00) 17:59:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8901, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1138.526029] binder: 23200:23207 ioctl 6612 0 returned -22 17:59:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000db01) 17:59:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000080)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x4, 0x50, [], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=""/80}, &(0x7f0000000200)=0x78) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) 17:59:19 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x208082) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x200200, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000380)) 17:59:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:19 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0xffb8) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)=0x6a2) r2 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r4 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x8000, 0x0) r5 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000280)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000380)={0x800, 0x0, r5, 0x0, r6, 0x0, 0x100000001, 0x10000}) 17:59:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000dc00) 17:59:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0) 17:59:19 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) get_robust_list(r1, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000300)=0x18) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x4000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000003c0)=""/246) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r4, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000dc01) [ 1139.010687] device nr0 entered promiscuous mode 17:59:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r3 = dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) write$P9_RSTAT(r3, &(0x7f0000000080)={0x5d, 0x7d, 0x2, {0x0, 0x56, 0xf4c2, 0x5, {0x0, 0x1, 0x7}, 0x81000000, 0x1, 0x6a40b843, 0x0, 0xa, 'eth0eth1lo', 0x2, '++', 0xf, 'vmnet0\\lomd5sum', 0x8, 'bdeveth0'}}, 0x5d) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0909104003001000000000000000000000000000066304400200d3fcb906a82920fd83dc556e4efe09632117af0c92877bb32772050000001d2e6aae7a9a92d2"], 0x57, 0x0, &(0x7f00000000c0)="eced1345b84d68f07b28c4e9e852965c7f5b4da544fa07f13321029ead83fd5e41268055b169d00fad18812feaa5651e2c4b1b7599cd4815e40f36137eb6bb090df945506de69c6a12a3c56252762801169e0e6d7fd0f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000dd00) 17:59:19 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000dd01) 17:59:20 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) [ 1139.238443] binder: 23657:23658 unknown command 1074792713 [ 1139.262700] binder: 23657:23658 ioctl c0306201 20000180 returned -22 17:59:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8903, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000de00) 17:59:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2002, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000100)={0x7, 0x21, 0x2}, 0x7) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) [ 1139.603901] device nr0 entered promiscuous mode 17:59:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:20 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000de01) 17:59:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8, 0x2000) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000280)={"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"}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = socket(0x11, 0x803, 0x0) r3 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r3, r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000100)='user\x00', 0x5) recvmmsg(r2, &(0x7f0000002e00), 0x386, 0x22, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) setsockopt$sock_int(r3, 0x1, 0x25, &(0x7f0000000080)=0x4, 0x4) 17:59:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/context\x00', 0x2, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) 17:59:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8904, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000df00) 17:59:20 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x1205000) [ 1140.162980] device nr0 entered promiscuous mode 17:59:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000df01) 17:59:21 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={0xffffffffffffffff, r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000380)) 17:59:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x400, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:21 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x20, 0x400000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x40}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xe0da, 0x240080) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@rand_addr=0x5, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000100)=""/246) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$EVIOCGREP(r3, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000380)) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={r2, 0x0, 0x8, 0xffff, 0xff00000000000000}) 17:59:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x7, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e000) 17:59:21 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = creat(0xffffffffffffffff, 0x82) accept4$unix(r1, 0x0, &(0x7f0000000000), 0x800) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) [ 1140.858607] device nr0 entered promiscuous mode 17:59:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r1, 0x0, 0xffffffffffffffaa, 0x10, &(0x7f0000000000)={0x2, 0x4000000000, @empty}, 0xfffffff6) r3 = dup3(r2, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000180)={0x4, 0x6b, 0x1000, {}, 0x6, 0x8}) setsockopt$sock_int(r3, 0x1, 0x1c, &(0x7f0000000240)=0x7, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x84, "4ed9c3e08499f32d006d8220d7cbabd7728f0709095fb4febe5768e233c77994d538e9c2deedc99b8658850877af7a4bde9caa37bbdc8a101a47aec9b5397be5f14f405d8d10342cc5fe601c06444c9c55035ecf9a0c83363187390f67efed95597f625a924663275e76acbc41aedc771c03bf61a627d982fc51751318bf6d4ae4d51860"}, &(0x7f0000000140)=0xa8) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) sysfs$3(0x3) 17:59:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e001) 17:59:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8905, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:21 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0xfffffffffffffffe, r0) r2 = semget(0x2, 0x7, 0x2) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/70, 0x1000000, 0x800, 0xeb}, 0x18) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f00000003c0)=""/231) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000000)={0x90, 0x4f900, "2d73cbdc1ab1ec8f64580d71f5352eed1f5b49efb8bb8be1", {0x4, 0xcf5}, 0x100000000}) [ 1141.200148] device nr0 entered promiscuous mode 17:59:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e100) 17:59:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x2, 0xc00) r2 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0xffffffffffffffa2, 0x8000) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000006c0)=""/246) tee(r1, r2, 0x7, 0x5) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGREP(r3, 0x40047459, &(0x7f0000000240)=""/174) write$FUSE_DIRENT(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xa8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000380)) 17:59:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e101) 17:59:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x240041, 0x80) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:22 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x1}], 0x1, &(0x7f0000000200)={r3, r4+10000000}, &(0x7f0000000300)={0x9}, 0x8) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000780)=""/174) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000380)) 17:59:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e200) 17:59:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) bind$can_raw(r1, &(0x7f0000000140), 0x10) pwrite64(r1, &(0x7f0000000080)="f287cfead194edc9b380fe0cb22e64f3e081f1da0418118edaee9e76a15a10fc1d48ee74a421da189c5184bb544c0ec525b995309a6e33", 0x37, 0x0) dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4000, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x400) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x0, r3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0463040000000045bc756741a13f5f675a325ee75f99e6fdec5737c8a6cfe9771b0f827305b27c2090a86c71debef931857afd665c366bd871a4187da895001590ea67bfe332aaa5adb2e30bf66b1fd1dc7a22f3d1ae2b272310a79b789560cc108b1db7b6238979aca2c703a8725b2c1623678dc3eed7fa68397348d8d23e72c0e2431380910e0e350ce486ceaad0856ccafbb482100c4a6f19df912557cee9ab852e16fbd37a0454a0740a8da801c5a14b20616bda7ed465d28170e5e322ece68ba45e2ba182d5accef7106627a7ed23"], 0x0, 0x0, 0x0}) 17:59:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8906, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e201) 17:59:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x4, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1142.117485] binder: 24686:24687 ioctl c018620c 20000180 returned -22 [ 1142.154060] binder: 24686:24687 unknown command 287492 17:59:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e300) [ 1142.165155] device nr0 entered promiscuous mode [ 1142.181969] binder: 24686:24687 ioctl c0306201 20000240 returned -22 17:59:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e301) 17:59:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}) 17:59:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e400) [ 1142.446495] binder: 24901:24903 unknown command 0 [ 1142.465394] binder: 24901:24903 ioctl c0306201 20000240 returned -22 17:59:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e401) 17:59:23 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f00000003c0)=""/174) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000380)=0x10000000000) 17:59:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40402, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b'], 0x0, 0x0, 0x0}) [ 1142.688142] binder: 25010:25011 unknown command 0 [ 1142.726944] binder: 25010:25011 ioctl c0306201 20000240 returned -22 [ 1142.743047] device nr0 entered promiscuous mode 17:59:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8907, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e500) 17:59:23 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x80000, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xa3e1, 0x40000) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000100)={0x400, 0x71bd, 0x0, @remote, 'erspan0\x00'}) r3 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="146304400000000075c5a99a0662e57073cc052c48160086f5a3d2e3f0df0f2d443f7aea935675db159e26eff299db4c996b588394f25c6559906acc552db05559d38539d7e47cb988f0a3586272181d9af94b006d556596eaa6296a573e2a383aac9045f4"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x10000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = dup3(r0, r0, 0x80000) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000006c0)={@remote, 0x0}, &(0x7f0000000700)=0x14) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0xf, 0x1, 0x3, 0xfffffffffffffff8, 0x2, r2, 0x2, [], r3, r4, 0x2, 0x2}, 0x3c) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:23 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) write(r0, &(0x7f0000000000)="d80b61d91ddf9811b5a12493f17bbc5451d6af8690fe20a346efd3003590d473a9bf849e73c3b0e890c2978d7f975417b9246dbef9265850b39f293750b474e8550095cda936ac1c675f5b4a04d54fb58d564657fc897c4292c74bc09afe2ff9a3c69b7be2d015811ecb5094a02ced337c1a9567a8372eaacfd431a7da65baa5f42bc2ab74a31c788cb66e9ce78e2114bfac39e5ec5afb34c16a7b291f63503f011b00cd518f7403dec65c37d4c35fae685c862c8fc1993595ea2d4338872a76e3894eddbfd07b4e89494cdc6aebc3d925341b0eb5561e7a8e36d31b95ada9", 0xdf) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x8) 17:59:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e501) [ 1143.150511] binder: 25124:25126 unknown command 1074029332 [ 1143.179296] binder: 25124:25126 ioctl c0306201 20000040 returned -22 17:59:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8908, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:24 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000003c0)=""/246) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x3f) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e600) 17:59:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000a0004000000b095030007000000bde69f0008000100"], &(0x7f0000000100)=0x1c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x2, 0x80000001}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80000, 0x5) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8909, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:24 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = geteuid() r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000040)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x59c4, 0x0, {0x1, 0x4, 0x4, 0x0, 0x1000, 0x1, 0xffffffffffffffe0, 0x7fff, 0x8, 0x9, 0xfffffffffffffff9, r2, r3, 0x800, 0x4}}}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000100)=""/246) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$EVIOCGREP(r5, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000380)) setxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0x103, 0x8}]}, 0xc, 0x0) connect$l2tp(r5, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x4, 0x9, 0x3, 0x1}}, 0x2e) 17:59:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e601) 17:59:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'nr0\x00', 0x6}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1144.148318] device nr0 entered promiscuous mode 17:59:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e700) 17:59:25 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000480)=""/174) fstatfs(r0, &(0x7f0000000000)=""/148) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x101, 0x0, 0x401, 0x1, 0xa, 0x8, 0x0, 0x81, 0x9, 0x5, 0x5, 0x81}) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x2000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0xfffffffffffffe90, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="25053135b0962d6c70dc95bf0336f7"], 0x0, 0x0, 0x0}) [ 1144.303431] binder: 25794:25795 ioctl 5402 20000000 returned -22 17:59:25 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000003c0)=""/246) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f0000000000)=""/124, 0x7c) fcntl$dupfd(r0, 0x0, r0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:25 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e701) 17:59:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r2, 0x107, 0x3, &(0x7f0000000080)="0b59e5a4172fb2a126c5f57bb3ad54e44bafb4da287f1472e98a9cc108a8e8ae9ebd02ecad3fdbde6bc50ca7518a90d018e3822c76f51402466b8ec52af285c1ee7610df5162eb9ce704c0e22d3c01c5825e6e9ccf6d6c2686792f3260389dcb1c1b26e54b229cd26bf5", 0x6a) dup2(r2, r1) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 1144.558515] binder: 25908:25909 unknown command 0 [ 1144.576788] binder: 25908:25909 ioctl c0306201 20000240 returned -22 17:59:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003a00000325bd7000fedbdf250a000000160a94893ef1dbe50a81b7764b358383a82cb905bf7f3e49db6f419ae51b1143cbf19aa122ab39651752c06fe808a21284d32f3970aa49256cc1886abebb3a728f45f9a7a634609a8d1bc66d743d384d73c6621e10064f23af8522d56215c49abce213c1249bcd6271fa6665ee345c60"], 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x80) 17:59:25 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e800) 17:59:25 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) ppoll(&(0x7f0000000000)=[{r0, 0x100}, {r0, 0x4}, {r0, 0x1458}], 0x3, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x722d}, 0x8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x890a, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x34, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) [ 1144.755145] device nr0 entered promiscuous mode [ 1144.808871] binder: 26021:26022 unknown command 3 [ 1144.837345] binder: 26021:26022 ioctl c0306201 20000040 returned -22 17:59:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101000, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:25 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e801) 17:59:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x1e4, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x19ba}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20000000000000}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9e3e}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x500000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x288907b0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x922}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9caa}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000080) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x890b, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:26 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e900) [ 1145.321440] device nr0 entered promiscuous mode 17:59:26 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000e901) 17:59:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x80100) bind$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x1, 0xa3, 0x8823, 0x4, 0x40, 0xfffffffffffffffb}, 0x8}, 0xa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x6, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x200) 17:59:26 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ea00) 17:59:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x2000000000800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4, 0x10000) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000080)={0x32, @multicast2, 0x4e22, 0x1, 'wlc\x00', 0x1, 0xfff, 0x57}, 0x2c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x2}], 0x10) 17:59:26 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000300)="0266df82e924219f17a153a0122d8aa25c4c9cce79ef48f12121e6681cff94675c4b92b94ae8e8f1fb421c1cd16b0e3014bf45e036c3a06dc856e7ffeed92d02e7444e9883b43a89e770507cd41f80c87445e768612e7703742106c2d25c7975df4007af8715c6dac30dcdb0e5fafabcd4f2b5", 0x73, 0xfffffffffffffff8) keyctl$get_security(0x11, r0, &(0x7f00000003c0)=""/4096, 0x1000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) keyctl$revoke(0x3, r0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0xfd}) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000380)=0x80000) 17:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x890c, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1145.834119] binder: 26559:26566 ioctl 8008563f 20000180 returned -22 17:59:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8100, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)=0x80000001) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\b\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xb4\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\x19\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:26 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ea01) 17:59:26 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x890d, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:26 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x646880, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x0, 0x0, 0x1}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0xfffffffffffffffe, &(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000180)='/dev/dsp\x00', 0x9, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001f0000000000"], 0x0, 0x0, 0x0}) ioctl$SIOCRSACCEPT(r0, 0x89e3) [ 1146.130644] binder: 26789:26791 unknown command 92 17:59:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r3 = dup3(r2, r1, 0x0) write$uinput_user_dev(r3, &(0x7f0000000280)={'syz0\x00', {0xcd86, 0x9, 0x4, 0x400}, 0x48, [0x506, 0x100, 0x8001, 0x1, 0x51, 0x3f, 0x2, 0x4, 0x4, 0x4, 0x10000, 0x2, 0x6, 0x101, 0x80000001, 0x0, 0x7, 0x1c00000000000000, 0xfff, 0x3, 0x7ff, 0x0, 0x6, 0x4fc, 0x6, 0x8, 0xccd7, 0xffffffff, 0x5, 0x6, 0x5, 0x4, 0x1, 0x7272, 0x12e, 0x6, 0x8, 0x2, 0x9, 0x0, 0x3, 0x3, 0x5, 0x8, 0x56b, 0x0, 0xfffffffffffffffb, 0x80000001, 0x8, 0xfffffffffffffffc, 0x1, 0x7fffffff, 0x2, 0x2, 0x80000000, 0x80000000, 0x101, 0x4, 0x2, 0x8, 0x8, 0x100, 0x11, 0xd4], [0x756, 0x7fffffff, 0x1, 0x0, 0x0, 0x5, 0x200, 0x8ac8, 0xfff, 0x7, 0x5, 0x401, 0x3, 0x4, 0x4, 0x8daa, 0x1, 0x4, 0xdf3, 0x6, 0x9, 0x5, 0x100, 0x1, 0x7, 0x0, 0xffff, 0x0, 0x20, 0x2, 0x10001, 0x10001, 0x4, 0xffff, 0x630, 0x401, 0x4, 0x0, 0x1, 0x3, 0x2, 0x3, 0x4, 0x1000, 0xfff, 0x6, 0xfffffffffffffffe, 0x0, 0x100, 0x9, 0xffff, 0x7, 0x441c, 0x5c, 0x81, 0x10000, 0x4, 0x3, 0x401, 0x6, 0x20, 0x2ddc, 0x9, 0x6], [0xfff, 0x200, 0x9, 0x100000000, 0x10000, 0x80000001, 0x5, 0xe3, 0x3, 0x0, 0x2, 0x800, 0x10001, 0x4, 0x3, 0x20, 0x7, 0x3, 0xff, 0x2, 0x6af5, 0x800, 0x6ab, 0x10000, 0x7, 0x8, 0x40, 0xcd9e, 0xffffffff, 0x4, 0x7f, 0x9, 0x8, 0x80, 0x5, 0xc23, 0x3f, 0x4a, 0x20, 0x17e, 0x0, 0x80000000, 0x101, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0xfffffffffffff001, 0x5, 0x20, 0x800000000000000, 0x100, 0x1, 0x6, 0x0, 0x4, 0x7, 0xffffffffffffffc3, 0x8, 0x5, 0x6, 0x8], [0x7, 0x2dc3, 0x3800000, 0x0, 0x7db1, 0x2, 0xffffffff, 0x7, 0x39da, 0x3, 0x3f, 0x4, 0x5, 0x1000, 0x9, 0x1, 0x9, 0x1, 0x1, 0x6, 0x6, 0x2, 0x3, 0xfff, 0x8, 0xfffffffffffffffe, 0x2d8, 0x4, 0x0, 0x3, 0xb28f, 0x9, 0x4, 0x5, 0x9, 0x7, 0xfff, 0xbbf4, 0x0, 0xf4, 0xdec, 0x4, 0x1, 0x2, 0x1, 0x100, 0x6, 0x0, 0x3, 0x902b, 0x6, 0x1, 0x3, 0x1, 0x3ff, 0x6, 0x4, 0xa2, 0x9, 0x80000000, 0x7, 0x2, 0x5, 0x7]}, 0x45c) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:26 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000eb00) 17:59:26 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{}, 0x1f, 0xfffffffffffffffb}, {{r2, r3/1000+10000}, 0x13, 0x8, 0x3}, {{r4, r5/1000+30000}, 0x16, 0x481, 0x6}], 0x48) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) [ 1146.153534] device nr0 entered promiscuous mode [ 1146.164630] binder: 26789:26791 ioctl c0306201 20000100 returned -22 17:59:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000eb01) 17:59:27 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x800, 0xfffffffffffffffd}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000380)) 17:59:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="43e7880463044000000000"], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-control\x00', 0x8100, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000640)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20100, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000180)=""/42) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463044000000000d6b766b7da51a91224f62de3a1b247e7ee52860a2cd05231"], 0x0, 0x0, 0x0}) 17:59:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ec00) [ 1146.433922] binder: 27013:27014 unknown command 76080963 [ 1146.469775] binder: 27013:27014 ioctl c0306201 20000040 returned -22 [ 1146.491314] Unknown ioctl -2146941692 [ 1146.710455] device nr0 entered promiscuous mode 17:59:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x25c, 0x101000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000140)=0xff) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000180)={0x7, 0x3f}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:27 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000300)=""/174) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000000)=0xfffffffffffffffe) 17:59:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ec01) 17:59:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f00000000c0)={0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r2, r1, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={{0x8000, 0x8, 0x8, 0x0, 0x7, 0x81}, 0x9}) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000080), 0x0, 0x2, 0x0) 17:59:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ed00) 17:59:27 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000040)=@bcast) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000380)) [ 1147.226747] device nr0 entered promiscuous mode 17:59:28 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000540)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = semget$private(0x0, 0x2, 0x208) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000180)=""/191) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x44, 0x8d, 0x1, 0x2, 0x3, 0x8, 0x4, 0x1, 0x0}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e23, 0x4, @mcast2, 0x7}}}, 0x84) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x1e4, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r3}], 0xfffffffffffffe4f, 0x0, 0x0}) 17:59:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ed01) 17:59:28 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x4, 0x0) r1 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x3, 0x80000) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000400)=""/125) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0x5}, &(0x7f0000000040)={0x1b, 0x3, 0x0, 0x8000, 0x1e0c, 0xffffffffffffffc1, 0x6, 0x1}, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x1ff, 0x1, 0x1ac4, 0x9, 0x400}, &(0x7f0000000200)={r3, r4+30000000}, &(0x7f0000000340)={&(0x7f0000000300)={0x9}, 0x8}) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000480)={0x0, 0xfffffffffffffffe}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x80, 0x30}, &(0x7f0000000540)=0xc) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000006c0)={{0x2, 0x3, 0x3, 0x2, 0x2}, 0x1, 0x8}) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000580)={r5, 0x4, 0x5147, 0x1, 0x1, 0x432, 0xe0, 0xfff, {r6, @in6={{0xa, 0x4e22, 0x3, @local, 0x7}}, 0x9, 0x9, 0x5, 0x9, 0x7f}}, &(0x7f0000000640)=0xb0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000008c0)={&(0x7f0000000740), 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="18082bbd7000ffdbdf250700000008000600030000000c0002000800061e08000000280001000c0006006c626c630000000008000800060000000800050000000000080004004e2100003c0002000800060008000000080002004e230000080009004de7000008000400080000000800070007000000080009000700000008000e004e2300000800050004000000"], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x4080) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) [ 1147.398521] binder: 27355:27357 unknown command 0 [ 1147.438067] binder: 27355:27357 ioctl c0306201 20000100 returned -22 [ 1147.485013] binder: BINDER_SET_CONTEXT_MGR already set [ 1147.497913] binder: 27355:27357 ioctl 40046207 0 returned -16 [ 1147.788576] device nr0 entered promiscuous mode 17:59:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x320) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ee00) 17:59:28 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) r2 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000b00)=[@increfs, @free_buffer={0x40086303, r2}], 0x8b, 0x0, &(0x7f0000000a00)="c296f2613713538a81d1f382a3ec29b91b1c5229bc05a5a4561307fa1f48ad9f52189e24537fd83afca7caf7d9f2dfdd9b03414b6417644313948878a559ef4a6316c2662c99de5b72932391f8b2c92b924a069d9d28034bffd588dd07bdb15c8582e66611eff9bfadcb3dba4933768f836effd5667e68bc5f5a7a377011de8f23b73b043f694e23d8566c"}) 17:59:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8911, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000280)="11cee460774ade2a7aa8dc2b444bc7b673ee74cf59b81f7539e6a44890f37bb6d964a362c5888f9f2e37f8acddf22fe7193d7cc005e9c5f67e2511e6bc38778a1d4d870dd6778ae9ca5a0d6585dbc8905881c6b60f248301f39a025b4b3ca578bc84971677fbed23ff95523f", 0x6c, 0xffffffffffffffff) keyctl$describe(0x6, r2, &(0x7f0000000300)=""/225, 0xe1) 17:59:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000000c0)={'ifb0\x00', {0x2, 0x4e22, @multicast1}}) r3 = dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x3, 0x6}}, 0x28) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) [ 1148.153230] encrypted_key: insufficient parameters specified 17:59:29 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='schedstat\x00') setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000200)={0x1, "bd"}, 0x2) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000000)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ee01) [ 1148.266723] device nr0 entered promiscuous mode 17:59:29 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xaa, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x3, 0x2}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0xc, 0x8001, 0x100}, &(0x7f00000000c0)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0xe6}}, 0x10) 17:59:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x80, 0x0) setsockopt$rose(r1, 0x104, 0x2, &(0x7f00000000c0)=0x4, 0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) 17:59:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ef00) 17:59:29 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @bcast, @bcast, @rose, @rose, @null, @netrom, @default]}, &(0x7f0000000080)=0x48, 0x80800) getsockopt(r1, 0x9, 0x5, &(0x7f0000000300)=""/91, &(0x7f00000000c0)=0x5b) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) [ 1148.791919] device nr0 entered promiscuous mode 17:59:29 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x10080, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000300)=""/118) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ef01) 17:59:29 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x74, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) r3 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binder(0x0, 0x0, 0x5) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/119) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.advise\x00') 17:59:29 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x38a, 0xc0400) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f00000000c0)={0x7}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = socket(0x11, 0x803, 0x0) r3 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/context\x00', 0x2, 0x0) dup3(r3, r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r2, &(0x7f0000002e00), 0x386, 0x22, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x3, 'teql0\x00'}, 0x18) 17:59:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f000) 17:59:30 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x8, 0x745, 0xffffffff, 0x401, 0x9, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e23, 0x10001, @dev={0xfe, 0x80, [], 0x10}, 0x7fffffff}}, 0x7ff, 0x2db0}, &(0x7f00000000c0)=0x90) [ 1149.316188] IPVS: Unknown mcast interface: teql0 17:59:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8913, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1149.351913] device nr0 entered promiscuous mode 17:59:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f001) 17:59:30 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000840)=[@text64={0x40, &(0x7f00000007c0)="c4a15bd099f107cd1366ba410066b8440766ef66360f01df66baf80cb8be16e783ef66bafc0cec66bad004b00eee0f3566b8a9008ed8f20ff01048b800000000000000000f23d80f21f835800000800f23f867400f23fd", 0x57}], 0x1, 0x18, &(0x7f0000000880), 0x0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) sendmsg$tipc(r1, &(0x7f0000000780)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}, 0x4}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="95d0d4f190bdf7e55d01cfe3d089a5fad51160ea8ef8470e9f5a5ec2edd4765147ef67328c7eec708a04ae20e100fb9878051527c0871414c1fa0ca670960cc9902945769217bb92a271386f2aba26ef0e058b6e71824bd84971b42655c471e6d2eb7266379a0ddccd296d662cc1c061a844468224e0da06612bd5ef448fd6154bba796fe44bd6a84011e502c32321534054a2", 0x93}, {&(0x7f0000000200)="c3b1fb092e507e6634a0af841c14f9ee8ab29bb54442a377767d478288f222a955292475a1c04eac", 0x28}, {&(0x7f00000003c0)="aafc3d0e7987fc109c524184542c76b4265a22578447cb364ee21359366c8d84959996502c48df7be32199031ee5a42996ee97441b16cb5f68497e8dd8d86d6418f507e2139b21f3ef791f5c8e9d16508b6439040f9082eb083c9842a705605934ef1fa886cc68d52f62727fe41585df03a4384441bedaea651ef885065d27032f2d3b8335710cf352127cd6b1133d782f3a2a", 0x93}, {&(0x7f0000000480)="f26aac4fe237898cf504947b1f726d8d1dbe6605985242f59ee7d8de12f73591ed0fe756ea8a571003be25dc3c9d86d8a980bd95cd5ee41cb55cecc4b323b93beb5c2c543917c33867314b806a6dbec5d424b35f1d5be7d163b4ba427fb1c4dd24fc4aa602c29ad197eb723a366386cd4da0faa5d8a2a19aa1541ae8788b36e3204d0f5fc17dd8ff4f4839f94ebff4f9a73fa0773a05a93172674a931b7f42eb9ac95af75986172e5c983caf1f68564a2013b340a1e149f55bfd0d7e7ab3e296fa27f9e77db1e1efc9b4dbce88", 0xcd}, {&(0x7f0000000580)="25335a9dcde7f7becfc44ac27654854c9aeabc3e110d889eed85cef66d5ee078d0bbe8e2266ba447d7a597a45a0784006e0ccd03749aa544a90d4d21cae82a612af43a8f206bdc836107647f0917ba7c2d781c28f36cc9933c8d4e0b6a91e4a61bf1bd0837eb86f08909d44d9cc4b29b99a48c6306646aadacdea26257cade4bde5c949c7ff43db3476cbcbaf2edb8960f46d8d9b5e2cdcea44e26207a19bfa1ab4d6ab1d2c482fb79db32f45e173e8d2f7975e9e96778b7e55bce8acdc462df2331331222e49e2c3fa3eb9723", 0xcd}], 0x5, &(0x7f0000000680)="b16ef0f5a13949e1f7835f8c0a0af4864f0e9c9ad0fc9475de212fd1c8be7f6f95b4738e4d01098806f94a8df43bdea7967a3b6bd2dd58a3f00ffe250cafa40374156df704538443645de013a39d64c77e0b554130f22dc78373653a8874abd738056670fe4311abf09a9e876ea2a6f45e86ec600237bc9534728725da78ad4d3230d2d2c8713ddd96f6842790e422515ddb8fa7d7824e723f31874fac4fbf918010b58d3e49aef3b9370fd0d135bf8eebb70939b877a826dc19cd95d397d1b58aac77d3088032b7dbe8db2d5f7bd554754c712bf7d86bb57c2d3918b0abadb092a3543c2ad486ba9fb76f92e5efe80dec0f4348", 0xf4, 0x80}, 0x1) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f100) 17:59:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fchmod(r0, 0x100) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) socket(0xa, 0x80002, 0xcdd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:30 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0xf5, 0x0, 0x80, 0x10001, 0x7fffffff}, &(0x7f0000000200)=0x14) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r3, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f101) 17:59:30 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x40, 0x4) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) [ 1149.971038] device nr0 entered promiscuous mode 17:59:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f200) 17:59:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:31 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000040)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x200) 17:59:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891d, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x103602, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) close(r0) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30f) getsockname(r2, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)=0x8001, 0x4) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r3 = dup3(r2, r1, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000025bd7000fedbdf2503000000080001004e2400"/38], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'irlan0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000100)={@broadcast, @multicast1, r5}, 0xc) 17:59:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f201) 17:59:31 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x22000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) 17:59:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891e, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f300) 17:59:31 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x3, 0x14, [0x1, 0x102000, 0x2baa, 0x3, 0x2e1]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) dup3(r1, r1, 0x80000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000380)) 17:59:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'ifb0\x00', 0xf854}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r1, 0x80000) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000080)={0x200, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) [ 1150.775406] device nr0 entered promiscuous mode 17:59:31 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x800, 0x0) accept4$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f301) 17:59:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f400) [ 1151.180087] device nr0 entered promiscuous mode 17:59:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0xffffffffffffbbc2) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:32 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xbba, 0x12) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$KDENABIO(r1, 0x4b36) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x7, 0x401, 0x2, 0x0, 0x1a, 0x9, 0x3ad8, 0xdb21, 0x1, 0x7}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000280)={0x6b8c, 0x0, 0x0, 0x1}) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000300)=""/174, &(0x7f0000000400)=0xae) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffff8, r2, 0x10003, 0x435b}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x1}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0xcd8, &(0x7f0000000440)=0x2) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200000, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="174c00158ebdb7b0edc98ed3fa7aa70c0af5aaa41ca4ae8b8feda572a64bb51434a10d86b9decc8818c7ee052c3735055543fee398f71315ce1f6cf9af051c7f0fa43d80cdd41a0eaac44d3bb192e56686d595e4181c59f9e5d1080f4bd5f01a5cd5dad672de2776d1a4c0615c2e763a89633b7f0b37335852b3", 0x7a, 0x80, &(0x7f0000000180)={0xa, 0x4e23, 0x1d5, @rand_addr="108400fc8e7c259056a25ac23d816f9b", 0x7}, 0x1c) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0463044400005dea957f9915f77fa9fecf94adcf782b2c49f2fa19356f3361f2ba99ebe3b0559708f8ec141655a89e6bb100000000000000f1464d5cbc67b1713fa478551fd7bd3305fa182d637a6a0cd65ed91ee432514e847f2692d9424faff824d0538e001071360198e57193a8403dc8aece42e1fc97532f2c0da5dd548ff1a6fb3df4944cf4d3c2267753968b79824645d1db1b85f613052af8d1164b96242d05d2e9ba27fb8aa5b9bdf4008a531c22abb6b807db926047"], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1a000000008102f1074ba21a97cab08844e080025953217fdd1672ae56e05ab7b042395cbfce2767b9d5f51fdec61e2e68aa882973411a0d163fedc6295945a329bc09f8d98f3b0db562f3e3eedd1e9c2c43aaffdc2876bc6346045261a4313e14bf8700e324f9e497e07eb3fafa3d46829e3ae7c24f20654412a33089e2d5788669c0f16ff7"], 0x0, 0x0, 0x0}) 17:59:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f401) 17:59:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x891f, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x100000802, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00002f4ffc), 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0), 0x4) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x05\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1151.555367] binder: 28833:28837 unknown command 1141138180 [ 1151.571228] binder: 28833:28837 ioctl c0306201 20000040 returned -22 [ 1151.607219] binder: 28833:28837 unknown command 26 17:59:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f500) [ 1151.649263] binder: 28833:28837 ioctl c0306201 20000240 returned -22 17:59:32 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0xffffffff, 0x9, {"42fe542a8bd8431abce847af23281a89"}, 0x8187, 0x0, 0xff}, @in6={0xa, 0x4e23, 0x7, @empty, 0x80}}}, 0x118) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8920, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:32 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f501) 17:59:32 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x7, 0x40000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x8000, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000006c0)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000000)={{0xffffffffffffffe0, 0x4}, 'port1\x00', 0x11, 0x40000, 0x100, 0x8, 0xfffffffffffffff9, 0x7, 0x8, 0x0, 0x3, 0x101}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f600) 17:59:33 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xac, 0x0, &(0x7f0000000500)=[@acquire_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x2f8b95486f1a2141, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/125, 0x7d, 0x1, 0x3d}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x40}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/154, 0x9a, 0x2, 0x18}, @fda={0x66646185, 0x2, 0x1, 0x22}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}, 0x1000}], 0xa1, 0x0, &(0x7f00000005c0)="495b7f641cb028d2bc8f1c11bffcef810d06f87aa67a56b4dde6468d02ab804f6ea8cab0d195f867161431ad38192d5a999fd1e8e10a2735695d362c22e14cfb6a7c350d6fad90cfc8ff1696684420fe75f2db2099bfad9640b81ec50087f5a41fa9ea4e4e51b11362dd77d42c41a23866b878c8e5e7b46e020600d9e3e03934535093a946215dd40cb535798482b31822510d0b73283601113d170e86d91b6f52"}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000006c0)=0x1000) 17:59:33 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) getpgid(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x100) perf_event_open(0x0, r2, 0x0, r3, 0x6) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000080)={0x6, 0x1, @start={0x7}}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f601) [ 1152.571799] device nr0 entered promiscuous mode 17:59:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x440400, 0x100) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = socket(0x11, 0x803, 0x0) fcntl$setlease(r1, 0x400, 0x3) getpeername(r0, &(0x7f0000000080)=@hci, &(0x7f0000000000)=0x80) finit_module(r1, &(0x7f0000000200)='eth1-trustednodev*md5sumem1ppp0vboxnet1\x00', 0x3) syslog(0x9, &(0x7f0000000100)=""/142, 0x8e) r3 = socket$inet(0x2, 0x80003, 0x4) dup3(r3, r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r2, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:33 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0xfffffffffffffc00, 0x4, 0x0, 0x7, 0x8}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000080)={0x6, 0x5, 0x5, 0x8, 'syz0\x00', 0x9}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000200)="10b6f0339ae0dbc59e7d89f5f8270ff3", 0x10) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x9, 0x1) 17:59:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f700) 17:59:33 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x5, 0x38}) 17:59:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f701) 17:59:33 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x1, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000040)={0xff, 0xa000}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f800) 17:59:33 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000000)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) [ 1153.183362] nr0: mtu less than device minimum 17:59:33 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) [ 1153.212595] device nr0 entered promiscuous mode 17:59:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r3 = dup3(r0, r1, 0x80000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000000)="8aadcf1ccaecc5f3599c80a34fbfe95984d83b0877ba9fbf6e4d4b3a0d5a308c7adf78757d6a5e15ed614bb4bf8acf20e933a6c4583cb0ca6245e58e48", &(0x7f0000000040)=""/71}, 0x18) 17:59:34 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') 17:59:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f801) 17:59:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x8000, 0x0) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:34 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) 17:59:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f900) 17:59:34 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x40, 0x0, 0xac9, 0x3, 0x101}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)={r2, 0xf7, "2f603e40d62803024e9e7dc9c7aedcb4b10cf80ae7395bfcebb87eea64df670d46afefc03eb941a661c8d772587a9b43bc001362ed5efc512e31462a600bb925d7144f9310a1884c31197cb71022de1acd21fb87397360fc5c7cc60681b37a42b824b8b6911ad07799cd8959bdf878f544e0bd27c1fb6b245f80e71700ae2169c1d3c658797cc8aed150a8767d493271e8ee002f2cff9317d0e96a7ee43235a944d05fda547c99bdfaf196c06d5e1fece8162cca199ef392abfdcbed61a5cd79d97e671c3478d39240233cb9cbfc04bf0a1ab3487339ad15c0c883de03f7e5a03b7d60b0a714f7cfc5e1b806eb03054030a146c2169087"}, &(0x7f0000000080)=0xff) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r3, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) [ 1153.884043] device nr0 entered promiscuous mode 17:59:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8924, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000f901) 17:59:34 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xffffffffffffffc7) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000fa00) [ 1154.404807] device nr0 entered promiscuous mode 17:59:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000fa01) 17:59:35 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v1={0x2, "cf8d713dfbd75fed594ab0bcc84b3c1352e9"}, 0x13, 0x2) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:35 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) 17:59:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8925, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xb) close(0xffffffffffffffff) socketpair(0x9, 0x4, 0x40, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000440)={0x0, 0xcd}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000006c0)={r4, 0x5, 0xb2, "c46feb22d40457f3e08e8ce9ea3f7b18e3ad55b4ababff8e139d839c87be9ba727391d232747804b0133ba095b8dbaac81c6fb07a5bfede4934d5f78ebd4d107defd23fb0691da8ece5951e5c546abdb4fea0d1c14898f6bfc7b6c8a4a98d60d3c000e8878ccf52ed7efb775e334df519ef71cb5d1e85b735648719be46d9fe8fda988922225698c0cf832f8db1f491a5aed9da7746d714cc12f3610d4a9f6a50497604f08b07fe94c079b4113132bf1f081"}, 0xba) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000340)={@default, @default, @bcast, 0xf, 0x6, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) socket$kcm(0x2, 0x0, 0x2) r6 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@remote, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000100)={@mcast1, @loopback, @empty, 0x81, 0x2, 0x4, 0x400, 0x3ff, 0x40000002, r7}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f00000008c0)={0xe3, 0x6, 0x74f}) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r9 = gettid() ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000240)=r9) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f00000002c0)={'ip6gre0\x00', {0x2, 0x4e20, @multicast2}}) 17:59:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000001800)={0x3e9a, 0x3, {0x3, 0x0, 0x81, 0x3}}) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab55a8b6679dce022a9680a907653fec", 0x10) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$alg(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001180)="d282876f16853817e5fa4edf0dd18cef23906a4b0d4dff47d6327a6c5350ce50d8", 0x21}, {&(0x7f00000011c0)="0ec333ea073b31ae0d16bcc79d4be80b2f599d3172ed6072a80acd6924cbfeb8e0775b1a8d857d88cf316efa6af89214", 0x30}, {&(0x7f0000001200)="53002e0c1020430288db1726b4230c8546025603545916f7b3263765a15f8cba088ae8b8d7d73bd9d0f6d07b93e186be2912d91a6d38c791762bbaa5656f6c9e9685128f37a2c339f4a837edb1fa9a1dbbd82f150bb06b9c4e4c1cb13185e932dd6f88b4bd4808e98c66dea9ac01b127547a6dae16a480e75bfa41edfd0bb19a1deed5fbae59bbc2f5e585d7bb10a17c014cd6c4fc506ed34dd64e83d757a521c4cb7609436098a180f694976162a2d07412", 0xb2}, {&(0x7f00000012c0)="6f0015e667800e4262eddb89ae2d1b5a036f0463672732582c70042046c9cbd54663755b3228c97d02378916fb85ada478395c0ad757939f0a3429592568fc4b87dcfe50a742ed6c4d8e1baa94c19381003c9f1cd5e50103db520f116c66c3da734ac23cab0372d789c84297ebf3452e2b9e940ecb6f22d319249054557ac8cb20b1b5068f769ec73ea9ca60e69ef3509b2e0c74d36bb0e688c04b914b6b56c62decabf96339e12c80", 0xa9}], 0x4, &(0x7f00000013c0)=[@iv={0xd8, 0x117, 0x2, 0xbe, "ffdb8f720d2d5258ec69eac7249777f76fa5794dd594fca9eb30fa1df37c0d76f3f28de60b3ae3b08729f4b770ad889e3c1dc3a46f316f4227d6fc8078452647f4550330bb9b2fe269225636c1f9135976d32162cdb8e3789221301ae33160003e5f77a752d34d11361dc1f03fbb25b6f0cfba9775f2aff7faa8bb91d54540c18d152c53cdfacceab72832db5afa3d9d99b5c9e8490cd3f90cfce1d86a70d560970a4cfed0d22fb204f186a601a5e2a0a1528d2bc2ac40310f51db9ae643"}, @iv={0x30, 0x117, 0x2, 0x16, "2b419a9a6a0733819abcb349d21ca25344e766315ab3"}, @assoc={0x18, 0x117, 0x4, 0x8000}], 0x120, 0x40}, 0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) r4 = accept$alg(r1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r5 = socket(0x11, 0x803, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001540)={0x2, 0x6, 0x7, 0x1f, 0xa, [{0x6, 0x10001, 0x2, 0x0, 0x0, 0x100}, {0x4, 0x2, 0x3, 0x0, 0x0, 0x102}, {0x7, 0x100000000, 0x1, 0x0, 0x0, 0x68a}, {0x400, 0x3f, 0x80, 0x0, 0x0, 0x400}, {0xffff, 0x2, 0x4, 0x0, 0x0, 0x80}, {0x0, 0x9, 0xc88, 0x0, 0x0, 0x500}, {0x10001, 0x100000001, 0x8, 0x0, 0x0, 0x400}, {0x3, 0x5, 0x6, 0x0, 0x0, 0x200}, {0xbb, 0x2, 0x0, 0x0, 0x0, 0x4}, {0x5, 0xf36d, 0x1ff, 0x0, 0x0, 0x480}]}) r6 = socket$inet(0x2, 0x80003, 0x4) exit(0x8001) sendto$inet(r6, 0x0, 0x0, 0x40000000, &(0x7f0000000000), 0x10) r7 = dup3(r6, r5, 0x0) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r5, &(0x7f0000002e00), 0x386, 0x22, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) 17:59:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000fb00) 17:59:35 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=0xffffffffffffffff, 0x4) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x200) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={r1, r0, 0x0, 0x3}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000100)=""/246) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$EVIOCGREP(r3, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000380)) [ 1154.900621] device nr0 entered promiscuous mode 17:59:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000fb01) 17:59:35 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000fc00) 17:59:35 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000000)=""/174) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) setregid(r2, r3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000fc01) 17:59:35 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$NBD_CLEAR_QUE(r1, 0xab05) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) [ 1155.394297] device nr0 entered promiscuous mode 17:59:36 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) 17:59:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000fd00) 17:59:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'8\x04\x00\x00\x00o\x13$\x89\x00\x00\x88\x00', 0x200}) gettid() socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~I\xec\xeb\x1d\xaav\x94\xa2\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\x04\x00\x00\x00\xfdM.\x8dD<\t\x00\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?M\xf5%\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\x84\f/\x94\x13\xffu\x95\xed\x02\xde6c\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\x88g\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck$8Dk;\x95\xfe7q\xe9\xf4,\xa3mp\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xd8\xb22\r\x9c\x89\xafE\x02\x02*\xda7\xfe\xcc\x14\xb6\xaa\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x84\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\rOy\xac\x8b\xe4\xc4\xf5\xc3S\x96%\xcd\xb0\xd0X\x1f%\x01zf\xbc\xef\x8e\xb1\xff\xe83\tgq\x05\xd4\xbf\xbf4\xcf\x8a\x04H\x8c8CB\x14\xfd\x80\xf9\x01\xd0*>\x13Dw4\xde\x1f\xbe\x90\xf5\x1c/\xcd\x18\xed\xbf\x84\xa40\xb7JI\x1e\x0f\xba\xb6\xc2\x00\x00\x00\x00') accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @reserved}, 0x10, 0x80800) 17:59:36 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) openat$cgroup_ro(r1, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8927, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0xa, 0x800804, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r2, r1, 0x0) getsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000240)=0x7, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x2f4, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000080), &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001d00000011000000430569726c616e3000000000000000000000697036677265300000000000000000006966623000000000000000000000000062707130000000000000000000000000ffffffffffff00ff0000ffffffffffffffffff0000ffffff6e0000009e000000ee000000434f4e4e5345434d41524b000000000000000000000000000000000000000000080000000000000001000000000000006c6f670000000000000000000000000000000000000000000000000000ed456c851b6e10c9f66500000028000000000000000298940bf0ba2a7a541f932502c25637568cc9b0874b2467dd46407106b36300080000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff010000000900000008000000001c74756e6c3000000000000000000000006e6c6d6f6e300000000000000000000076657468305f746f5f6272696467650079616d30000000000000000000000000aaaaaaaaaabbff00ffffff00aaaaaaaaaabbffffffffff009e0000000e01000046010000766c616e0000000000000000000000000000000000000000000000000000000008000000000000000100070000060702736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa1e0000ffffffff000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c200000e"]}, 0x36c) 17:59:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000fd01) 17:59:36 executing program 0: recvmsg(0xffffffffffffff9c, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000140)=""/104, 0x68}], 0x2, &(0x7f0000000200)=""/36, 0x24}, 0x12000) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000002c0), 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r2 = socket(0x11, 0x803, 0x0) r3 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r3, r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r2, &(0x7f0000002e00), 0x386, 0x22, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000300)) 17:59:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000fe00) 17:59:36 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x60800, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x24000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80000, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8929, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:36 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@alg, &(0x7f0000000140)=0x80) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000180)=0x8, 0x2) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x100}) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xce, 0x0) socket$kcm(0x29, 0x80000000000002, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') io_setup(0x3, &(0x7f00000001c0)=0x0) io_cancel(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xb, 0x2, r3, &(0x7f0000000200)="07b993d78499689aee801761c6ea583b204f92127a6ab4bfde2f55643f2a4f9a22a4c100d579dc784ac3b1fb555e3b0bfe8498f06838d277c5169ed195b00b8dacff1866f473c990f1af6ba1fccf4f54d57f0b32c02e4281e536c20954dbf8a95f94ba71bd14bdfc9c90b128bf06907087157e4cba5a08a2be88739a052238301a3d35cf18fb0beb1f44f73cac", 0x8d, 0x9, 0x0, 0x2, r3}, &(0x7f0000000300)) 17:59:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000fe01) 17:59:36 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000b80)=0x5d) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000009c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000a40)={{0xa, 0x2, 0x7c8e791, 0x6, '\x00', 0x8}, 0x2, 0x0, 0x0, r2, 0x2, 0xffffffffffff339e, 'syz1\x00', &(0x7f0000000a00)=['/dev/ppp\x00', '/dev/ppp\x00'], 0x12, [], [0x1000, 0x9, 0xe53, 0x9]}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) r3 = open(&(0x7f0000000c00)='./file0\x00', 0x10000, 0x2) sendmsg$sock(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)="9779107a31c009659cf0182fe632a568ff25c72f539e1609fe365b31430917e7a2ca93c93150e35eab735eaf0e17d4cf4d1f26bc90d7085dc93626aab2519d0e0463573641f303628b7c0b0c9540b61856226cf0e37fa49106cfd6953c57a551b7d71e801d51536c7c42eb2e0e02d355177f3ac42fb626fe4108186bee1c9f56208d1869d8de503f607a0304c48eb0341cd711c338c90b03eec0a62c0c84854104560247cf1df0cdaad1ed59d4737f66777fdf8d6d2cf3b6b9b8cbc474658acd1502edb1d3d06d42cd599c4dda0e94f3a81668ad", 0xd4}, {&(0x7f0000000200)="550cb199e3c5697e2dcff8", 0xb}, {&(0x7f00000003c0)="b017c835a37da2904c6adb18b98345865979b056ff4fa24c7f957a95cb27a8599a88aa2869fab501990c8c03a20a318bf6fe8b8cddb0de2b30b29950871d4d0763a2ea014c81bd271b0d30eb20da03273f79b3ec1cb05a876d042d1afedbef07cdea5b461789cfa820c36db1dbd1dfbd593114eef56b0d51bf0004b78372bc686fb4133e5b5e2ea02bef89ac240b83abfe1263ecc442bb54ee8fb4c29269b005b50e04aa4f78ae07e9be154e597ddc3af4406c3fb3ea6ca58d51c2ff846e5f4e4c18cab7a5e230b062b423ec2478f61e7593b0045e9d370871d46d856b38fce6e313", 0xe2}, {&(0x7f00000004c0)="b1a3840c5e57ea13b66c802a1ae797b0b4692b48d2f288a39f616856204eb2064c357a063ea82f83b106b944dc048359ceac5198e9953d0c6ab548a652c51dfb87cc16eeca7ec9520b4c18d17a81a1a8ca2fcc8d24ee7ddd0c7319a449e5296be31042a4b7371955530d9c4cbb4171be3c92aaa1821f9f3ad76f9b1f8e8dfe8929ff4dbb41b9c53a79d5a947161261c523cd4db1f55ae6c15502a0c7bece050725513ff628ff297fb3c65a", 0xab}, {&(0x7f0000000580)="499a8da238b71292543fee3cd38e5cbdd64b7451d329bddcd3e94ffa880e12d73bd1f92a00a5f8c278a58fbfcf3d57cbe84abf7fad5ba5a8e46b7451def2dd1f998e3a1e8856b46bfa0ba4964772e20ff2ef8dab39dcc6ececc02f68b30ce25548ef17a0bf23627fe5027d8e4bd16a7b629ab578f7db7cefca9967d72a73590e0e583358b9004843ff31cb8124a91187d670b3a31fd1fe60151c99d7e13c5d0c7ee8c0fc32a0bcdf80b704de1d851448db3d", 0xb2}, {&(0x7f0000000300)="6180cc04e68a081c25f95597c34ea879c0d28630d20735bdb415f1e4ee61cddf157c9ad823805ec915d0e48c4d2c767fe336d684ede2d37032f23e7c5b7b", 0x3e}, {&(0x7f0000000640)="3df8fdf1f3e1f99e534aabb5e55082f290798747ccba29fd6a7affcb58b4bd45e8feb32e42167b4c4148da87a5fcbed756d8daafd856c8726959efc5a1a24bc312a99d4a854d18015245c15458103ead605d2c5627dcc092051b", 0x5a}, {&(0x7f00000006c0)="db4a77e06090068e4f9459d5ced435abe299c990887e5670351dc2118ca4c09e1e8a7e39b1d862dfb8838b3da92f4c075b05499d7b7338f9b524433d10b4f189e4bb6e2334677728e9f7b85a16e673a7bc14f33e84cb4e1980bbf57b34b8308c440891f7a7f337238509376dabf88fa621ed10540970a447f25f3d73ac5ce4f9c9aeb8690209e2d9c07a9ab9984bb39ab365c8abbaa742d8c8041bdbede0131a42644a610029903afba4eab393e6478b47b28c48bbd509650c854284", 0xbc}, {&(0x7f0000000780)="c527f53a2aa9ceda556906e43fdb383b5d0255406488398a9dde350ad93fd20387f3b8ff911c135485819dde85cb1e1392ef53411df96bf34d2514d6cf574de6a6980767ad8adcdf1d825c39454fb6089af5935c0a349f7f4261ddf117ab1948867e0b57a56372cd51f8432f994c5e9eeb9ec38340b1576822aff5da5726f4eecbb4b6abf282e6e78ad8a80163d79f", 0x8f}, {&(0x7f0000000340)="3b70d91e400c0d705bd9c84c05741fe198", 0x11}], 0xa, &(0x7f0000000900)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x171}}, @mark={{0x14, 0x1, 0x24, 0x8e}}], 0x48}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000bc0)) bind(r3, &(0x7f0000000c40)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8930, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ff00) 17:59:37 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000480)=""/246) r2 = fcntl$dupfd(r0, 0x400, r0) fsync(r2) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x181, 0x400000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x1}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x8001, 0xff}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e22, @multicast2}}, 0x6, 0xc0}, &(0x7f00000000c0)=0x90) io_setup(0xfffffffffffffff8, &(0x7f0000000640)=0x0) io_cancel(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000140)="49b2e0", 0x3, 0x5, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f00000001c0)) mq_timedreceive(r3, &(0x7f0000000580)=""/190, 0xbe, 0x0, &(0x7f0000000340)) 17:59:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) prctl$PR_MCE_KILL_GET(0x22) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1156.504830] device nr0 entered promiscuous mode 17:59:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ff01) 17:59:37 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8931, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x400) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x7, 0x2c, 0x1000000000000004, 0x2}}) r2 = socket(0x11, 0x803, 0x0) r3 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000100)={0x7, 0x2, 0x7, 0xfffffffffffffff9, '\x00', 0x1}) dup3(r3, r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r2, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:37 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf3d4, 0x40) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000040)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)=0x1) 17:59:37 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x81, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080)) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000000)={0xe80fdc4, 0x81, 0xc56, 0xb5fb}, 0x6ac) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x21000000) 17:59:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x6, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:37 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:37 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000200)='./file0\x00', 0x3, 0x4, &(0x7f0000001540)=[{&(0x7f00000003c0)="eb1bfd8738fc8d805213f3a03fd59d3825b39abbf6a790c73131fbaea035496f9f5243728e993d10e838f418e1a2c28dd91350b2527f26de58cdd30f812a4d85c33fd0a01f51ec1a228bb2fc88cea7c1880be94f51069cea67446a345dd0f363d7c2f7f6db202cdfe3bef64ac4badd29cb39653039cb90964bdd1b9258d3db3c7da8eb6fe320984eec", 0x89, 0xa68}, {&(0x7f0000000480)="d8f6fcb828449e0824dcf9e333fd972b4d727b2f0f115cf40e99c0f8360d8607589a5b5efc09c5bad86c6cdb99cc94ba229254836fed06e48bb12d55a1d5fec8993381e18d2a60eb3f136edf1056865ba7d0d6c3a994410715675daa280b94beef4e121babe70a7122bad1d4f6b9ec71f55e34d01eea82c48866954b4e12c1da1ba4cb29c96ee876173c5220c122c971c3bf0c6102191115080681fa61ac25e0", 0xa0, 0xa06}, {&(0x7f0000000300)="90f3b45a2ddda898b31349ef65b7d9c9ca3427926c4182a538ec13e40b9b324fa07762204059a3bc9954d0ad6a08b1685542d7657278a8f6ec6b41b18fe191dcb4161794bc1aaa4f9769052377289f009a8734ec8c0a7e184391959b77d7247637db50938541152a5836d74c965919f5c4fba3ed", 0x29, 0x2000000000000}, {&(0x7f0000000540)="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", 0x1000, 0x7fff}], 0x110c000, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000000)={{0x400, 0x3f}, 'port1\x00', 0x4, 0x100010, 0x20, 0x6, 0xffffffff, 0x1, 0xae4, 0x0, 0x0, 0x7}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) [ 1157.095341] device nr0 entered promiscuous mode 17:59:37 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x8001, 0x3ff, 0x9, 0x5, 0x4}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r1}, &(0x7f0000000340)=0x8) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000080)='\x00', 0x1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) write$P9_RSTATFS(r2, &(0x7f0000000380)={0x43, 0x9, 0x1, {0x3, 0x3, 0x0, 0x10001, 0x0, 0x10000, 0x3, 0x4, 0x10001}}, 0x43) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x80089203, 0x20000000) socket$tipc(0x1e, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0x1, 0x7, 0x1f, 0x70, '\x00', 0x2}) 17:59:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8932, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:38 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {r2, 0x7ff, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @multicast1}}}, 0x118) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20400, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x800) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c000000806469723d2e2c776f726b646972ef2e2f66696c3f21"]) chdir(&(0x7f0000000040)='./file0\x00') ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r2 = getpid() ioprio_get$pid(0x2, r2) r3 = perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000180)={0x2, 0x0, [0xeb8, 0x6, 0x2, 0x62, 0x4, 0x1, 0x5, 0x1]}) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x0, 0x7400}, [{0x2, 0x4, r4}, {0x2, 0x7, r4}]}, 0x34, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) 17:59:38 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x42, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x1, 0x7ffffffd, 0x664c, 0x200007ff, 0x19, 0x1, 0x237, 0x1b70, 0x5b, 0x800}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000003c0)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) [ 1157.431914] overlayfs: unrecognized mount option "l" or missing value [ 1157.621171] device nr0 entered promiscuous mode 17:59:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r3 = dup3(r2, r1, 0x0) fcntl$dupfd(r3, 0x0, r3) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:38 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) fdatasync(r0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)) 17:59:38 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x20000000) prctl$PR_GET_TIMERSLACK(0x1e) 17:59:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8933, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0x6d, "977ffed5e3d2f51474ec45f194e32f580d5e88afc86e42b9f8c4a2043a8cd854", 0x1, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1) 17:59:38 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:38 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r2, 0x1b, 0x2}, 0x14) tee(r1, r1, 0x1, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000003c0)={0x0, @bt={0xfffffffffffffffa, 0x6, 0x1, 0x2, 0x100000000, 0x5, 0x3, 0xe46, 0x400, 0x1, 0x4, 0x3, 0xfffffffffffffff9, 0x0, 0x0, 0x4}}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x1, 0x0, 0x80000001, 0x1bf, 0x40}) ioctl$EVIOCGREP(r3, 0x40047459, &(0x7f0000000240)=""/174) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) 17:59:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) flock(r0, 0xc) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xa}}, 0xffffff73) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r1}}, 0xc) getsockopt(r0, 0x6, 0x1, &(0x7f0000000040)=""/216, &(0x7f0000000140)=0xd8) r2 = getpid() sched_setparam(r2, &(0x7f0000000400)=0x7fff) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) bind$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0xffff, {0x100000001, 0x2, 0x8, 0xfffffffffffffff9, 0x2, 0x4}, 0x3, 0x62}, 0xe) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080026bd7000fedbdf25010000000400050008000300fd00000004000500080001004e21000014000900ff02000000000000000000000000ff010000000000000000000000000001080002000a000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40084}, 0x1) 17:59:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8934, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:39 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:39 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) fcntl$notify(r1, 0x402, 0x11) fchmod(r0, 0x1) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) r2 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='cgroupself&wlan0{+\x00', 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r2, 0x1000, 0x8d}, &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'sha512-ce\x00'}}, &(0x7f00000003c0)="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", &(0x7f00000013c0)=""/141) 17:59:39 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x35, 0x38, 0xb, 0xb, 0x4, 0x100, 0x6, 0x102, 0x1}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1158.636852] device nr0 entered promiscuous mode [ 1158.937459] device nr0 entered promiscuous mode 17:59:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008910, &(0x7f0000000200)="c0dca5055e0bcfec7be070e677ac9d84b95596975996bd03e8c5a30f2127b12344dddd1400c9302dfbcb762868490f73929d6f4028d6773fc8af") r1 = socket(0x11, 0x803, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000340)={0x1, 0x0, 0x103, 0x1, {0xdde, 0x40, 0x6, 0x7}}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x4, 0x8000) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f00000001c0)={0xefa1, "bc97c7de816f5c86bad65a88ffad8c17050f3b74052a3bf5e5e16d66c4d7f759", 0x1}) r4 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r5 = dup3(r4, r1, 0x0) getsockname(r4, &(0x7f00000000c0)=@pppol2tpv3in6, &(0x7f0000000140)=0x80) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x7f}, 0x1bf) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000280)={{0x11, @local, 0x4e20, 0x0, 'ovf\x00', 0x4, 0x9, 0x76}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x4e24, 0x1, 0x40, 0x10000, 0xffffffffffffffe1}}, 0x44) setsockopt$inet_dccp_int(r5, 0x21, 0x13, &(0x7f0000000040)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8937, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x40) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) 17:59:39 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000000)={{0xfff, 0x6}, 'port0\x00', 0x20, 0x180040, 0x3, 0x7fffffff, 0x800, 0x2, 0x1, 0x0, 0x2, 0x1}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:39 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000000)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x1ffffffc) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000000c0)={0x3}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x1fd, 0x40000000, 0xe466}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xffffffffffff0001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x100000000, 0x26}) 17:59:39 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000)="b10a7a030af5c162c1761977d3e0b323f6f962f79b6e785332aec81a7685c6cecc", &(0x7f00000003c0)="436821313994ce56d9ecaeaca3c0e5c7ebc2dc8a02c6a08f3954c7b8c4ae3bb1e07ec447f1b06e0b4070a024747d120f12c650075adfe8601d6f4559c2628b590c134f3a8b0f8155fbb247197593e97ee8b8aae2c5aba9db5ce1a4533d3e709585ce455b7443153b71f4c5cffa3b3e8a7060a4b5b329d0f13eeeb7d981995665bd0b3e7f127871a5b8868b34b2c138b284e25a3985f6f2eb6bbcbfd34fc468ba344a5dc79c1215dd11eaf5aad64c37cc1f39b218d52d371fc7d43a74af70a209af97fec611b09dd37b609cf30154e5d1d658cd77bcb53872f98456a4571275d2ce09adcfe0d599c33d", 0x4}, 0x20) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:40 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x10000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:40 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x80089203, 0x20000000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r2, 0x1ff, 0x8, r2}) 17:59:40 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:40 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:40 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x800) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c000000806469723d2e2c776f726b646972ef2e2f66696c3f21"]) chdir(&(0x7f0000000040)='./file0\x00') ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r2 = getpid() ioprio_get$pid(0x2, r2) r3 = perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000180)={0x2, 0x0, [0xeb8, 0x6, 0x2, 0x62, 0x4, 0x1, 0x5, 0x1]}) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x0, 0x7400}, [{0x2, 0x4, r4}, {0x2, 0x7, r4}]}, 0x34, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) [ 1159.627575] overlayfs: unrecognized mount option "l" or missing value 17:59:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x800) r3 = dup3(r2, r1, 0x0) ioctl(r3, 0x9, &(0x7f0000000140)="3c37e49062a0af0c8d0b7c8b554306c2f71878693acb18155172c5e0bf88fc6347be14976c6b976da71e250d57a63801bb07dfa95a27af01a6f26ba842188d2333efd986bce90c1a0fad3b5e3ce26272cf779b5b3023f18b148905aa454906bee7b5b8898ee14e8416d49cb9883e2c2c5a42e4160f716d0c5c0ed78dfb76eaa536b0768ea056899b1c6cbe7ecfb12e519121053eb51dc8d8f2c846a4fe9ed661ee0c22f7737542d2d85ccda469f0ec6927d7f4e6e488d490aa8bb8eb72edac852d0c75655ced447a35341891d199ea85cc054724f9ebd2d66ca7a7b180bfd9") setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) open_by_handle_at(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x90000) 17:59:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8940, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:40 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100, 0x101400) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000040)={0x31, "5856ed59e7b240a07962324931d11e503f436033073012a8d4f9505bec526cd1b5f41b51ab4a29c66678a6b08a2c7b9e97df85d4851b0d57318384791858c730f2f0defa2cdaadb048921d1238507aa498855053a22fc0d178b4946026f0969dc5b2771fc1454d7a572ca43b2bd3d062b441f6b74215dcedc38c25dad4ec2820"}) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x20000000) 17:59:40 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000000)=0x6, 0x4) sendto(r2, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r3, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:40 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x2000ea01) 17:59:40 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r5, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:40 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x1}], 0x1, &(0x7f0000000200)={r3, r4+10000000}, &(0x7f0000000300)={0x9}, 0x8) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000780)=""/174) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000380)) 17:59:40 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000000000}, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:40 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x9d, 0x4) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x51bd2cc04ac77519, 0x3}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x20000000) 17:59:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8941, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:41 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r5, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:41 executing program 5 (fault-call:4 fault-nth:0): syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) [ 1160.352383] FAULT_INJECTION: forcing a failure. [ 1160.352383] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.377288] CPU: 0 PID: 675 Comm: syz-executor.5 Not tainted 4.19.50 #22 [ 1160.384218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1160.393678] Call Trace: [ 1160.396299] dump_stack+0x172/0x1f0 [ 1160.399972] should_fail.cold+0xa/0x1b [ 1160.403892] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1160.409015] ? lock_downgrade+0x810/0x810 [ 1160.413184] ? ___might_sleep+0x163/0x280 [ 1160.417356] __should_failslab+0x121/0x190 [ 1160.417377] should_failslab+0x9/0x14 [ 1160.417393] kmem_cache_alloc_trace+0x2cc/0x760 [ 1160.417414] alloc_pipe_info+0xb9/0x430 [ 1160.417426] ? __might_sleep+0x95/0x190 [ 1160.417442] splice_direct_to_actor+0x6bb/0x890 [ 1160.417458] ? avc_policy_seqno+0xd/0x70 [ 1160.417469] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1160.417481] ? selinux_file_permission+0x92/0x550 [ 1160.417496] ? do_splice_to+0x180/0x180 [ 1160.460816] ? security_file_permission+0x89/0x230 [ 1160.465772] ? rw_verify_area+0x118/0x360 [ 1160.469942] do_splice_direct+0x1da/0x2a0 [ 1160.474110] ? splice_direct_to_actor+0x890/0x890 [ 1160.478975] ? security_file_permission+0x89/0x230 [ 1160.483926] ? rw_verify_area+0x118/0x360 [ 1160.488206] do_sendfile+0x597/0xce0 [ 1160.491947] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1160.496540] ? fput+0x128/0x1a0 [ 1160.499835] __x64_sys_sendfile64+0x1dd/0x220 [ 1160.504357] ? __ia32_sys_sendfile+0x230/0x230 [ 1160.508954] ? do_syscall_64+0x26/0x620 [ 1160.512948] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1160.517544] ? trace_hardirqs_on+0x67/0x220 [ 1160.521972] do_syscall_64+0xfd/0x620 [ 1160.525788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1160.530984] RIP: 0033:0x459279 [ 1160.534190] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1160.553104] RSP: 002b:00007f35a42dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1160.560835] RAX: ffffffffffffffda RBX: 00007f35a42dcc90 RCX: 0000000000459279 [ 1160.568109] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1160.575386] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1160.582750] R10: 0020000102000007 R11: 0000000000000246 R12: 00007f35a42dd6d4 [ 1160.590029] R13: 00000000004c6835 R14: 00000000004db7a8 R15: 0000000000000006 17:59:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) r2 = socket$inet(0x2, 0x2000000080001, 0x2) sendto$inet(r2, 0x0, 0xfffffffffffffdde, 0x0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x4, 0x3}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r3, 0xfffffeb6) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:41 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x84000, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f00000003c0)=""/4096, &(0x7f0000000040)=0x1000) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r2, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8942, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000000)={0x3000, 0x7, 0x0, 0x0, 0x0, [], [], [], 0x7ff, 0x9}) 17:59:41 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r5, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:41 executing program 5 (fault-call:4 fault-nth:1): syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) [ 1160.930428] FAULT_INJECTION: forcing a failure. [ 1160.930428] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.968668] CPU: 0 PID: 826 Comm: syz-executor.5 Not tainted 4.19.50 #22 [ 1160.975613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1160.984992] Call Trace: [ 1160.987624] dump_stack+0x172/0x1f0 [ 1160.991296] should_fail.cold+0xa/0x1b [ 1160.995229] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1161.000374] ? lock_downgrade+0x810/0x810 [ 1161.004644] ? ___might_sleep+0x163/0x280 [ 1161.008825] __should_failslab+0x121/0x190 [ 1161.013086] should_failslab+0x9/0x14 [ 1161.016904] __kmalloc+0x2e2/0x750 [ 1161.020461] ? kmem_cache_alloc_trace+0x348/0x760 [ 1161.025355] ? alloc_pipe_info+0x199/0x430 [ 1161.029615] alloc_pipe_info+0x199/0x430 [ 1161.033704] splice_direct_to_actor+0x6bb/0x890 [ 1161.038400] ? avc_policy_seqno+0xd/0x70 [ 1161.042515] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1161.047469] ? selinux_file_permission+0x92/0x550 [ 1161.052348] ? do_splice_to+0x180/0x180 [ 1161.056362] ? security_file_permission+0x89/0x230 [ 1161.061426] ? rw_verify_area+0x118/0x360 [ 1161.065606] do_splice_direct+0x1da/0x2a0 [ 1161.069793] ? splice_direct_to_actor+0x890/0x890 [ 1161.074667] ? security_file_permission+0x89/0x230 [ 1161.079616] ? rw_verify_area+0x118/0x360 [ 1161.083793] do_sendfile+0x597/0xce0 [ 1161.087534] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1161.092131] ? fput+0x128/0x1a0 [ 1161.095431] __x64_sys_sendfile64+0x1dd/0x220 [ 1161.099946] ? __ia32_sys_sendfile+0x230/0x230 [ 1161.104630] ? do_syscall_64+0x26/0x620 [ 1161.108707] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1161.113309] ? trace_hardirqs_on+0x67/0x220 [ 1161.117695] do_syscall_64+0xfd/0x620 [ 1161.121518] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1161.126725] RIP: 0033:0x459279 [ 1161.130125] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1161.149051] RSP: 002b:00007f35a42dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1161.156781] RAX: ffffffffffffffda RBX: 00007f35a42dcc90 RCX: 0000000000459279 [ 1161.164070] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1161.171363] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 17:59:41 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x100000000, 0x101, 0x0, 0x1, 0xbfb}, 0x14) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x20000000) 17:59:41 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) fdatasync(r0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 1161.178661] R10: 0020000102000007 R11: 0000000000000246 R12: 00007f35a42dd6d4 [ 1161.185943] R13: 00000000004c6835 R14: 00000000004db7a8 R15: 0000000000000006 17:59:42 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) syz_mount_image$nfs4(0xfffffffffffffffd, &(0x7f0000000000)='./file0\x00', 0x1ff, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000040)="f2295b828fc91c488f6dfcba889203df3271772d283dc84ad4d25c13b2fe5d1deef6a321", 0x24, 0x1}, {&(0x7f0000000080)="027d8f9ec236d6302800ac0fb4097c4f4ea8a568cdf3feb8c90b", 0x1a, 0xfff}, {&(0x7f00000003c0)="2e29c4b7e61a7cf48590920bfbe21cec3dd679e3413a4f2e774de216ca40297eb2fc3c4bd37c7dae2c662211fb25a3b1a5a07dae29499cd0b867c9361a8fab49f36f51139b568ba0f875b72012227ef514f13771cdf671d2889c4f32bb9fb95a870f420f0a970545c752e8cdcea7590f28d7740b0f6c923e631f22ac9672ac35b38bf6879848971ccb5a4cf1", 0x8c, 0x10000}, {&(0x7f0000000300)="63ec054c096d8d4fb4c5fcd2c5723528e16010e75c850786874b85341b10482528bbedd4375e518c23b5d9af7b7fd111bb9ffe0e760bf2f856c79be13e6b41f3cd28db85e2c068bcdafc6aa840e29aa07e7d6b92e3edaf61af874bd5fa3679eb6c9af572deaf45bbd9be08", 0x6b, 0x80000001}, {&(0x7f0000000480)="f9ba89b09ef055cbae3c3c298bd2027fb9435443ad67fe47775b6fd62da50cee4b9ca67e847574dc79994f60b08d68a3d73c6f49c745dc64bd75aae64910710b2c163ad8243e4348b98101b06fd2eb3cec770c06e3f8d6c28cadeca93ff0f5292df462a78d6ec30756f017a9cdd4a60c47a38d59ccff162f29d4d4954d9bc91998d6d51f63728d2bae7189e10b21ad15b5ec7742847eda06598c2bd1f5fc08129ba057345e2ed01f9c4619f4491590", 0xaf, 0xfb18}, {&(0x7f00000000c0)="050783d8b718886bd962525eed9c884bad", 0x11, 0x9}, {&(0x7f0000000540)="f8d1eb68d41db5da79550c6b85a5524cac42f6cf37db17c835c05c9e222cea2ec31a681e5c6b6db252f468a0aee04558c3e8cd39322d3c47dc9e5d7324423e66b6443931f435fd20b36951c89b4d548c9f67f6abc41b356eff", 0x59, 0x2}], 0x8a000, &(0x7f0000000200)='/dev/ppp\x00') ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:42 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r3, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r5, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) 17:59:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80000002, &(0x7f00000003c0)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000100)={0x2}, 0x1) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0x40, 0x3ff, 0x8}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002e00), 0x386, 0x22, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000380)=0x4) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000280)=""/155, 0x9b}], 0x3, 0x61) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0xd3169509fa4a428b, "1121fa8f73b16d40"}) 17:59:42 executing program 5 (fault-call:4 fault-nth:2): syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) 17:59:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:42 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x3ffffc, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x7, 0x1, 0x1, 0x0, 0x2, 0x8, 0x7, {0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1f, 0x0, 0x100, 0x1, 0x4}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r2, 0x3}, 0x8) 17:59:42 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r3, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r5, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev, @broadcast}, &(0x7f00000002c0)=0xc) sendmsg$FOU_CMD_GET(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1020048}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r3, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="afb7947450bef2d98b819c819dc3e5bf"}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x40010) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0xa) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) sendto(r1, &(0x7f0000000080)="e7fd406b26c32b47a7d972e62eca68d553767bc506d0a5a2f743265d5d42bab6f59ff238ee3873dc81dddd4a76f5e240eece915e6f7a591ebc1669b05f62b376cadc353a8319f327f523ef1c91532d8b02c3cfd00cd25239629bc22bf93f40d73d18973b1dec1d98af87e6538cfbc6242d5790b7b7c28ac6d445c12d30d7b938b0073173dc4835accee80b1bfc720b0893a9cac585b82be629db065328e4749e911af5a39ea17f", 0xa7, 0x8880, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x4a49, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xc4}}, 0x80) 17:59:42 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) 17:59:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x3) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0x8, 0xec3, @l2={'ib', 0x3a, 'syzkaller0\x00'}}}}, ["", "", "", "", ""]}, 0x38}}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x2000) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x80089203, 0x100000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f00000000c0)) 17:59:42 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000000)={0x20, 0x100000001, 0x9c, 'queue0\x00', 0x6}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000003c0)=""/150) 17:59:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8947, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:42 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x20000102000008) 17:59:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0xf, @output={0x1000, 0x1, {0x20, 0xffffffffffff26a9}, 0x10000000000000, 0xfff}}) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) 17:59:42 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) sendto$unix(r1, &(0x7f0000000000)="9b4e305f0c0cd41232a13f1381922d4d7d0dbc497a64615304fecf0e7d0fcbac19a90f9f663147e90e6d8c3b351257cf7ccbf30f657bfab6cc2a7389d77cebf029648537ef5e787b1ba8499bf3ee2fe212bf233c1f552117ad08ac461ccc055cb3dfb1c2431745e99a58940274218e20d8499ea266f8d9e1622c56bd462da4298047", 0x82, 0x0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) r2 = add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000003c0)="0cd079551e85a19c2486bcd14ad0c5df3f6b80696e0d63dcd3ac105466be9cb2c1eb1cf1ef1738d9417342e3024dcd4df59f04ee3ad94a24542e6914fa8fd8123f4367413a2cb1b3302fda47553826251b8a81bd5c53666efd5118f837468a4371f9590100596ada31f446014a75e0f2c80c1a9420ec17d2a0c9bafe3f4a9b3c6bcc34906a1c31f796486c2a07858db357c0c080a3d6c03714d48fdbdd9ead27f2130712e74ba12d2f901bc9702052ae783b5cb2edbb897d369e5f8b32ca1a3d4d", 0xc1, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) 17:59:42 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r3, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r5, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8948, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0xfffffffffffffff5) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20000) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) 17:59:42 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x2000010200000b) 17:59:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x5, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:43 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x4000) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0x1) 17:59:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8949, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:43 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) 17:59:43 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x20000102000010) 17:59:43 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = fcntl$dupfd(r0, 0x0, r0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000040), 0x5, &(0x7f0000ffa000/0x4000)=nil, 0x2) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000300)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) 17:59:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x6, 0x4) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x9000000000, 0x80000000, 0xa81, 0xd, 0x7, 0x401, 0x29, 0x5, 0x824d0000000}) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/227) 17:59:43 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x105000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000003c0)=""/76) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x440040) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000000c0)=0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000100)=""/246) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$EVIOCGREP(r3, 0x40047459, &(0x7f0000000240)=""/174) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400002c}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000229bd7000fbdbdf2511000000540003000800030003000000140002060000000000000061703000000000000008000100020000000800030003000000080007004e20000008000800030000001400020069703667726574617030000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x885) 17:59:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x894c, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:43 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2000000000000001, 0x200000000014000) r1 = syz_open_dev$loop(0x0, 0x0, 0x100082) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x9], 0x1, 0x8, 0x1c0000000000000, 0x7, 0x2, 0x80000001, {0xffffffff, 0x7f, 0x9, 0x5, 0x80000001, 0x0, 0x0, 0x2, 0xd97, 0x1, 0x7, 0x6, 0x8000, 0x3, "146a61fe85e4bde3de1bfedfabcb42fb50d84fa0bfa061a537625d146a299cd6"}}) r2 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) sendfile(r1, r2, 0x0, 0x20000102000007) 17:59:43 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) dup3(r2, r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x480400, 0x0) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:43 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2000000000000004, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a38000/0x1000)=nil, 0x1000, 0x12) sendfile(r1, r0, 0x0, 0x20000102000007) 17:59:43 executing program 4 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) fcntl$setstatus(r0, 0x4, 0x40400) 17:59:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x40) 17:59:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0xffffffffffff8003) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) io_setup(0x5, &(0x7f00000002c0)=0x0) io_pgetevents(r3, 0x1, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x1c9c380}, 0x0) dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x7530}, {0x77359400}}, &(0x7f00000000c0)) 17:59:44 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'gretap0\x00', r3}) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$KVM_SMI(r0, 0xaeb7) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40, 0x0) 17:59:44 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8970, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) fcntl$setstatus(r0, 0x4, 0x40400) 17:59:44 executing program 1: r0 = geteuid() lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x46b9, 0x5, &(0x7f0000001280)=[{&(0x7f0000000080)="a03afcdfbbacdfecdc508cc03bab48b940f6841ae5deb93701967f76804e24f4bb3e5d82c611717beaa859f1600faf129b9139a3c7e7a280908980a50164a1f4342eadf2e3a3947eec64e1b69cfd26945b2a4c155dcff2c86c02605884d5efe675ce58ec673cc63f7ab529eafed4e631f77210c009070c053760ba937409512e34b827e51eda174ffb012c1d785a2eace85224ed51478db5a26a41a7c9aa0875f09a6d153e9a8a08a75dd3220f22d9b6cb161584da2563ca21d5f668fa86e2e2", 0xc0}, {&(0x7f0000000140)="f6e0eed50d92ee812d72dd83189666b5472e86749a2b819baa2d0a4d01a3b4a11bbbe65957d86f2bc4aa9806316d3dcd6856b854bed3b5b537", 0x39, 0x8}, {&(0x7f0000000180)="eb5b01c5ab129da12df8d9d7269668b074715ea6a1e1efd892193bc21bf712fa61b16743ecd83ef85a1a36d7edda3990dc", 0x31, 0x7f}, {&(0x7f00000001c0)="ab84475693f7e667f7713f7228ee83ba5b31e71c2cc3544d803708889ee1d84a9d0717bd928a26a940f6ccebfa5990f15aacfe3268abff393412f04acf823c7b40c4d6778ae2ee67899dc89cd5e799f23b970beed563bbb1b39697ed43c6e8fe0a7053fde429c46fcef239a72f6673c62edfbf780976f1c2620e7d2c0e29c132c89020a8aae53428f47c3f849d0436", 0x8f, 0x20}, {&(0x7f0000000280)="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", 0x1000, 0xffffffff}], 0x10, &(0x7f00000013c0)={[{@acl='acl'}, {@fault_injection={'fault_injection', 0x3d, 0xfffffffffffffffe}}, {@fault_injection={'fault_injection', 0x3d, 0x101}}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x6}}, {@user_xattr='user_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x100000000}}, {@noacl='noacl'}, {@user_xattr='user_xattr'}], [{@hash='hash'}, {@obj_user={'obj_user', 0x3d, 'system#vboxnet0,'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fowner_gt={'fowner>', r0}}, {@fsname={'fsname', 0x3d, '/dev/usbmon#\x00'}}, {@euid_lt={'euid<', r1}}]}) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x80089203, 0x20000000) 17:59:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000100)={{0x0, @remote, 0x4e21, 0x0, 'wlc\x00', 0x0, 0xfffffffffffffe01, 0x9}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x4e20, 0x4, 0x5, 0x0, 0xde}}, 0x44) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000200)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f00000000c0)) dup3(r0, r1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000001c0), 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x10000) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8971, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:44 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2000) sendfile(r0, r1, 0x0, 0x20000102000007) write$binfmt_elf32(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2261], 0x8d4) fcntl$setsig(r1, 0xa, 0x8) fcntl$setpipe(r0, 0x407, 0x0) 17:59:44 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:44 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) accept$nfc_llcp(r0, &(0x7f0000001140), &(0x7f00000011c0)=0x60) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001080)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/4096}, &(0x7f0000001100)=0x78) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) 17:59:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0xb, 0x803, 0x10000) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r3 = dup3(r1, r2, 0x100000000000000) setsockopt$sock_int(r3, 0x1, 0x36, &(0x7f00000000c0)=0xfffffffffffffff9, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'rose0\x00', {0x2, 0x4e22, @local}}) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) 17:59:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8980, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) sendfile(r0, r0, &(0x7f00000000c0)=0x4, 0x7f8) fcntl$setstatus(r0, 0x4, 0x40400) 17:59:44 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x100082) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@x25={0x9, @remote={[], 0x1}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000180)="69279e9eb3fc06c063866ad6463d8cfc048ce1969005503ef871dd48141c3c03b697c3b59962d3296e0482d2c01d0a80660cbe1426cfc65a334dbf3c9bbe3df24c7cbb6fbc2fbb06330cec552fa021d9942bcca04e05f68d3c07daf459dd20d94e3fc044031293e38b6f5aa56f2915fcbcd91fe87aedd22e3d867347c34a573e8861f727da4684aa6da07e887f86cb2c132aec4fe3ba", 0x96}, {&(0x7f00000002c0)="f2416b81ef1f90080f8e3ccc4bee1efbdfd0ea7b06f2a43a99d0ab1f1288ecd5da73a5cc3e7758bb39bb4eb1f3605a1ee0a27fb6f735c8a62c8d79bfd4d5d0d4fad7541a5255bba8bde6efc008d628dfac9d37f191a0b5ccd77ba12c4a58c17c963b", 0x62}, {&(0x7f0000000340)="1f322394eeb4e72dfe124b6d174844be91fb90ca4207875a8bcee503a401d1a00514136241abf197be56e44ba0afe239739ede885c0dbf5f2d8bc098fd8b5a10a456d31ea711f6aca69ec1c3a369023f6907af76232ed190233e1644c87b561f311736c7f1c456f49fd79b277989e2ec7bc5a9eec01d899ab1cf50338aa118db25c0bc4b1b31cbf705210ecf56ef8865be8459377cc63da916338258a582d3e485ff44d01c0a5aa171bb27b55405aa5afd3a430126b14de90ecd97929b1e3c0fa34dec070624c538fc8a6ace0c3e038796bb57b016", 0xd5}, {&(0x7f0000000440)="6141c7efde596fd8adf746b4bfd1ababa708543b3092adba09fc58ccbaafe50e562ae8f7f3323778393141457d5285d530514ea8b9d3bbd3d7341a0cd7bab75d0d83721fbd8c6dd9d653033e8c51dc8b12094722d4287ef2bc7f513fbb4f7c4be3c7bd946867077392ca1b01265fb4b78488d5b99cac402debb4a58f15f7daee4d90d18e6d072ab6d6d22e4d14d62bd85186c5801a0eb8e31b35a3185e82caa6329748796f8ea51eef315c6da3597f5cc420d4d2054abf225c8ccc7b6042019151386fcd0bf2adc5570b0115a739f5f8af493f6fadd422f5bd192a11706b0f502eadc301aaade2cb344c7a04452ac4e1cc9a3cf2370b4851", 0xf8}, {&(0x7f0000000100)="0bef801197673a11dd15d0895bc51e1c4fd8f16cbda3cee245785edf3a05c1223204a38cc538", 0x26}, {&(0x7f0000000540)="a7b282cc4a120ce60886fbd32c520ab8e26e39291d74cb12f19c650ec1062cc24e8612322c936ed65a89ad17b82b64159e7484a3a27d7f90b84b26b15ce6041e76ee7ad3ad643d382f7c575374c3735acb59f8a8295fa297a353aa0d78011f11a9358160600e499444fd24d80199fde8d7b2c6bbb1669d71559c31b6a7368a6982ecafbef72f97e5c34f1988fd16e3e82852c818bdce", 0x96}, {&(0x7f0000000600)="62b9ace884b9d25e5f5a637830aa748c56eea72f13fc13370e3217cd0781244478c91837c58e07eb04f4540df3e11cd6c65faf27cad53c8a8d9a5d91dd3a3a21cec576b01dcdc6944fe66e12c8ac423dba7717b9760968cd9e3648df1f569915159a83f0262688c74c42643a49923f3d5e45fd8060bf4f9b510d", 0x7a}, {&(0x7f0000000680)="133297556f0aa0c4e4a5d71e7ddc77097bd136b6d561982cd43900510da8ee834485fc93810f597f1b426e0e4d319ae8313f6263f6cdbab02235b023a984d00531f7e7148aae7e5cba668d03d232da6aa41fe92928db5fc7aad9e4640959947b1b204ffb5a315c73b8bb74448c9c0eb4a529c2312844c0ee595e9200de6c3e496f5335409bfc4fbaab4b5030c55a", 0x8e}, {&(0x7f0000000740)="e0192f1a3d35bd3e557e9f8c46181dc0c06c66443c3701a26a1a61c408e9fb5596fa6f511a9ffc46a916a4e71089b10b409ea06d9147704345ca30ac8a8fee4bdd93a02b899785f0d310537143fade430c843f4cc9502944145a7b648d53e035fdd20b0e49cc2f96d45cea41ff7e655a02aa4dae74ab43626afd7d1d41cb8092585c5c373ca4ddb71cb0206f893c9d156b52484e3d9baa0aea098aacd3c70bd31c76695025dd3cc493a04e4952f3bd1b35e3ee282fd8b546c9e732eff396ddeb397ee3e7b60088159cd5c62cefa7a6", 0xcf}], 0x9, &(0x7f0000000900)=[{0x108, 0x113, 0x2, "9735ec035176aafc13135dc089572ff8e82e198e455d74e9e3852ac40ccf4d0dd48bd17c819ecf8c930fbfc31577a549d9eeb985707334c33c923f55cfe78bffffec5462b205bd903f45d535e97a1ce01c766f866caa322c25f8512a66c895c562df3f2196ce8fb7286aa82a596c9792486a5849a7c5404d4d140d50574e326bb7ea74a553d06272e67bdd4c3c7b238d923195d40479769c24450f5a3781d8513e4ff2608130c909fcd63f8180edf898daae1f05bab32722d2e75972a34b6b978e8151e8df5325ca5f08b3a412d7893fd28cf31ea5e83211ec404b03c48cdfe2b2839c85fc599328eba98f9705e21bf4b2f681aa0f838f"}], 0x108}, 0x40000) r2 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) sendfile(r1, r2, 0x0, 0x20000102000007) 17:59:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pread64(r0, &(0x7f00000001c0)=""/44, 0x2c, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r3 = dup3(r2, r1, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000080)={0x7fff, 0x8, 0x1, 0x6, 0x5, [{0x1000, 0x200, 0x396e, 0x0, 0x0, 0x3a80}, {0xf81, 0x8000, 0x9, 0x0, 0x0, 0x1484}, {0x1000, 0x7, 0x0, 0x0, 0x0, 0x800}, {0x5, 0x0, 0x2, 0x0, 0x0, 0x100}, {0x81, 0xfffffffffffffa01, 0x7ff, 0x0, 0x0, 0x8}]}) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 17:59:44 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:44 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x41da95c03eb39cfb, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x767, 0xdac}, 0xc) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100008000, 0x4) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x80089203, 0x2) tee(r2, r2, 0x0, 0x2) 17:59:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) sendfile(r0, r0, &(0x7f00000000c0)=0x8, 0x7f8) fcntl$setstatus(r0, 0x4, 0x40400) 17:59:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8981, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:44 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x3b, 0x2b, 0x5, 0x2, 0x4, 0x1, 0x2, 0x90}}) r1 = syz_open_dev$loop(0x0, 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) sendfile(r1, r2, 0x0, 0x20000102000007) 17:59:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) sendfile(r0, r0, &(0x7f00000000c0)=0xc, 0x7f8) fcntl$setstatus(r0, 0x4, 0x40400) 17:59:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x3) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) 17:59:45 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:45 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f00000001c0)='veth0_to_team\x00'}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x1, 0x18, 0x0, "5f199513b95e0bf2e62f7c691540fb599a32991ce7b1287168816fe6c9f9ed0be3af2add961201b637035f6593e09f639a5d63e2f4a1098abf5e6856821d3bb9", "1d79068e65a7fb8e1fca16c97e2adfa5312bc2be142b7f02e7b9ef9f283e74cac35af24d73700c65cc9b214ef4bcbd76d210d0084f514435e6e738532988d80e", "1b99fc5efec61d045ae8e1a56bc4d84f5baa0a3b07324706a72acd77484401de", [0x1, 0x1000]}) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x80089203, 0x20000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 17:59:45 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x100082) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x33, 0x10401) r2 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000000)={'system_u:object_r:netlabel_mgmt_exec_t:s0', 0x20, 'system_u:object_r:lvm_control_t:s0', 0x20, 0x7, 0x20, 'unconfined\x00'}, 0x6d) sendfile(r1, r2, 0x0, 0x20000102000007) 17:59:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) sendfile(r0, r0, &(0x7f00000000c0)=0xf, 0x7f8) fcntl$setstatus(r0, 0x4, 0x40400) 17:59:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000180)="530e8dde6e026dd7248555e71961000000c2bbf7b4ad3c0524844500005412ed00000000000000") r1 = socket(0x11, 0x803, 0x0) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r3 = dup3(r2, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) ioctl$sock_netdev_private(r3, 0x89f6, &(0x7f0000000040)="b452f4e5f1542026182966c3ae04760c1ee7ae5060a3c2a1e0349eab117827f9b979f02a4c06bca3cfe23d0ec40a76022ee97c9f8f9f2aabca4b8b151d2a7847e1f20047de46efda095dde57ae9d071b0c87a3ae656e8c696e79f18a8e7f97ff2a0278c7e0939bfbad30535cb60bb8addc2c653b209c3288ddbed4a4decc30809b0da4f0df58b0687b8e21dc368ac61de8c90008164502c5e7d5d8e3dd4ae6471e3d65487585fce255f4b3eb023725873938390f8976add911568734c8ed2d155d395ac5cdd15d970c1644ac9ab8e30e88cbdd6bebbcc19e4f7e59") recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) 17:59:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000001) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x10000, 0x6, 0x120000000000}) 17:59:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) sendfile(r0, r0, &(0x7f00000000c0)=0x10, 0x7f8) fcntl$setstatus(r0, 0x4, 0x40400) 17:59:45 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:45 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000080)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0), 0x1000000000000066, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0x6}) 17:59:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) sendfile(r0, r0, &(0x7f00000000c0)=0x14, 0x7f8) fcntl$setstatus(r0, 0x4, 0x40400) 17:59:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0x200}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, r1, 0x8}) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x8e, 0x40f, 0x46c, 0x8000, 0x6, 0x1000, 0xfe30, 0x81, 0x9633, 0xcfed}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, r2, 0x4}) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) 17:59:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:45 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) sendfile(r0, r0, &(0x7f00000000c0)=0x18, 0x7f8) fcntl$setstatus(r0, 0x4, 0x40400) 17:59:46 executing program 1: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x20000000) 17:59:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000140)={0x0, 0x3, 0x2, [], &(0x7f0000000100)=0x7c11c179}) r2 = socket(0x11, 0x803, 0x0) r3 = socket$inet(0x2, 0x20000080003, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r4 = dup3(r3, r2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) connect$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x1}}, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x8000, 0x0) recvmmsg(r2, &(0x7f0000002e00), 0x386, 0x22, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r2, 0x0, 0x9, 0x10000000}) 17:59:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1'}, 0x4) sendfile(r0, r0, &(0x7f00000000c0)=0x1c, 0x7f8) fcntl$setstatus(r0, 0x4, 0x40400) 17:59:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8990, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 17:59:46 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x101) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20800, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0xfc9, 0x7}, 0x8) fadvise64(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x7e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x80000001, 0x7fff, 0x0, 0xffff}, {0x2, 0x6, 0x9, 0x4}]}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000003c0)={0x4000000000000000, 0x6000, 0x800, 0xf, 0xa}) ioctl$EVIOCGREP(r1, 0x40047459, &(0x7f0000000240)=""/174) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)) 17:59:46 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x800, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000000c0)={0x1e}) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) fstatfs(r1, &(0x7f0000000000)=""/88) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x20000000) syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x4, &(0x7f0000000400)=[{&(0x7f0000000180)="283c60df3d6fe0a1a82f7db653aa28b66897f5c63085b08f4d7e1e27a3ea55d0", 0x20}, {&(0x7f00000001c0)="dce39877e4fecf61c4c03cc92a9c0cce1040ab43250d83f15341d078bad1dcc804057725ed02d6dbc5394e1f6ac2574f375d2f0e6c25920de5c52c0e4c6b0d887bc631b63788da5f91dd068612360b59fed3ca5d5864741e53a4fb039225ab1ee4440fe21795cd42683beac0a9be29d9bae27d7e20015f882370b9cdcefb555bbe6193d12f31be3f45167970f3f107116bb1e3f7ff1451d4221dcc429f696718b4e86a8e25c8ca0796be91f5dc9d60fa966bcc41308d2b3d4bded65753e0d50f49d77ebe78eb857a8f7649edcb189045d93ffb39f2bae0ae7e4c57452e0acabb74074817d950494507ad995095add59536d58a", 0xf3, 0x8000}, {&(0x7f00000002c0)="626428fe2e1e37998a8ccfe9e8f525d61e878a1c616b9e88cbf43619028319d3afcb36bd5c51747ae75ad6329052fb8abda692ec0ac1319d5446c59b601669700feedfa9780c60621e0d8aba9e11f4e417be5e649a344fc2d1c6f88dc77943736b881d148fbc5c3025a0d836a0453c6532c43a761c02b36d8c37c07e86775ec8e59703514994060200b2c0c59b9ca96b7c4b", 0x92, 0x8000}, {&(0x7f0000000380)="0113320cc8ca237e725a59237e72305c1220fbd15adcbb987424379a6b7cc8cc6a94f3865c7eaccd8319ac364a837cf7dfd27b8e58a620398fa88ce7e566eeb272145a380f321e6f16a8ce57569b27b5c007f62766b9fa4b42199e6075c092f24c1986b726e088f3ef", 0x69, 0x220}], 0x20000, 0x0) [ 1328.719387] INFO: task syz-executor.5:4448 blocked for more than 140 seconds. [ 1328.726750] Not tainted 4.19.50 #22 [ 1328.736735] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1328.745006] syz-executor.5 D28472 4448 7935 0x00000004 [ 1328.758644] Call Trace: [ 1328.761495] __schedule+0x80d/0x1c70 [ 1328.765352] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1328.776579] ? rwsem_down_write_failed+0x764/0xc30 [ 1328.782672] ? _raw_spin_unlock_irq+0x28/0x90 [ 1328.787209] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1328.798040] schedule+0x92/0x1c0 [ 1328.801909] rwsem_down_write_failed+0x774/0xc30 [ 1328.806974] ? rwsem_down_read_failed+0x3c0/0x3c0 [ 1328.825663] ? kasan_check_write+0x14/0x20 [ 1328.830231] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1328.835106] ? mark_held_locks+0xb1/0x100 [ 1328.845876] ? check_preemption_disabled+0x48/0x290 [ 1328.851298] call_rwsem_down_write_failed+0x17/0x30 [ 1328.856353] ? call_rwsem_down_write_failed+0x17/0x30 [ 1328.867760] down_write+0x53/0x90 [ 1328.871513] ? register_netdevice_notifier+0x7e/0x630 [ 1328.876738] register_netdevice_notifier+0x7e/0x630 [ 1328.889959] ? pcpu_balance_workfn+0x12a0/0x12a0 [ 1328.894770] ? __lockdep_init_map+0x10c/0x5b0 [ 1328.905103] ? __dev_close_many+0x300/0x300 [ 1328.912340] raw_init+0x299/0x340 [ 1328.915818] ? can_init_proc.cold+0x16/0x16 [ 1328.926795] can_create+0x288/0x4a0 [ 1328.930739] __sock_create+0x3d8/0x730 [ 1328.934666] __sys_socket+0x103/0x220 [ 1328.938479] ? move_addr_to_kernel+0x80/0x80 [ 1328.949678] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1328.954495] ? do_syscall_64+0x26/0x620 [ 1328.958569] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1328.970686] ? do_syscall_64+0x26/0x620 [ 1328.974704] __x64_sys_socket+0x73/0xb0 [ 1328.978824] do_syscall_64+0xfd/0x620 [ 1328.986826] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1328.994640] RIP: 0033:0x459279 [ 1328.998019] Code: Bad RIP value. [ 1329.006541] RSP: 002b:00007f35a42dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1329.016668] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459279 [ 1329.028361] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1329.037969] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1329.055752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f35a42dd6d4 [ 1329.063294] R13: 00000000004c7c92 R14: 00000000004de178 R15: 00000000ffffffff [ 1329.077550] INFO: task syz-executor.5:4553 blocked for more than 140 seconds. [ 1329.085095] Not tainted 4.19.50 #22 [ 1329.095410] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1329.103757] syz-executor.5 D28472 4553 7935 0x00000004 [ 1329.115829] Call Trace: [ 1329.118460] __schedule+0x80d/0x1c70 [ 1329.128509] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1329.140036] ? rwsem_down_write_failed+0x764/0xc30 [ 1329.144993] ? _raw_spin_unlock_irq+0x28/0x90 [ 1329.153703] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1329.158323] schedule+0x92/0x1c0 [ 1329.163911] rwsem_down_write_failed+0x774/0xc30 [ 1329.168698] ? rwsem_down_read_failed+0x3c0/0x3c0 [ 1329.177714] ? kasan_check_write+0x14/0x20 [ 1329.184327] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1329.193360] ? mark_held_locks+0xb1/0x100 [ 1329.197545] ? check_preemption_disabled+0x48/0x290 [ 1329.207961] call_rwsem_down_write_failed+0x17/0x30 [ 1329.217217] ? call_rwsem_down_write_failed+0x17/0x30 [ 1329.225129] down_write+0x53/0x90 [ 1329.228619] ? register_netdevice_notifier+0x7e/0x630 [ 1329.238248] register_netdevice_notifier+0x7e/0x630 [ 1329.245795] ? pcpu_balance_workfn+0x12a0/0x12a0 [ 1329.255718] ? __lockdep_init_map+0x10c/0x5b0 [ 1329.263067] ? __dev_close_many+0x300/0x300 [ 1329.267589] raw_init+0x299/0x340 [ 1329.275493] ? can_init_proc.cold+0x16/0x16 [ 1329.282145] can_create+0x288/0x4a0 [ 1329.285803] __sock_create+0x3d8/0x730 [ 1329.294017] __sys_socket+0x103/0x220 [ 1329.297852] ? move_addr_to_kernel+0x80/0x80 [ 1329.304654] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1329.313625] ? do_syscall_64+0x26/0x620 [ 1329.317628] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1329.325186] ? do_syscall_64+0x26/0x620 [ 1329.333620] __x64_sys_socket+0x73/0xb0 [ 1329.337629] do_syscall_64+0xfd/0x620 [ 1329.343625] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1329.348840] RIP: 0033:0x459279 [ 1329.357385] Code: Bad RIP value. [ 1329.363065] RSP: 002b:00007f35a42bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1329.375416] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459279 [ 1329.385727] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1329.397203] RBP: 000000000075bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1329.406763] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f35a42bc6d4 [ 1329.418499] R13: 00000000004c7c92 R14: 00000000004de178 R15: 00000000ffffffff [ 1329.428021] [ 1329.428021] Showing all locks held in the system: [ 1329.438518] 3 locks held by kworker/u4:4/411: [ 1329.445426] 1 lock held by khungtaskd/1033: [ 1329.454022] #0: 0000000050d3fd14 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 1329.464948] 1 lock held by rsyslogd/7755: [ 1329.473304] #0: 0000000018d35298 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 1329.483448] 2 locks held by getty/7878: [ 1329.487437] #0: 000000004ad9afa9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1329.502096] #1: 0000000016474cd7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1329.514174] 2 locks held by getty/7879: [ 1329.518171] #0: 000000000273260c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1329.532770] #1: 000000001a852d86 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1329.543930] 2 locks held by getty/7880: [ 1329.547921] #0: 0000000043d0ff37 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1329.562557] #1: 00000000d2c2b2e1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1329.573888] 2 locks held by getty/7881: [ 1329.577904] #0: 00000000e8fccbd3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1329.590481] #1: 00000000e27d5d78 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1329.604190] 2 locks held by getty/7882: [ 1329.608182] #0: 00000000ed28d5dc (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1329.623273] #1: 000000007a669468 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1329.634567] 2 locks held by getty/7883: [ 1329.638740] #0: 000000003e16217d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1329.654415] #1: 00000000321722d7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1329.664819] 2 locks held by getty/7884: [ 1329.669042] #0: 00000000df63212f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1329.677420] #1: 00000000970902a0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 1329.692844] 1 lock held by syz-executor.5/4448: [ 1329.697551] #0: 00000000d7a5631f (pernet_ops_rwsem){++++}, at: register_netdevice_notifier+0x7e/0x630 [ 1329.709985] 1 lock held by syz-executor.5/4553: [ 1329.714697] #0: 00000000d7a5631f (pernet_ops_rwsem){++++}, at: register_netdevice_notifier+0x7e/0x630 [ 1329.731217] [ 1329.732889] ============================================= [ 1329.732889] [ 1329.744235] NMI backtrace for cpu 1 [ 1329.747900] CPU: 1 PID: 1033 Comm: khungtaskd Not tainted 4.19.50 #22 [ 1329.754481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1329.763843] Call Trace: [ 1329.766591] dump_stack+0x172/0x1f0 [ 1329.770238] nmi_cpu_backtrace.cold+0x63/0xa4 [ 1329.775014] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1329.780896] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 1329.786197] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1329.791415] watchdog+0x9df/0xee0 [ 1329.794893] kthread+0x354/0x420 [ 1329.798273] ? reset_hung_task_detector+0x30/0x30 [ 1329.803128] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1329.808686] ret_from_fork+0x24/0x30 [ 1329.812673] Sending NMI from CPU 1 to CPUs 0: [ 1329.817793] NMI backtrace for cpu 0 [ 1329.817801] CPU: 0 PID: 411 Comm: kworker/u4:4 Not tainted 4.19.50 #22 [ 1329.817808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1329.817812] Workqueue: netns cleanup_net [ 1329.817819] RIP: 0010:preempt_count_add+0xa1/0x1b0 [ 1329.817832] Code: fe 00 00 00 8b 15 df c3 ec 08 85 d2 75 15 65 8b 05 44 ab b8 7e 0f b6 c0 3d f4 00 00 00 0f 8f 80 00 00 00 65 8b 05 2f ab b8 7e <25> ff ff ff 7f 41 39 c4 74 05 5b 41 5c 5d c3 48 8b 5d 08 48 89 df [ 1329.817836] RSP: 0018:ffff8880a8e1fad8 EFLAGS: 00000293 [ 1329.817844] RAX: 0000000080000201 RBX: 0000000000000003 RCX: 0000000000000000 [ 1329.817850] RDX: 0000000000000000 RSI: ffffffff8594ac1f RDI: 0000000000000001 [ 1329.817856] RBP: ffff8880a8e1fae8 R08: 0000000000000000 R09: 0000000000000001 [ 1329.817861] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 1329.817867] R13: ffffffff88663f48 R14: 0000000000000001 R15: dffffc0000000000 [ 1329.817873] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1329.817878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1329.817884] CR2: 00007fdacc00d908 CR3: 000000009389d000 CR4: 00000000001406f0 [ 1329.817890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1329.817895] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1329.817898] Call Trace: [ 1329.817902] _raw_spin_lock+0x13/0x40 [ 1329.817906] nf_conntrack_lock+0x17/0x70 [ 1329.817910] nf_ct_iterate_cleanup+0x1d7/0x4e0 [ 1329.817915] ? nf_ct_port_nlattr_to_tuple+0x190/0x190 [ 1329.817919] nf_conntrack_cleanup_net_list+0x7a/0x250 [ 1329.817924] nf_conntrack_pernet_exit+0x11d/0x170 [ 1329.817928] ? print_tuple+0x540/0x540 [ 1329.817932] ops_exit_list.isra.0+0xfc/0x150 [ 1329.817936] cleanup_net+0x3fb/0x960 [ 1329.817940] ? unregister_pernet_device+0x80/0x80 [ 1329.817944] ? __lock_is_held+0xb6/0x140 [ 1329.817948] process_one_work+0x989/0x1750 [ 1329.817952] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1329.817956] ? lock_acquire+0x16f/0x3f0 [ 1329.817960] ? kasan_check_write+0x14/0x20 [ 1329.817964] ? do_raw_spin_lock+0xc8/0x240 [ 1329.817968] worker_thread+0x98/0xe40 [ 1329.817972] kthread+0x354/0x420 [ 1329.817976] ? process_one_work+0x1750/0x1750 [ 1329.817981] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1329.817984] ret_from_fork+0x24/0x30 [ 1329.825286] Kernel panic - not syncing: hung_task: blocked tasks [ 1330.050508] CPU: 1 PID: 1033 Comm: khungtaskd Not tainted 4.19.50 #22 [ 1330.057094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1330.066577] Call Trace: [ 1330.069197] dump_stack+0x172/0x1f0 [ 1330.072913] panic+0x263/0x507 [ 1330.076134] ? __warn_printk+0xf3/0xf3 [ 1330.080035] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1330.084983] ? ___preempt_schedule+0x16/0x18 [ 1330.089412] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 1330.094878] ? nmi_trigger_cpumask_backtrace+0x1c1/0x1f8 [ 1330.100347] ? nmi_trigger_cpumask_backtrace+0x1cb/0x1f8 [ 1330.106021] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 1330.111495] watchdog+0x9f0/0xee0 [ 1330.114991] kthread+0x354/0x420 [ 1330.118370] ? reset_hung_task_detector+0x30/0x30 [ 1330.123219] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1330.128770] ret_from_fork+0x24/0x30 [ 1330.133992] Kernel Offset: disabled [ 1330.137677] Rebooting in 86400 seconds..