[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 92.589600] audit: type=1800 audit(1546867813.631:25): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 92.608782] audit: type=1800 audit(1546867813.631:26): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 92.628239] audit: type=1800 audit(1546867813.661:27): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.69' (ECDSA) to the list of known hosts. 2019/01/07 13:30:25 fuzzer started 2019/01/07 13:30:30 dialing manager at 10.128.0.26:44555 2019/01/07 13:30:30 syscalls: 1 2019/01/07 13:30:30 code coverage: enabled 2019/01/07 13:30:30 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/01/07 13:30:30 setuid sandbox: enabled 2019/01/07 13:30:30 namespace sandbox: enabled 2019/01/07 13:30:30 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/07 13:30:30 fault injection: enabled 2019/01/07 13:30:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/07 13:30:30 net packet injection: enabled 2019/01/07 13:30:30 net device setup: enabled 13:33:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="23000000200081ae00060c00000f000002000000000000018701546fabca1b4e7d06a4", 0x23}], 0x1}, 0x0) syzkaller login: [ 317.022831] IPVS: ftp: loaded support on port[0] = 21 [ 317.182889] chnl_net:caif_netlink_parms(): no params data found [ 317.254063] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.260620] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.269281] device bridge_slave_0 entered promiscuous mode [ 317.278456] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.285112] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.293668] device bridge_slave_1 entered promiscuous mode [ 317.328865] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 317.340575] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 317.372102] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 317.381025] team0: Port device team_slave_0 added [ 317.387919] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 317.396711] team0: Port device team_slave_1 added [ 317.403206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 317.411649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 317.556999] device hsr_slave_0 entered promiscuous mode [ 317.722308] device hsr_slave_1 entered promiscuous mode [ 317.983136] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 317.990698] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 318.022865] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.029447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.036658] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.043243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.134049] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 318.140203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.155209] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 318.168880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.182929] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.192750] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.205878] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 318.223793] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 318.229902] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.244870] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 318.253822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.264519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.272774] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.279321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.297934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 318.310763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 318.319166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.327830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.336097] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.342625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.351430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.368306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 318.381499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 318.395250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 318.402869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.412063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.420987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.429730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.438678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.455012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 318.467628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 318.478490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.488246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.500696] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 318.509267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.517806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.526488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.535177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.543744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.554279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.585274] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 318.614948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.909094] netlink: 7 bytes leftover after parsing attributes in process `syz-executor0'. 13:34:00 executing program 0: r0 = socket$kcm(0x10, 0x40000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0) [ 319.030744] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 319.039836] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 319.055065] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 319.064885] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 319.076167] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 319.085143] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. [ 319.094764] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor0'. 13:34:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 13:34:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000301ffff848fdb00a0eb000000000000"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x34b, 0x200002, &(0x7f0000000c40)={0x77359400}) 13:34:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00\x00\x00\x00 \x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 13:34:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000428bd7000fddbdf250e0000003c0001000800080027000000080009004c00000014000300ac1414130000000000000000000000000c00070020000000040000000800080056b200006c000200080002004e210000080002004e240000080004008100000008000400090000001400010000000000000000000000000000000000080002004e230000080002004e210000080002004e23000008000b000200000014000100fe8000000000000000000000000000aa"], 0x1}, 0x1, 0x0, 0x0, 0x20048800}, 0x40000) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 13:34:01 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000080)='-*\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x6, 0x9, 0xd6, 0x880, 0x1, 0x1f, 0x200, 0xfffffffffffffff8, 0x5, 0x8, 0x514, 0x4, 0xfffffffffffffffb, 0x1f, 0x40, 0x5, 0x6, 0x3, 0x800, 0x200, 0x8, 0xfff, 0x3, 0x5, 0x7, 0x7747, 0x80000000, 0x9, 0x10001, 0x9, 0x3, 0x5]}) ioctl$VIDIOC_G_CTRL(r0, 0xc0205649, &(0x7f0000000040)={0x7fffffff}) [ 320.333836] IPVS: ftp: loaded support on port[0] = 21 13:34:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffe}) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000140)={0x20, 0x401, 0x3}, 0xc) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x3, 0x0) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f00000002c0)={0x5b8, 0x100, 0x4515, 0x400, 0x3, 0xfffffffffffffffd}) read(r2, &(0x7f0000000100)=""/19, 0x13) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0x40a85321, &(0x7f0000000340)={{0x4, 0x82}, 'port1\x00', 0x80, 0x4c, 0xeb0, 0x81, 0x5, 0x100, 0x80000001, 0x0, 0x3, 0x5}) [ 320.514420] chnl_net:caif_netlink_parms(): no params data found [ 320.637264] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.644168] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.652461] device bridge_slave_0 entered promiscuous mode [ 320.661423] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.668166] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.676664] device bridge_slave_1 entered promiscuous mode [ 320.709870] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 320.721471] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 320.753776] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 320.762514] team0: Port device team_slave_0 added [ 320.769138] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 320.778006] team0: Port device team_slave_1 added [ 320.785095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 320.794274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 320.987498] device hsr_slave_0 entered promiscuous mode [ 321.083309] device hsr_slave_1 entered promiscuous mode [ 321.243972] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 321.251780] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 321.286013] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.292610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.299721] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.306345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.408135] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 321.414880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.429507] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 321.445110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 13:34:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)=ANY=[@ANYBLOB="98c3ec6b35cb4796e54701c0637bb537cc4ab6e2cc2fe9e8d7d8ea6592afef718e3a47154f0fb4b16da68145b12df53bc107f280c0d890a6e66687fa41081608feb82b2c38dc6de2a419d74f162c929b011adc17601a08c8866fbb0cd3c8f6fac9f4daefee1680202c1b697ffa6c28ee2f1cf36b778a94cba6dbd843361014e1a9c774a2b3b256a13a992b372df90db795c67e3be869e7815a402624cc9e40f3c6f2d1eabe2e7026b0d5d8299fad4ffb4d276293da00f334616129c5c7b6c8ea8c5f638f44c17fe7286d7808ea50", @ANYBLOB="80000000b00d1975ff2f3a6f7ac98c1eb2165c6ef8d5cf91f0edc34f4803ebcf2c534fb3a0fb776559e71b5475c7d262e7099088ac46e3ca08bb71dfe5b373e926dfc2a3369287457be34292b393da455733e4eb4ebec370f4f43ee248ccf9ade2e029396882d7ec3f7ec9315844df884720c3be8a84761f5f99f06c422a3c27807b31aa"], &(0x7f0000000040)=0x2) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x6, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x800}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000340)) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x1a0]}) [ 321.475565] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.495325] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.512011] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 321.550530] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 321.556760] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.587705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 321.590892] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 321.597141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.618929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.627242] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.633819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.658417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 321.671292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 321.680351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.689150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.697448] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.703996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.711651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.733360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 321.740855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.756533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 321.768208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.777748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.804305] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 321.821250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 321.840212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.848615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 13:34:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'bridge_slave_0\x00\x04'}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0xceb, 0x5, 0x2, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00?', 0x2000000c0ffffff}) [ 321.858280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.867717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.876216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.889993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 321.915051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.926651] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 321.932774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.942635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.951188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.012054] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.030822] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 322.041100] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.047746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.055852] protocol 88fb is buggy, dev hsr_slave_0 [ 322.061526] protocol 88fb is buggy, dev hsr_slave_1 [ 322.087871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.144835] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.170708] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.177400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.185475] protocol 88fb is buggy, dev hsr_slave_0 [ 322.191270] protocol 88fb is buggy, dev hsr_slave_1 13:34:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) unshare(0x400) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:34:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000ac0), 0xc, &(0x7f00000000c0)={&(0x7f0000000a40)=@ipv6_getnetconf={0x14, 0x52, 0x7c5fd5fa6bcda905}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000040)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000100)}, 0x0) 13:34:03 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x22000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x10000000000000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000500)=[{0x28, 0x0, 0x7, "44188f03008cbfb6c4553eb9cbd9d9e690"}], 0x28}, 0x0) 13:34:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000140)=""/11, 0xb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)) r4 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) dup2(r3, r4) 13:34:03 executing program 0: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000040)={0x6, "4ba4efc4ea1da3eba5174711920866ea218962af4ddb02e5f92fef5ceaffebf5", 0x1, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000380)) 13:34:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000140)=""/11, 0xb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)) r4 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) dup2(r3, r4) 13:34:04 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x1fffe) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r2 = getpgrp(0x0) fcntl$setown(r1, 0x8, r2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x2373, 0x244100) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0xb) pipe2(&(0x7f0000000100), 0x800) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x600, 0x0) [ 323.587663] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 323.597286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 13:34:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000080)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) memfd_create(&(0x7f0000000000)='$\x15&em0\'\x00', 0x3) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x541) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000040), 0x20005) 13:34:04 executing program 1: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="0078c319649bbc0002020100000000fd02000700009a8e7aab5ec1c4900001"], 0x18) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffb, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:34:04 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200000, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xffff) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x400005000, 0x2000, &(0x7f0000015000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:34:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000800)) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000080000005cf777f39bb55efb0000000000000800150006000000080000400000000000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x100000000000}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xfffffffffffffff7, 0x80900) r3 = getuid() ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f00000000c0)={0x1}) r4 = getpgrp(0x0) sendmsg$nl_netfilter(r2, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000780)={&(0x7f00000001c0)={0x590, 0x11, 0x5, 0x80c, 0x70bd2d, 0x25dfdbfd, {0x3, 0x0, 0x8}, [@nested={0xc, 0x25, [@typed={0x8, 0x56, @ipv4=@remote}]}, @generic="2e0bd4c9bc3fd671e8589c5ff25dd5099f4113d445fd6264bbe5081be7b48bfe0e68cc4ad37eb7502245a48d488a6ef2774f221c0797743093689b7f46d8263d7355f14eafb2faf0517427b12b71d8c0f88eab7e11cb311cb125e64d7153c979374cd22fd6605eca9d09abbe72f0551e4f41c569", @typed={0x8, 0x60, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x1bc, 0x31, [@typed={0x14, 0x5e, @ipv6=@dev={0xfe, 0x80, [], 0x1e}}, @generic="629f4044ce7f7f957283e40ec8ffc655dc4a376330805a0f1018a148623f0cd1d7b0ba2ac479fa6961d9adb0547fe1bd34bd1153af0a20e2a3eafd7978c612fe493ee5856af290601445927da574134a348473ae6400c80738909a71aa76118906a48921ae64552848e4eec1116e9cfcaf392e3840629d0497fdfcee6fcec462b1edeaa47a85f37a6059f49a84e252b2ac6ad921958d4645138018bbe2cda9367d1075a85781ff1b0220eafbd646ce13b66e06303a8ea2a6f240dc1735bf278f744f8d792ef9d3ce04f89b26f1a5c3d16298bc135caf7f89ab777a5ed1a5f4be53305bc9b06cbf470898e71c8b99b0c072c57c1e", @typed={0xc, 0x5b, @u64=0x3f}, @generic="3489d4550b5242a420505c4363878b15892ecec0e13bd470c623945133930d01a874f5c56f14d82bb1f0c297864e14d43102d04f784c4949499f9b4bb377084333d3194afb7d88e0d79d668ac78a52d87e44ba262544ff8db9883203ff0e9622f87c1d4d6d09374dd6212502d4523f96bafbbdb9ed89ddbf356132c1827823d2658e7a05067850", @typed={0x8, 0x5, @uid=r3}, @typed={0x14, 0x5e, @ipv6=@mcast2}]}, @nested={0x218, 0x2a, [@generic="774ef5cfa0020de928565ecc9a80ff7cfbdf1e2b0a0425f1d80a73824ae1875a030604f33c784288b2bb01b7e9f809f79eefc981edac8b3284c4c3652fb2986d450b3c0eda4962bb63", @typed={0xc, 0x6c, @u64=0x8}, @typed={0x8, 0x94, @pid=r4}, @generic="7d9ada383906b5635855bbdea10bdf2f206e42daac6f61b3b4178e2414f6c9721ff0e63d60c189a9ff07ab75b9c90b8817", @generic="ff05cb0b59d25813b73e0b340dfe530e657d3b633f177c088d36eeb66b765aa8f9d5bdff17b991245d96669ede5da0f295efd3d6272ef34831650280f017507194d485975f4a00c55ce85470462e844c0008a391d522d19eb6ee831665ef03022b81eb4fb407bc4a0942383960646c9cb247186197c16a9f18fd79ea4fecef6db612db7c85f875c442e04f9d8be645ef24ac62d4508ffe2f0b8a1059d2962a242a9ba82c1b44644ab5b85840e282dced00d1c293527fe7077cf8b3c7b5ee49410c49c95729dd0fa4abd439f5", @typed={0x14, 0x7, @str='/dev/snd/seq\x00'}, @generic="3d02228e988b6a617e14c51503e639f2fcbab91e034c72ec7f62135d8d149b963fa5a51ff1feaa7fdf3033907fcbc41c4d2d38b8190f638d5721e30027d49879dfa5d421e85f98104864e78b72cefc4ac7e11c671c407f24d1d449bc6174d5e3afe727fd3c3d4866dc195b020d922de28b60c8b4b6fc5c5fd770de8ebbeb822d53fd00b7b64f00173ab4ce9feeeb23f8bb643c102904ffd42ae66e027904", @typed={0x8, 0x84, @str='\x00'}]}, @generic="e4a41e75c928c238860cc80734ecea4019863482090d8cb2ca1f081e83dce70c5d18b045884b4bbb088558a14b933e05c2942c064d0f8385ead62827215fec00e78378d8d1f3bff36e32e4543cd973be", @typed={0x8, 0x67, @u32=0x7ff}, @nested={0xc8, 0x56, [@typed={0x8, 0x59, @fd=r2}, @generic="81beaf", @typed={0x8, 0x4d, @fd=r1}, @generic="631c06da6d1d9a08ba63012f69d41e641e8ef5df1f4bb3c9f77a7f0c5bee15fc699e20c52c7dad2b6a3524f6148ca232d8e8626dd0583d4702a0cd655dfec7f265e3c4d0bbd69db6faf31d94b4bcc768b8aac8f146f9f6b63b52510e1c338b63575230d62c25dad96332bee509fec2ffece478935f106a95a97399875a8e310be66a27448249a79e66e17833cd5b925f667eedaf9d02dba5c83891d9b2d2c39af4a5ad86c24c", @typed={0x8, 0x64, @fd=r2}]}]}, 0x590}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 13:34:05 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1041, 0x0) execve(0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000100)) read(r1, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) r3 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3d) fcntl$setown(r3, 0x8, r0) dup2(r1, r3) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x844, 0x0) execve(&(0x7f00000004c0)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 13:34:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x64}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 13:34:05 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/89) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1380, 0x59d08b97d233c569, 0x1}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x20, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r3, 0x800, 0x5, 0x1}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/246) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000340)=0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e22, 0xfffffffffffffffb, @remote, 0x9}}}, &(0x7f0000000440)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000480)={r3, 0x1}, 0x8) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000004c0)={'nat\x00'}, &(0x7f0000000540)=0x54) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000580)={0x4, {{0x2, 0x4e21, @broadcast}}}, 0x88) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x201008000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000680)={0xc}) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000700)={0x3, 0x9b, {0x57, 0x53, 0x10001, {0x7, 0x20}, {0x25b, 0x100000001}, @period={0x5c, 0x8001, 0x1000, 0x9, 0x1, {0x6, 0x0, 0x1, 0xfffffffffffff800}, 0x9, &(0x7f00000006c0)=[0x5, 0x7, 0x5, 0x3c4, 0x4, 0x702add8, 0xfffffffffffffffe, 0x1000, 0x100]}}, {0x51, 0xffffffff, 0x9cb, {0x1, 0x6}, {0x6a6}, @cond=[{0x1, 0x7f, 0x1f, 0x3, 0xf56b, 0xffffffffffffffe1}, {0x9, 0xffff, 0x4, 0xc8d, 0x8, 0x1}]}}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000780)=0x80000000, 0x4) sendmmsg(r0, &(0x7f0000008200)=[{{&(0x7f00000007c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x200, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="f2a2593b5ae918e92f3843df3e6bfa590435e433f6b4ed3b5e382b60ef7922ccbb23ebbc4f8c826da84fda3c015e447e02e1db8afce4f30fd40cdb3a32c6d743bc61ce144b6452073386161c202dd48dd64e495b95e524c17abb8013d74e0c7b2a118ffdbaa75516aae6a3d1dd583311e48570340e80871a5b418e0837b975c5f72c377dbdecca2c39a4149ed5befb797074a087468b989aef3c0504094c4f9210a0c612ec1e951d12a9cceb7e87468f09719c31e6d7d090f65fe9f4", 0xbc}], 0x2, &(0x7f0000001940)=[{0xc8, 0x103, 0x7fffffff, "9784124440aa2171ba4b043fb1b554f2e67600c2807bfaca19f5c3299e9f15a96aabb041da4fc65feb1e48ea9a5750a2b7c4cdfbec5bed01f542e3c72af02916ab5e36b99b554d1120d882047418a62ccc9f706bc5f6aa1892c797decb1ed528b02390528375aa393b8d0ded3bc88d2ea69c8eb3430ac15cff145fadab6503317d10d8947adf39d5deee691428bedbdef2239568e82e3898a6088b50264b158e1ead0e10a588e095fb82b5783641c295d3bd"}, {0x50, 0x11f, 0x1, "7979a07ef044bbda9e1f4d34189c50d1b7e9625fd4b501ad4ce5bbfc2cdebfdc7d26dce5fb3964745ad9e3d32d487e7d4ac83e1a7278d6aed36e283db577"}, {0xe0, 0x29, 0x81, "bebdd561ebbcd422e21747b70af43e1c152a64c4af9ffa6db5cc6779b6f2ac1cb636c61d82fdfe46724f5d12efed7e4890276aea20700b7b5ca846eb3e0aac17bc202a4299a4cff7642485a5f705ab573264c9cfc10a7960e1d163a4e16aca11a55bfd48b6d61addb5574492f97bb964d5d7731aec4ceca71d4cb89a606ba806d0df1a6f823947fcdb7c17a81cbd516c82921039d881fe57f71fbe308e8fc2ed641dcc9dbd788c848441ef0e2730dd61accb514a0e38e5de909dd1d51bc039a631666648274413138654dab0b71bff"}], 0x1f8}, 0xfffffffffffffff7}, {{&(0x7f0000001b40)=@can, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="8e849a2e17911103805639a6f0bc4946df9f6c69e18ed49d9527306b10f7cbace79258de5c4c36ff34bb439818d5b345b505fcf63b934db6e90dc6f7b51d76056eaf90b6b1aa4f473aeaa9bad171c60585bcbc7c49b33c181a10f03e3bdc9a357d87ba2c5850c2f00002da469c094a852e98e8a6e26bfcd291adaafca898ea37afccc8edb0ce0e73c0", 0x89}], 0x1, &(0x7f0000001cc0)=[{0x88, 0x109, 0x80000001, "54752f861f02f4d4d4cb80c4c1f5bb0586a43d49d41086954dc69607c621fe37ad2a701286da4e62b7139e7ea26a923d4d99a484c3be2f9b54856d05f6e4647c899762ac35647f60aba5889ae8595f384900720d373960885fcbfa02317bc6f6d3aa16440365b34432fb386cdfdcca95a4"}, {0xc8, 0x11, 0x6, "c71c4136a2e2384f96e55754ffcdefcfc03567eb97060bdf58bc04298cb26efc726ea521ad4f7478ad5bc1895d918de3d453300ed8e31f6dd36f26cb6b1e2452536a8ce290692bc560c78fb60bd53b605fa08fa99132b962e34f0ab0b4b24808ebb0f7e2d06a22f30b1278406cf95955ec56bd08cd28d0f474c5f1b4b38c2853c5f72cb15f6e09e0759bba41fe55127d9cfba2ddd3bd6f9be87fe431f1e2521d5ba72fac152b110101e590bf4f90426483b63108baa207"}, {0x18, 0x10d, 0x4, 'Hr'}, {0x78, 0x117, 0x0, "2ac8023e9b3a96664cb9f1c75efb1a0f7b5f0d0245ab24f11dbfc6d19acb30659bda1da0fdff3dcf85925cac8171969f7eca7c18b44b93fba553a260b2a3acd71ce4e8dff41b6ebcd3d7d4657b2faa517b8c86b1facfece970f58ed9454cec142ed8d5ee49f1"}, {0xd8, 0x10a, 0xde8, "b4b18ac73b24abd3eea6cef4ada8ed82811ef493e982fe06b84b0052b4daccc8821d7e2fc8e1934e5f027b6099da61ca0c4418cf9ede36a32b4df3b1af5f51e29151558311deba6b7b0f2ab8fbd7e47ba8d700a7a8f48a306c2b0804dacf3a18445619ecd8808b26bac0cb2760dad78800806e062c13dc4781990ad4bfda4c29989d048c34b44f8a3d2f170903dad734b216809f5d850042be4ace01802a42e919c3afefb0c5ec6bbbe69b32c69ad33c54c908cc50613bf1cf4c67e792c76c62fb1b"}, {0x48, 0x3a, 0xd2b, "1d20350f5501e537806911d2fc072819dd12c94c5b7db2d169083b54c626d532eb64e5e6e944cf5ff7a72eee61a418e6165f549b"}, {0x88, 0x107, 0x3ff, "c990c39f7e462e756f08dcf70290b9ac74c42eb924002ce27f68565bb719ef21740f33b41924890e209d9777ebb5ea5c0b4907ecba938d484c3af82d88df819483b282f16a3575f0e44ee137e62d4f0b4e42715e38402c6c09bc19e678004364396fcac2d688d24fbbcf96d76e7213304c8acf6a"}], 0x388}, 0xb44}, {{&(0x7f0000002080)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002100)="7fd220bb84bca0e17f1d25e4c6ec811f8b9845d09dadc9ee4f214202e96af519cd5146cbb11fdda94b157d9e6ab6bedf50b84379383ffe1c47cc37659260ac0caf60ad67d1b16c616d53e1e0506487f1e3fe8a5ad09a4fe1355092f9672b920e35ed1ebd78c9ba9209b4c03300529b22ec210b28afe85c4d12f2940ddb53cad92a1bc2ab3caaa53c90c8", 0x8a}, {&(0x7f00000021c0)="ad3f6fe9b6563cbbd6e7c3409d00", 0xe}, {&(0x7f0000002200)="e810737e162c71bc38a1fe8be41ef535acf615474e706a6e016fa6784666337b3170999cb83d8806dbdbf7f8d0c38f52cc2aaf6b107464e6cab51d3002f1e8400550b3e20a2f9853cf0cee9116971383a0896e30db50a27b9e42c37b8fc25c87e9d6b33c15f55069a9b71741457adbe6b82d7f09038de68cc17bb0b935693ae0d9599f16bfff9169d429c827aa43825770212caa99c865bcf39c84983e163c6f43f2949f4381a84f4802f61e00ea7b", 0xaf}, {&(0x7f00000022c0)="91afa26bb2a0b2ed8caf", 0xa}, {&(0x7f0000002300)="005437b7d06a46416ccd157c098ce6c36ff7e26f70dfee09e0b04c597616bc4fd8fdc5d1ce2d78d3bd22e1812f13c91c3055af10aa84d47d39b1ce556eda22fa692af14052bf929082fcbcf62c01e67ccff3b86f6a26451bd361508715eb38bada52476fe14ab65b21e17639373be5e579aaa7e0a278af4018bf874fbc2789e8907eafa917c16b2b7ed6ec2a2d64b70b0cc91471517a821a4d3d2c1737990251a710e9", 0xa3}], 0x5, &(0x7f0000002440)=[{0x60, 0x13f, 0x10000, "dc7eb9b40659b2a3b31c1325363b23e906e7cf25b52083f840c3b228156fac966e047c047552f614146de86a5952fe21b6f8201e48b4a3707b0144c49b0ee08272658fa5ccc823e6fc009e7fdd"}, {0x18, 0x109, 0x20, "e72420df"}, {0x98, 0x11f, 0x400, "c534b63c910de78afc62d71580720db74d7e154766b7d2d969adb994a62ac83c050fbe125585ea9b1e22374e2b87815b0df0cbad8f2de063320c882668110edd28a68d279e0ed5656a044849eb8a56fd3f687b0af99fb76ef369cd441639b053d5c2a34db55ae5555050a96a36372700676500547d411242178a2bc44966f31c3c93877deb3f53ee"}, {0x38, 0x10c, 0x2, "3024199377dbf1a4ac0cdc31fc5e029676733fa653b759b0add71d42f67f46c29047b087d0"}, {0xb0, 0x10e, 0x3af, "45ea3e106b968ce90a98b5f6579a34a3a19d543ae39ad777fff764d8f801b00431ec1b1ca6e61242feccb52e1d89e04052b3e9ce32ea401bcee4c07ec0f68efc3270c8332344e1018ecdc1dbb56fce7fa14d01830e95a0ed51f0b5ff4becc297f0b500d5d088aea310b92ad3ceb5b22ac4f637d827ce5f32f12cdbb913de5a12eefcfaf5e03c996fe9d708f14d99857b307fbe22bfe11a0498c3871ccf0e"}, {0x78, 0x108, 0x1f, "478f6064804777caee0cb4abbe2bcc64a0611841ba2493e5ff3ecf38438b11411859ac8ba6b9cd99bea0a47651a23411688a450c077adb74b558522bdbe7f2c2aba706e238ee237fbf123fa96cd56005d2752eefda52b2dc06a6bdc71aba6f1d77"}, {0xb8, 0x119, 0xa69, "2f8f3bb1a99ecc00c43d7c239b8800599858a391f43e94fa1efde1afa5d0220099b6f51ae0da6559acca4639820f83536e395b9197e9942fa3256b36edcca9763bf615fcb62c34076def35996d1fccc238116853347a9b59cd45095545a5a198ab949f1158a9b08020d953177769e2d8616319164cbb890f7f6206f857172d9e480fc0a360cd2504d616881809bb8496f69b77a57bd59be455fcacb08f2a46aab822"}, {0xa0, 0x3a, 0x80, "2bd6e20c5753e6fb6f080d68b4c0c56371dbc16af4224ff6825218cd58db6e230aa8bf9a8dbf6766caae8812737a2c244cbbf820fe2b72fe7cc98686a47d6514628f52d70b982dd3dd94f02ecff4ef48bd48f2df04d611933eed0d3570e10c81642124f9bdc7384ececef11a58b458143f340c36c95402938bb5073ac4519809567df91edbac7560a3"}, {0x78, 0x10b, 0x8, "d971a1a6fdf3b5cee810a9465963365f458ecaf20dc768aa0f8d8ad351b9a4393809cd2c2d7b4c5efe312472ec8cb3daaa61543f753390c0728c3de5aa5323f33048da950cb1180bb2d3ce2c7a5c0ea0d7dd817e153cf3837764899b17502583488b2da5c6c1"}, {0xe0, 0x107, 0x101, "dcecfd5249224d5793348db0f93615fe832fa00e4e631f56b0bbbb43ad753053cc2b41441cd894fed79a91e3ecc3c33351478435d8447cf02a3bc5157038908146bbd363fd10fd51928a1ac021bb1f3babfa461497b88313cf33be8001d304201d30be1fe5a7dace2e81b0f8b6c3590a26527e5bd649cc8f0d0daa3f1b1cfef875fb0876c4a42ab98363d8b3c3525a24ae21a4507dbd5fe53a40d59f8a21ab845073fc2bb57857887b38136efc92c59af73769bf0e8ba627322912d3aa51fcddc9fd0cc0279a493fae"}], 0x520}, 0xf0}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002980)="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", 0x1000}, {&(0x7f0000003980)="4408ca697f22c8458cc583e79279b9dff285d5bcfbd76fdedf25523dd78607a792d7181783c00171fa0e0444e0c630749cc8212b501f448ad8159f4fadda6a42257b8aa4", 0x44}], 0x2, &(0x7f0000003a40)=[{0xd0, 0x119, 0x6f62, "2821ea096b49d3791d9608f71dd38ce7315d9234e2ac98f9a136c03f3c087f0bd1db9129f15c429515f38b83ba88e2ebe22129c2a93936fdf09cdb8650511481b1337436b5729b98c3c8a56eb0660a3e0f4c406cdc5c303f4e24dca5259287bdf3b5875726cd3908703b18393d8aa616763c1daff236c98c445ca6296127a22abf46ea442aaff940535ca974a15cb7a100304af2b5d8454bf100e89ffc3d09acb7b7d6735867791e34ad107e504f3f684c3ad70bdbf7cfecc5cb502851"}, {0x28, 0x10f, 0x5, "b10b70331addba155315a70c8a06ce60394d294614fa"}, {0x98, 0x109, 0x0, "3e42acbaff2dcc9334242f5ffded18549dfc4a8e0cd22db4d67e2aa8c5a8460aae4e8c9f71aca50c295ad20b05357f23decec87740fae2b07c09ec541cc63ef749ea1d97d811e427a05931e47a78faea7291add0ae53a506b5726e930c3951f9f07132d7a5d545095fa3301367954a3df16aa213ae13bd554a7aad170d985792c6a6c0f51e31b86b"}, {0x68, 0x10b, 0x8, "661e9183dff4f600c896173960efbc4e89bf7c6ac1094c0272a0b3bbdf5b5f563ed79e46a5030c0c0816818068b553bcb99f4b065fd1a63ec04f16a871a7c7cb220ca435daaed525ff9fe6bf3918531f15dc0828"}, {0xb0, 0x119, 0x800, "d9b324e5beae0dd8f70011765d536c54ffc55665a095d7e905a3743052fe058148e80ebdcedbe432e5433a3bc34c395c98a6c6b30e2e9b73409c01113a3f6226fc3323489a491c84eb4ead0fe38c3d26b6b5e6e0fb01fc54ab8b0e3134e3f6b294110b49e7f7566fffb5f9809155e33d10ee1c51ab14a8b7f90bafa28affa6e21f869ef0ffc6c04e75a877aa31fe9e415bc4f68a440ca6f137"}, {0x110, 0xd60693b918d6000d, 0x81, "c2e25c3771d5b33e033222dd490974a509b6a03aff9307d63b750c9f9e402e9d363f01750d39778485ca10bc4816ad93e56fe8693856d0a5455a784f405d3ebce729cc0cfa5786e389e10555c9231b71f85dc85bc92b2a1be041b547b806c86f17950be02fa9dcf19bbc3b366ac5e6eef9ff8dcf455c685d3b0c513ccf021d586c4b416c1d9264000e84d19727770909b2f00ddc1227008f9c62ae44bafd7a9dc5440a9da83ed6b55d79d707a45763780332d700f5ba9ae95b9d6003df2df4f5ca02b34708557d206b35f440cc0b76b48b8a932e15f66ea9a981395a7d2824d9c97f3623b4754bd10a5431ab26109ca4d3e9a947b47ddfb022"}], 0x3b8}, 0x1b0}, {{&(0x7f0000003e00)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000005100)=[{&(0x7f0000003e80)="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", 0x1000}, {&(0x7f0000004e80)="4d0e2cd577cb1c71e9dfc79e1ec73b2cca35775ba102ea28b073407b4f3d8c3bb8c53e4f97e64baa1e6bad35fb2853e1d81fd65b220a9202e76a0a15bd60e8ef46b581e1509f0ad8614b5989c7e9f00c4eb12cd17c2379ec7d0235b8c518b6c3d3b2a9376005f15a4a267f7ac88801e9e95a0c0c14a03f03cde55d877eaea3bf88e8afe362b60a59d661018ba8ce237a4c5a08e42b3f987cc3540b936f502932927b557fa08c6f64998ff93b88ab4e72a0e865b354dfd3a8b6737cc60dd14a5a78bab8f6f70623990c782e33fc62a06f212304fed5066d70ccc21f83de021a5698", 0xe1}, {&(0x7f0000004f80)="38ebfe99d2ebaa1e992c0fc7255bd8632d722cc29e8f908637b71efdd48ff9ee1ad3f09c0c0170ba728caabb36104d897a582ad92e808cb8f77b362208df67931edf2ff1108faf9e57a1e604e841581ef3d1021751f64cf77c30eecb831ded4bd558631deb32cadc4b0c41594058d62f33189272a614da64aa7a4b433965c4e047f3c5547dba2ad25ee9e72f07de53bc5a486088b59fe55b84", 0x99}, {&(0x7f0000005040)="9660c985ec370f498784547bfcad9bb7fdcbbcf11c8cc050312e1a95842916ed3ff6cbd3cac29ab85da446a3ff310d504c84d1474cf9fd49a023a1dd3ee54304304fd1b1e07f59e8a53dd7b20cae1d26fb4860fde1f37f10d5fa303b9e7d5e509a5134fcdd3d3a27f83967e044e0433d8a396bd0408a6d233a1121302aea299927c03945d73ed369fe3710e006fa268f5f8d1ac9b9cf8e3cbf0cf59a7a501d6f4c0ee47c9241cd077723e3c8004a6568c8ba5bb2c3f9c5d437eab2", 0xbb}], 0x4, &(0x7f0000005140)=[{0xf0, 0x117, 0x7ff, "5ecb00b29eac8eebb3d697f0f1bf1ff8f19dc0e6dfee8e686d2e4efa508a7c526eb2f92ce5a71579b1c166e2311b76c7bd367910eb24a0f5452eeba3a6f37ef462d4e183d7edb8db6dbcec8f7f39f7b3919a12dbe59de26d7eac0c902665229b8bb7e17f7435659f6bc747f643af17bb935c0bbbb5f4e102f5bb324c3e5348701f9d696540cf2d5e3c5be552208226cd02c45661b06ea60faa2bc2b3ec4c5672d685d90ac2f8ababa2355f3b75b9fd7c04ccd6306e12d5b9dfb90c5db0ee07b3334da9dc785cc9818c748d24aae689dd7afd1eb150549e4a188411d0dd699a"}, {0xa8, 0x105, 0x8, "510db983ffb29ac996a6c2ca1ba1fe417154939ec19398c0e1094cb48601504d785063919dc187f970e402b7d19c801ee5a2f06ae18ecb2168ac0f4c909b259eb5f7a8a62429b8fdde26aa746208aff4e044df4612232c05775b8e1af6ef0ce14d6422bca5be4575405a501171a370d5c8b89145f39c25297e6ee51e1d3ede3b44aee02523990c3675f0625ccab86fca634b"}, {0xb8, 0x119, 0x3, "e5fbc056b2167badc608e7557b217545fc658d28c1471c62690aab227dc003fc676c71cc9c474f733c7e848c6b090221af37a17675ff22d62e17a1c2a7cb073ebe5f5a8b2606055bf98e2a54108c8f1f7d8c18523e540c7d938cc6b42d0acccf774fe7aa15650450ee3e94e629df6f5b6b5a90c64eeaf7bd27abd33076eba20d592b38ac42951e0ce5cdaae1123336dd20281086bd27a26506bfbe0950ebfcdd60fb0e"}, {0x80, 0x10b, 0x77, "00e73383328aea742ca1dce1a727f4dacbd16a509307d90ce75a17b8ffd3c745e88ff9166dd520a50f9da341400cefbd008e23ac5fa88304139516c63e54c50caba74b6a92a830af9feb7ae96e1c4703e031208cca2d40573260ea095f76a61943da41ee4156bd6e2cbb"}], 0x2d0}, 0x10000}, {{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000005440)="c655591c9c453459a5a1dfd4eb1ed92c6eb596d70a3c6eeb7e38864fa269be6c43d1eee9aafece6381fc1fc05516bd734458a369aec8be76cd5e4cdbc8733890748fa4608e8a0a8eba3b7587fa126dc852", 0x51}], 0x1, &(0x7f0000005500)=[{0xc0, 0x13f, 0x1, "a007a759b5e3120af1b89f450c139800f88beeac93a7a2b48413e2d189eee33abc27023b517cab13924a7f392993d43b1908004020a99239413db68a9c0ef53782a3714396d80d43bfe431c96ca5a73b2104b35ac89535084979fe73e12d080d8843f8de8b3e1e73c59dca8a11cf34fdc3d68be560314a5d421338cd5a689dcaa193e37f50b3d512646b103f638438d84597796c96262428a511fefc7bb4a1fbc40d48709cd2d39f8adb5944637b83"}, {0x110, 0x196, 0x8, "fe4f07c1cd4dfa9ecab637a751b3ed78fa28dbfec1cf10bac20667f7df17072d38210b618bbf29e933bbc9c4da048abb55f2de994f830c4b0e8b21a7e653965abc3c8ed02bed8024c254519ea88d72c548608fc85d66566c0fe517143d9d31f8befa3e9b3eed11841a0e291fc0f4f3d920606515b49867c6f4d1b3a0645528f84ecf286728ba65f8785cac7a3959872c3474b147e226ae6e467f9cc110ba8554023eae394f894e543b917af1a6bbc6711b637aa1eb125e7340d63e874c5722215dc3a95fa74b01e937f5e64765ce8fccfdacf9fb447e71c988bd4b211d26a56c451c26bd9bf0d7195fbf54261f3b957b31a40b1858e23cd1fc06702bf57fff"}], 0x1d0}, 0x3}, {{&(0x7f0000005700)=@l2={0x1f, 0x5, {0x10000, 0x100000000, 0x5ca13b25, 0x8, 0xfffffffffffffffd, 0xbe}, 0x8, 0x1000000000}, 0x80, &(0x7f0000005840)=[{&(0x7f0000005780)="962319db82ab4cfb3695b766f1af6af692052dc3c871d266da685c6ba3fadba041124bdf081a4e79735c35b9ee0b04d869535aa53d179ea74a06ab8851785b05e8342d834eaf04c5a43fa3f5802f463a9b76c3f14aa076897b437a9899e063c277ff80118de62f56f6832d55c7fb62aecc027324990f52473a47153d01ce381ca52acfa842a4525edba73a60af9153ea9adfa1a25b87577d9ac153012a579f79", 0xa0}], 0x1, &(0x7f0000005880)=[{0x68, 0x29, 0x1dc0000000000000, "64dc0ad736b2c1cef9bdf58b732854892e69b594ee13d11426e02634af88448f9fbb1dcabe702d8cf65521654550906ce90d98e40f8a168cbcdd4b9f9636816b7a2c498d5b1cd592142e62a8f3f7026e6adddf575a655bee"}, {0x30, 0x10f, 0x3, "e526cf9640c00adcd62f850f2c042b12d033a0b3d4072721daa12c532f8a4507"}, {0x90, 0x119, 0xffffffffffffff1c, "92c64978296674f0de441b3c350973ef82762c495349b08bb180a2d72d8e32d1802dd971a277fb673cedeb7f0c4feac4c9721cae8dbd4def3d3adf109f4bfefb311fd8ab90344ccc2f4c2aeef8119804ef08a7ba07f6426d2e316232b73fc3d8f07183ee7f38ffb9cc5dd6d1d9d208d340ba08e29d15e1346861a8e1a613ea31"}, {0x108, 0x89, 0x80000000, "dad0f869b4bc278454670bee0f91e6c1dd7b8d67cfd5d7f73e585b2b98f63b79da969008865b0b2ea6d35de2589e9220998faa81da7183ec47c167481d22aa005911fb667eb3d1fe6151450aab5e0c3f555dd178deb81970a0b169fe62fa0bbb6e34da01c36f576febeef5b743690ad04a4297621f01da760b77d30a983bb348d06b39140f44715c9dd374fdbbd359224e712dc2277fe800167c61eb996a33bbf59af2003f4b0ad3670b37c88bc01e9bc9cde3c19622e9f207dd483fb87af3a6a43848be7ff596dfd41da8a730d72c3e1c529f0d6d5e479938ee5e779dce2e02b42290e80d6ac3b29853acc19948d8531a6126e9"}, {0xc0, 0x117, 0x101, "860fca1d672c26596d851300550abf25149d1d754ac78f6461e403f95ed8a97188633802e4e46a962bf968affaa41a9d47bf31314cf7ba222d11b2f3f33bbd7b9df7cf416c50d42e7977bae9bbd24c8b5f954724cd7aa494f83211da8a994a19290914ceff04d50d3ad5e501fa6b4b08a49f7dbff08e804ca20f82247623be95535ea55f6df5332f3c1eff6ed5790319929f2ad09502d1d4c69b3653dc89fbf558956e575492bec0a9"}, {0x80, 0x11f, 0x4, "25a0f22012fa88e5d8f5dfefa9e1d1b0fcd1dea7ffe9c7334b24a8ec74396b81c1e7e66a87be1838e5dd394a1cc1937fe960b70ed24bb89036a52c01ff82e2fb028a84652aef863e2bcde9329d1c8c7ed5761c26108071dc7564a2aca4b72ea3c9f86172259dd13dee4e"}, {0x40, 0x13b, 0xf232, "16186d4978d5bcf0641c6a50f7573f80d377227187793a13e90d9c5796735bd4994ea7acaa0db42d7ea91c40"}], 0x3b0}, 0x18000}, {{&(0x7f0000005c40)=@l2={0x1f, 0x4, {0x9, 0x8, 0x7, 0x5, 0x9, 0x2}, 0x7fff, 0x3}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005cc0)="15b5de2ee2092739df791f77fe85478cf7230372a49b904e49d4d03618e041fe3a953a4bb667e6360cac2e605a74f2b58b7c64046cc10a2d94f8620c00ef402841ffaf3aeb7834d0fdab54b276bdd1cc86d7f0bcdf737f91055943075a3315f4b9375c988def56a76849b7254faca329a0d8e7f69975e23b4d9557cd35", 0x7d}], 0x1, &(0x7f0000005d80)=[{0x108, 0x115, 0x0, "600e2deec8b194ef574950dd00ed22bf8e40464345796dc57b5a757ca3b3338d99580ac0ee8d03fa441b226c09bdc95a27cf03a3a419d8c9acca3dd3ae6399ec0a50d353fa37b28243d4b677c875e053d716a154abeab2c2db2bde84a6d87868ee030deb589dd8938d086f2fa67b60086b08c6b4422ab6b48fee84156c7c7e006ec7bfa5695fa03a9052d6fd2376780d0df39731e84119d8838399bac8680bf3ddcc0347f26bdb4854bf435f8466eb0b19e703465c6f5e01932003822cb298ade09a728f256664e6d7530ee04be52a042de772b2e5924acfa06a90e6b0088263da1fde3ead109fefaf90f207e543e86529f3c319a23c14d2"}, {0x30, 0x101, 0xe, "fe44a9db9565ce1bfc1ef29f5ff7f52214d53cdccc82bb5ec1d509"}, {0x110, 0xff, 0x400, "8c14ea9c6ba3c25124322ffb449e04670b474dc052be89e1cfe7c1fc4ae7c95184dab5131bd0442f709b542ee88ce51a916d41c5fdb373929939cd1b0530844ad52a373ac092235184b3f000d78145eb97e07d72bc001ef4c3fe2ed70076fd4f7f668b9cc55d32003df9eee13dfde3b151f421294e9e2cdaebf73119eab3276ba1f2ad1cc62c4147db875b544b64dadb223bc8d8657a3458f66005c6775b330873fe325cd311def4a27c19c40536170884c4a324a4e6f8f9718a6ed3120e2b77ff5156331038bf7fac4b352afa4659ee1b4f9593894d380c57c790373b7d9009322e7b907aa74296434044581681de02ecfaca4651d6b5c6ee9aac"}, {0x60, 0x112, 0x2, "3070337570e48e04a8250b5ea2f55da2c2ba4f667bc50b17f2dd13e6a359dda58d88e4d8abbbd346f8b4e717657c3ac4410998f6c460f39d7fc58cd23d51fc820c40f9ed005fb5279081d337"}, {0x1010, 0x1ff, 0x7f, "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"}, {0x1010, 0x10e, 0x2, "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"}, {0x58, 0x114, 0x0, "5bb6a07a2cea3a06bcdf590ba451e5aad2c4a98240656d6a3e43a2896f4f53243f0a38044814e813a6b4442db956c699d478ccf7f3a999e074117f797549da761f03a51f0515"}, {0xd0, 0x0, 0x0, "b249524d0f28106ff859fb30b7efe21c9959c05878d0e0790b633513e6c5e2381beb8f5205d971aeaec224551861a539508de1799ca4f94b4c1e880931d3027db99763075426f889fe2fdbb85380684ff477e410e537aebfc04f768bf77dbd012b462ffa3f1b5f518c130a6a4811cee246e835f971fd9beb639ea5fa03c7674b9b245d1c6c27baee3811af05acc93efd972e9a7b4baba560cdf3304624b2102d764b7b25af67f9c940eb86f517818785050893d1fa7237269701dcb195e6"}, {0x68, 0x108, 0x4, "1103c021cf847ae13c15a811f22fe36785ea9495ceb428bc1a2d1f8e72455f142d043581a6d59b7a93298734b8008befe539ead2bc859476c7139c66ade0fe18f85a1331f620235c46e0516bdb8088e8f887"}], 0x2458}, 0x7}], 0x8, 0x40080) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000008400)={0x0, @initdev, @initdev}, &(0x7f0000008440)=0xc) clock_gettime(0x0, &(0x7f0000008500)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000008640)=[{0x9, 0x9, 0x9, 0x9, @tick=0x1, {0xffffffffffffffff, 0x9}, {0x4, 0xfffffffffffffff7}, @raw32={[0x9f0, 0x47c2, 0xa]}}, {0x8e, 0x9aad, 0x7, 0x16b, @tick=0x3f, {0x6, 0x5}, {0x2, 0x8001}, @ext={0x5b, &(0x7f0000008480)="88defead6961ac50c167c2dcf3f46857bfe6bf0032e06ca006c0a8a214bdb1f1ffa20c08209bc43c9193ba6ebf2fbd137855581f805be3fedb23d3b954b5f0a37482e27d90c49bd7a1c77b9ac83b2109ef8063b2d060bf094ac4ba"}}, {0x1000, 0x6, 0xc52, 0xee39, @time={0x0, 0x989680}, {0x0, 0x5}, {0x3, 0x1000}, @note={0x40, 0x83, 0x2fb400, 0x9, 0x4}}, {0x2, 0xfffffffffffffff9, 0x200000000000, 0xb3e, @time={r5, r6+30000000}, {0x7, 0x101}, {0x8, 0x8}, @ext={0xf0, &(0x7f0000008540)="d999519598dd797e3c7c13637ac2197d5af3bd2e0eb5f010f0a617c5306f6f69ab13a963573c57e7b7ab81e7bddd461dd53762d17eba21d945e02af4995ceb6b21b94ef0fe5fb0698dc905e967dade9ea2ab0b40b9b8b4b966eda82c7eb730634b81f3806f3469ddb652f04e1ad62fa98183a1ad84fb155685af58c80be94a3e9b90bb854f30388a770668bb6432b97c81eb51bc1a62dec315503e92085f09082cdb3cded708f0b77caf1faf2b972ad1846be0e8cc99ff18d826108891637f7984177ce1bb1c4a533fb435c88d9add24467391e4520668cc07f4274f91ca99e7cb4f44f491b6224b0b178015dfb55e39"}}, {0x5000000000000, 0xa1, 0xfffffffffffffc01, 0x100, @time={0x77359400}, {0x4, 0x7}, {0x2, 0x4}, @time=@tick=0x9}], 0xf0) socket$tipc(0x1e, 0x2, 0x0) vmsplice(r0, &(0x7f0000008980)=[{&(0x7f0000008740)="13bbfc8782713f08bf26f70166aa55fbc258132a9de8140cafc5d60ef42dd6511af6f42d63624e66403b860fb231b7fef6a6dd1794bb1047c16aba0e7ffc7784d683c669262abeaf00fca74b038bd0d6e083f3553319ba745baab2017884b0eea6ef1f497838492705387a2424ff0f6e0c6180d01d70d95644f09cc39b9b6c9ceb8145109c2f7a9329734da53dc095d96f0e81fb55b6d423680447", 0x9b}, {&(0x7f0000008800)="b703c40bcab7f285968897e4a2de01b0422d2f213e09c518f18b72a46320e9057e60ce51945412312610ccd1442fc7c3f0bf45e9296358289873531ed6a117f56194377af361f15d745c7c52af3403631c978a45edc86e73b2e015db5bd84b825b3423bdf573e58f0686191e8a3b0a305c388abf1cbdbfa7f755a3914f21f05a545c0bcbda3e96e081522a9f9f6f608ac6b3cb99327041c7dc1180bd967acce03f6cef0796832f5aec80b62b16ceb7e354b4dbbe3a71eb0ee89bf61ed1deadd50a8af7b9c9d47f27b21760c7cc6b5068820f9f0f7de84f619f2306a3db263064", 0xe0}, {&(0x7f0000008900)="c6c76e784aee9187a83c1db61b0ba006c8379801eb4a51c2d3f4d147ea4591eec693", 0x22}, {&(0x7f0000008940)="c1be6da79fd7b0a42fe73b4e83d120adeac84213668d30becba40bf237", 0x1d}], 0x4, 0x3) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000089c0)=0xffffffff) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000008a00), 0x4) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000008a40)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000008a80)=0x7fff, 0x4) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000008ac0)) 13:34:05 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000380), 0x4) r1 = socket$inet6(0xa, 0x800, 0x6) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="c15f455387b5e9f1cc19081898c65094102eb323ac6670a9e62453274386782194ec46f0816cef7ceda8bfbe64077ea6239974449b80f3ebe432ab37a4174a") 13:34:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x6fd) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:34:05 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getpgid(0x0) socketpair$unix(0x1, 0xfffffffffffffffc, 0x0, 0x0) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080)) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfff7fffffffffffd) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r5, 0x80003) sendfile(r3, r5, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r4, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) [ 324.983791] IPVS: ftp: loaded support on port[0] = 21 [ 325.004338] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:34:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg(r2, &(0x7f0000003640)=[{{&(0x7f0000000000)=@llc={0x1a, 0x30c, 0x3, 0x100, 0x1, 0x9, @random="c6a239fe6407"}, 0x80, 0x0, 0x283}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xffffffffffffffff}], 0x3a9, 0x4000040) [ 325.185060] chnl_net:caif_netlink_parms(): no params data found 13:34:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x80) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000200)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000", @ANYRESOCT]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af30, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000008fc455ca8d06d0e25efc771a7d6df12bbdbb33ae3037eaf66a397188414dc37668bf35fa5759f3d7f881e9e614bd3c15348ff390edeca3b9f2995257bfd0896d0a23596c177cab37d1582b79a1a3c85c944d92e6e88090a718cb2fb5330c44fec3a9341e9578b1bb57d495b6c418089705a8cd3b50b0bce923e4a8f5757854a56195d8ac9fb37b28d4e6f21055e757895c534688b4dd45e6d8"]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r2 = socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000022c0)={0x0, 0x38, &(0x7f0000000880)=[@in6={0xa, 0x4e20, 0x0, @local, 0x1ff}, @in6={0xa, 0x4e22, 0x9, @remote, 0x80}]}, &(0x7f00000023c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000002400)={r3, 0x9, 0x1}, &(0x7f0000002440)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x20000081) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) r4 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000340), 0x6) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x3, 0x8c, [], 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000240)=""/140}, &(0x7f0000000300)=0x78) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r5, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 325.329244] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.335984] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.344160] device bridge_slave_0 entered promiscuous mode 13:34:06 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000380)={{0x100000000, 0x1}, 'port0\x00', 0x40, 0x0, 0x8, 0x4, 0x2, 0x7, 0x4, 0x0, 0x1, 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x48200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="e458"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getgroups(0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xee00, 0xee00]) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setregid(r4, r5) ioctl$KVM_NMI(r3, 0xae9a) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) accept4(r0, 0x0, &(0x7f0000000280), 0x80000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x81, @ipv4={[], [], @rand_addr=0x2}, 0x80000000}, {0xa, 0x4e20, 0x73f0, @empty, 0x5}, r6, 0x7}}, 0x48) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 325.391944] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.398479] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.406729] device bridge_slave_1 entered promiscuous mode [ 325.456957] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 325.490378] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 325.547126] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 325.555832] team0: Port device team_slave_0 added [ 325.568059] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 325.577649] team0: Port device team_slave_1 added [ 325.621399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 325.644217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 13:34:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x600000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x4, 0x56c}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x6, 0xcba4, 0x8001}, &(0x7f0000000280)=0x10) r3 = socket$inet6(0xa, 0x80003, 0x1000000000000001) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3ffc00000000000, 0x100) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000300)={0xfbf0000, 0x36af, 0x2, [], &(0x7f00000002c0)={0xb90bff, 0x8000, [], @value64=0x8}}) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000000040)=0xffffffff, 0x4) sendto$inet6(r3, &(0x7f0000000140), 0x13e, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x19) [ 325.706789] device hsr_slave_0 entered promiscuous mode [ 325.725078] device hsr_slave_1 entered promiscuous mode [ 325.740029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 325.747950] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 325.779809] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.786452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.793624] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.800172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.913343] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 325.919481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.935397] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 325.948958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 13:34:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002640)='/proc/capi/capi20ncci\x00', 0x400400, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002680)={{{@in=@remote, @in6=@local}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000002780)=0xe8) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) flistxattr(r0, &(0x7f0000000100)=""/4096, 0x1000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) fsync(r2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x9, 0x5}) [ 325.971077] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.988284] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.010651] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 326.043366] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 326.049475] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.086675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.095197] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.101756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.147386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.156176] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.162737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.174501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 13:34:07 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000280)='/dev/md0\x00', 0x804, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x429}, &(0x7f00000000c0)=0x8) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000002c0)=""/4096) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x6}, 0x8) close(r0) signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) [ 326.202477] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 326.209736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.219633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.228879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.243343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 326.259777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.268126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.277418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.292603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 326.320210] binder_alloc: binder_alloc_mmap_handler: 11199 20010000-20014000 already mapped failed -16 [ 326.322866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 326.336780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.345909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.354418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.362775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.391626] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 326.397702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 13:34:07 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000280)='/exe\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000240), 0x4) io_getevents(r4, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180)) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000200)={0xc, @local, 0x4e23, 0x1, 'sh\x00', 0x20, 0x200, 0x38}, 0x2c) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) io_submit(r4, 0x2, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0xf, 0x0, 0x0, r1, &(0x7f0000000200), 0xfffffdcc, 0x200000000000000}]) 13:34:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x80) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000200)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000", @ANYRESOCT]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af30, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000008fc455ca8d06d0e25efc771a7d6df12bbdbb33ae3037eaf66a397188414dc37668bf35fa5759f3d7f881e9e614bd3c15348ff390edeca3b9f2995257bfd0896d0a23596c177cab37d1582b79a1a3c85c944d92e6e88090a718cb2fb5330c44fec3a9341e9578b1bb57d495b6c418089705a8cd3b50b0bce923e4a8f5757854a56195d8ac9fb37b28d4e6f21055e757895c534688b4dd45e6d8"]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r2 = socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000022c0)={0x0, 0x38, &(0x7f0000000880)=[@in6={0xa, 0x4e20, 0x0, @local, 0x1ff}, @in6={0xa, 0x4e22, 0x9, @remote, 0x80}]}, &(0x7f00000023c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000002400)={r3, 0x9, 0x1}, &(0x7f0000002440)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x20000081) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) r4 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000340), 0x6) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x3, 0x8c, [], 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000240)=""/140}, &(0x7f0000000300)=0x78) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r5, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 326.472157] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 326.536127] 8021q: adding VLAN 0 to HW filter on device batadv0 13:34:07 executing program 2: unshare(0x8000400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000000c0)=""/217) 13:34:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x4, [{}]}]}, 0x24}}, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0x10, "ecca2308"}, 0x6, 0x3) 13:34:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000ac0), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000520005a900000000040000000a00000030a02e41f5ec9ee07de2"], 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/96, 0x1c2}, {&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000780)=""/224, 0x288}, {&(0x7f0000000700)=""/111, 0x16c}], 0x5}, 0x0) 13:34:08 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000002780)=0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0x80) fcntl$lock(r0, 0x26, &(0x7f00000027c0)={0x2, 0x0, 0x1, 0x1, r1}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:34:08 executing program 0: prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) r2 = dup2(0xffffffffffffffff, r0) openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 13:34:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4030ae7b, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}]}}) [ 327.311411] device bond0 entered promiscuous mode [ 327.316459] device bond_slave_0 entered promiscuous mode [ 327.322530] device bond_slave_1 entered promiscuous mode 13:34:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xb2\x1d\xbe\v\x8e\t\x1b\xeb\xc9\x02\x12m\x88\x84\a\xc5;\x84\xed\xf3*-4\xbf%v\xf0\xa9\x00') munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2d, r2}) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x136d, 0x2000107c) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000140)=0xffff, 0x8, 0x0) [ 327.407489] device bond0 left promiscuous mode [ 327.412221] device bond_slave_0 left promiscuous mode [ 327.417900] device bond_slave_1 left promiscuous mode 13:34:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10001, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x1f) 13:34:08 executing program 1: r0 = socket$inet6(0xa, 0x8000000000000806, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x40000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x4, 0x848, 0x3, {0x77359400}, {r2, r3/1000+10000}, {0x0, 0x4, 0x4, 0x8000}, 0x1, @can={{0x0, 0xfb2, 0xffffffffffffff01, 0x8}, 0x4, 0x2, 0x0, 0x0, "6d54757949f50ea6"}}, 0x48}, 0x1, 0x0, 0x0, 0x400c884}, 0x40) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x81, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KDSKBLED(r1, 0x4b65, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffffffffffd, @mcast1}, 0x1c) 13:34:08 executing program 0: unshare(0x10020000) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044102, &(0x7f0000000100)) 13:34:08 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000c00)={0x0, 0x0, 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000680600003802000048030000480300000000000088040000980500009805000098050000980500009805000005000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000004100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001001380200000000000000000000000000000000000000000000000048006473740000000000000000000000000000000000000000000000000000008100000005010400040040000000fffffb4d0200a3000000001080000500060007000100515d070028015345434d41524b0000000000000000000000000000000000000000000000010000000800000073797374656d5f753a6f626a6563745f723a64686370635f73746174655f743a733000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8001001000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000fe80000000000000000000000000000dfe8800000000000000000000000000010066008000000000000000000000000000000001ff02000000000000000000000000000100000000ff000000ff0000ffffffffffffffff00ffffff0000000000ffffffff65727370616e3000000000000000000073797a6b616c6c657230000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210001020000000000000000000000000000000018014001000000000000000000000000000000000000000000000000280069636d70360000000000000000000000000000000000000000000000000000002000000000002800697076366865616465720000000000000000000000000000000000000000174801000000000028004e4651554555450000000000000000000000000000000000000000000001050001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800100100000000000000000000000000000000000000000000000048004e45544d415000000000000000000000000000000000000000000000000004000000fe8100000000000000000000000000aaffffffff0000000000000000000000004e2100660000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x6c8) read(r1, 0x0, 0xffffffd9) socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000b80)={0x2, &(0x7f0000000180)=""/190, &(0x7f0000000400)=[{0xffffffffffff64e3, 0xe7, 0x7fffffff, &(0x7f0000000240)=""/231}, {0xe8, 0x95, 0x0, &(0x7f0000000340)=""/149}]}) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000140)) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000}) 13:34:09 executing program 1: r0 = socket$inet6(0xa, 0x8000000000000806, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x40000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x4, 0x848, 0x3, {0x77359400}, {r2, r3/1000+10000}, {0x0, 0x4, 0x4, 0x8000}, 0x1, @can={{0x0, 0xfb2, 0xffffffffffffff01, 0x8}, 0x4, 0x2, 0x0, 0x0, "6d54757949f50ea6"}}, 0x48}, 0x1, 0x0, 0x0, 0x400c884}, 0x40) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x81, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KDSKBLED(r1, 0x4b65, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffffffffffd, @mcast1}, 0x1c) 13:34:09 executing program 1: r0 = socket$kcm(0x11, 0x1000000000000003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x6, 0x500) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000200)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003840)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x32b00, 0x0, 0x5, @dev={0xfe, 0x80, [0x200003c1, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x3c1, &(0x7f0000000380)}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@int=0x4, 0x4) [ 328.068613] [drm:drm_calc_timestamping_constants] *ERROR* crtc 29: Can't calculate constants, dotclock = 0! [ 328.078772] hrtimer: interrupt took 171220 ns 13:34:09 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x10, &(0x7f0000000000), 0x4) 13:34:09 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000180)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000400), 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400040, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x67}, &(0x7f0000000200)=0x8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) 13:34:09 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x3d41c19a0b90c34e, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x405, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0xc0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 13:34:09 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe, 0x0, 0xffffffffa0010000}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000000c0)={{0x3b, @loopback, 0x4e20, 0x2, 'nq\x00', 0x8, 0x0, 0x2}, {@multicast2, 0x4e22, 0x0, 0x3, 0xffffffff, 0x5}}, 0x44) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x401) 13:34:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x140, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0xed) syz_emit_ethernet(0x10b, &(0x7f0000000000)={@broadcast, @dev={[], 0x1e}, [], {@mpls_uc={0x8847, {[{0xff, 0x9, 0x0, 0xffff00000000}, {0xb99, 0x3, 0x637, 0x6}], @generic="067f6d975452b604840cb6150a47db12106e9e6ee17ba05f3e1d6cab5b91691f47cccc67a2b8dfdfb59beffd26f2e4358bf980de7032e65443e85da98edb92dce468ee45064f9dccf93c9feeb3350d7e4ef487e66a6b90402f9756bd3f1758255a8a7eb63776c62b72ad34c90771c99f137166fdbc38c40d7b635918f684965a69af589eac21d77bcca86a1b33dff3f31d7b588c22f267322f389c9ad745d9e3da92086bd9fe29d5cfe1e823f7610167048a0db2eb849c3eca5b272855abe1684600949d80acbf0e433782f336c306861b63b44e838b6fd5932809b073422e3018eff40d8e1f13d7cdf9ff4580c086341c1b206ce8"}}}}, &(0x7f0000000140)={0x1, 0x4, [0x614, 0x940, 0xe45, 0x17b]}) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={&(0x7f0000000580)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in6=@ipv4={[], [], @loopback}, {@in=@dev, @in6=@remote}, {{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb7}, 0x3}}, 0x128}}, 0x0) 13:34:09 executing program 0: r0 = gettid() r1 = semget$private(0x0, 0x7, 0x0) semop(r1, &(0x7f0000000280)=[{0x4, 0x4}, {0x400000000000004}], 0x2) timer_create(0xfffffffffff, &(0x7f0000044000)={0x0, 0x14, 0x0, @tid=r0}, &(0x7f0000000040)) unlink(&(0x7f0000000000)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 13:34:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x10400206) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 329.107419] binder: 11300:11301 ioctl 8912 10400206 returned -22 [ 329.124937] binder_alloc: binder_alloc_mmap_handler: 11300 20001000-20004000 already mapped failed -16 [ 329.136560] binder: BINDER_SET_CONTEXT_MGR already set [ 329.142086] binder: 11300:11301 ioctl 40046207 0 returned -16 [ 329.149006] binder_alloc: 11300: binder_alloc_buf, no vma [ 329.154918] binder: 11300:11302 transaction failed 29189/-3, size 24-8 line 2973 [ 329.166803] binder: 11300:11301 ioctl 8912 10400206 returned -22 [ 329.173374] binder: 11300:11302 Release 1 refcount change on invalid ref 1 ret -22 [ 329.184118] binder: release 11300:11301 transaction 2 out, still active [ 329.191020] binder: undelivered TRANSACTION_COMPLETE [ 329.210233] binder: undelivered TRANSACTION_ERROR: 29189 [ 329.215942] binder: send failed reply for transaction 2, target dead 13:34:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x10400206) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 329.364664] binder: 11306:11307 ioctl 8912 10400206 returned -22 [ 329.392203] binder: release 11306:11307 transaction 7 out, still active [ 329.399014] binder: undelivered TRANSACTION_COMPLETE 13:34:10 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000180)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000400), 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400040, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x67}, &(0x7f0000000200)=0x8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) 13:34:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x10400206) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 329.478522] binder: send failed reply for transaction 7, target dead [ 329.618561] binder: 11313:11314 ioctl 8912 10400206 returned -22 [ 329.625955] binder: release 11313:11314 transaction 11 out, still active [ 329.633146] binder: undelivered TRANSACTION_COMPLETE 13:34:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x10400206) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 329.698821] binder: send failed reply for transaction 11, target dead [ 329.806696] binder: 11317:11318 ioctl 8912 10400206 returned -22 [ 329.815746] binder: release 11317:11318 transaction 15 out, still active [ 329.822881] binder: undelivered TRANSACTION_COMPLETE 13:34:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) dup2(r1, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 329.875719] binder: send failed reply for transaction 15, target dead [ 329.979659] binder: release 11320:11321 transaction 19 out, still active [ 329.986708] binder: undelivered TRANSACTION_COMPLETE 13:34:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 330.108990] binder: send failed reply for transaction 19, target dead 13:34:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000000)={'tunl0\x00', @ifru_map={0x7, 0x1, 0x0, 0x0, 0x0, 0x2}}}) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) dup3(r0, r0, 0x80000) r1 = accept4(r0, 0x0, &(0x7f00000000c0)=0x2e4, 0x0) recvfrom$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x70e000) [ 330.403045] binder: release 11323:11324 transaction 23 out, still active [ 330.410023] binder: undelivered TRANSACTION_COMPLETE 13:34:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 330.489565] binder: send failed reply for transaction 23, target dead [ 330.634184] binder: release 11330:11331 transaction 27 out, still active [ 330.641192] binder: undelivered TRANSACTION_COMPLETE 13:34:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xb, &(0x7f0000001a40)={&(0x7f0000000540)=@newsa={0x15c, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0xc}]}, 0xff8c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000380)={@empty, 0x0}, &(0x7f00000003c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) accept(r0, &(0x7f00000006c0)=@hci={0x1f, 0x0}, &(0x7f0000000740)=0x80) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20400010}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)=@newpolicy={0x2d4, 0x13, 0x10, 0x70bd29, 0x25dfdbfe, {{@in=@empty, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e23, 0x0, 0x4e23, 0x100000001, 0xa, 0x20, 0x20, 0xc, r1, r2}, {0xffffffff, 0x2, 0x5, 0x8000, 0x32, 0x7, 0xfffffffffffffc01, 0x8}, {0x2, 0x6, 0x6, 0x2}, 0x8, 0x6e6bbd, 0x0, 0x1, 0x3, 0x1}, [@replay_esn_val={0x40, 0x17, {0x9, 0x70bd28, 0x70bd26, 0x70bd2a, 0x70bd2d, 0x3, [0x1f, 0x7f, 0x1, 0x7ff, 0x4, 0xff, 0x3ff, 0xff, 0x9dad]}}, @algo_aead={0x80, 0x12, {{'echainiv(morus640-generic)\x00'}, 0x198, 0x2c0, "9e0abaa539881e609527a808732fdc2bd6dbc8daf6eb083eb84bf9709e0dd98c460a84a2b72b60fab7a5613982f17f7edc3f20"}}, @replay_thresh={0x8, 0xb, 0x46}, @lifetime_val={0x24, 0x9, {0x0, 0x7, 0xffffffff, 0x7}}, @mark={0xc, 0x15, {0x35075b, 0xe80}}, @sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6, 0x4e20, 0xffff, 0x4e20, 0xff, 0x2, 0x20, 0x20, 0x6c, r3, r4}, {@in=@remote, 0x4d4, 0x7f}, @in6=@dev={0xfe, 0x80, [], 0x1c}, {0x8, 0x512, 0x2da, 0x3, 0x2, 0x3, 0x3f, 0xffffffff7fffffff}, {0x1ff, 0x1, 0x4, 0x4}, {0xffffffffffff6146, 0x4, 0xffffffff}, 0x70bd2b, 0x34ff, 0xa, 0x2, 0x3, 0x80}}, @sec_ctx={0x2c, 0x8, {0x27, 0x8, 0x1, 0x4d, 0x1f, "8b093f2bd0c92fd3082a849885cb436b85864af996161b008082758e720ab7"}}, @coaddr={0x14, 0xe, @in=@remote}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4}, 0x20004811) 13:34:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 330.764555] binder: send failed reply for transaction 27, target dead [ 330.856129] netlink: 'syz-executor1': attribute type 12 has an invalid length. [ 330.874925] binder: release 11335:11337 transaction 31 out, still active [ 330.882082] binder: undelivered TRANSACTION_COMPLETE [ 330.960432] netlink: 'syz-executor1': attribute type 12 has an invalid length. [ 330.969953] binder: send failed reply for transaction 31, target dead 13:34:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000180)="713bdf468deb28e5e84e2663732a9e0c8efb7d0791c494774a71e10232111a8ba17f551a30b57e92fea6ff492bf1e9963b57967133942c3fbdd75705132cc319c975718fe026b9f949ffbd827db8d686c95206e53f8bfd9decb22d5235ee3cc13508108258eb818ca01e7213a4339cd9fadc963a0c0e3da6d15b6965502bf1118e2240369cef65576cf6c8c96135d9c58c15c2185b71d5b230c04680265ec9a5fecb1782ae16cbe2a911a53570fb725d0b9aa78dabff05343a412fa9ee7886f1c477bde06d94792fe1fdce31561a7e66876d9b869cfb1fd04cdfc3b0f129dad6955d47502b2c6235d5215e3c04c1af2e54c328d6d1ab635bc5242ee35f351cc1") ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x100002}) ioctl$KVM_NMI(r4, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000023000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="0f013e00083e0f2258b8dd000f00d8ba2100ecf0215af20f01c9b823000f00d80f20c06635010000000f22c077b265d9c7"}], 0x1, 0xfffffffffffffffc, 0x0, 0xffffffffffffffc2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:34:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xb, &(0x7f0000001a40)={&(0x7f0000000540)=@newsa={0x15c, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0xc}]}, 0xff8c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000380)={@empty, 0x0}, &(0x7f00000003c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) accept(r0, &(0x7f00000006c0)=@hci={0x1f, 0x0}, &(0x7f0000000740)=0x80) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20400010}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)=@newpolicy={0x2d4, 0x13, 0x10, 0x70bd29, 0x25dfdbfe, {{@in=@empty, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e23, 0x0, 0x4e23, 0x100000001, 0xa, 0x20, 0x20, 0xc, r1, r2}, {0xffffffff, 0x2, 0x5, 0x8000, 0x32, 0x7, 0xfffffffffffffc01, 0x8}, {0x2, 0x6, 0x6, 0x2}, 0x8, 0x6e6bbd, 0x0, 0x1, 0x3, 0x1}, [@replay_esn_val={0x40, 0x17, {0x9, 0x70bd28, 0x70bd26, 0x70bd2a, 0x70bd2d, 0x3, [0x1f, 0x7f, 0x1, 0x7ff, 0x4, 0xff, 0x3ff, 0xff, 0x9dad]}}, @algo_aead={0x80, 0x12, {{'echainiv(morus640-generic)\x00'}, 0x198, 0x2c0, "9e0abaa539881e609527a808732fdc2bd6dbc8daf6eb083eb84bf9709e0dd98c460a84a2b72b60fab7a5613982f17f7edc3f20"}}, @replay_thresh={0x8, 0xb, 0x46}, @lifetime_val={0x24, 0x9, {0x0, 0x7, 0xffffffff, 0x7}}, @mark={0xc, 0x15, {0x35075b, 0xe80}}, @sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6, 0x4e20, 0xffff, 0x4e20, 0xff, 0x2, 0x20, 0x20, 0x6c, r3, r4}, {@in=@remote, 0x4d4, 0x7f}, @in6=@dev={0xfe, 0x80, [], 0x1c}, {0x8, 0x512, 0x2da, 0x3, 0x2, 0x3, 0x3f, 0xffffffff7fffffff}, {0x1ff, 0x1, 0x4, 0x4}, {0xffffffffffff6146, 0x4, 0xffffffff}, 0x70bd2b, 0x34ff, 0xa, 0x2, 0x3, 0x80}}, @sec_ctx={0x2c, 0x8, {0x27, 0x8, 0x1, 0x4d, 0x1f, "8b093f2bd0c92fd3082a849885cb436b85864af996161b008082758e720ab7"}}, @coaddr={0x14, 0xe, @in=@remote}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4}, 0x20004811) [ 332.008865] netlink: 'syz-executor1': attribute type 12 has an invalid length. [ 332.053589] binder: release 11342:11346 transaction 35 out, still active [ 332.060535] binder: undelivered TRANSACTION_COMPLETE 13:34:13 executing program 2: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:13 executing program 1: r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x97, @empty, 0x39}]}, &(0x7f0000000140)=0x10) r3 = openat$cgroup_ro(r1, &(0x7f00000001c0)='io.stat\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000280)="847131d0ebfde9eba9e6ac19ae2fb3a171c1f7d8c73a35ce74c19a083c4b16b186126812f2202c92878c2c321ad8c0b176edb30980316ff7195cb96c79e89750cf50631aa64b86bbf2f796eb72cadb84d40d9048e52eac744cdfb46376d071def6f76b8ab447be0428aab7a0e902f27832ee773c32494fb1ffba0afc6cae049983ad3d77a6cefbc61fe220b4ba5126fff7729b1321b681c4e60ef1b486c2441df5718eb884849a8612a2e98022dc9a079175f1974b2810a3283a4cf081e15fb8c99467fa29940105985f6f", 0xcb) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={r2, 0x100000000005}, 0x1e6) [ 332.197760] binder: send failed reply for transaction 35, target dead [ 332.397388] binder: 11354:11356 Release 1 refcount change on invalid ref 1 ret -22 13:34:13 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0xbe, 0x1, "d785cb014d46184f9475cde45bbc9a7d731ecc00cbe57f41f13d94f0b42ce138da16fe8742746ebcc52b72e2551057742f3a58aab63cc5f24e696b32d72521af927d06dfeb16de3019c53759942d177bdc99aca628752ccbf36a6904984aa46579305b5f2d0fe859d11f36d6a6f9fe9d468bdb8dac4ca7fe4ea943da14f9067403b565c14feaee4ed92ab5f01d8b1cbbd32e7c856260782f4bceb412e1537dc2ebb3e8e3da5a4818517a0cccb91d071368914e6f84b4"}, 0x402) ppoll(&(0x7f0000000100)=[{r0, 0x2000}, {r0, 0x184}, {r0}, {r0, 0x8}, {r0, 0x2000}, {r0, 0x8000}, {r0, 0x400}, {r0}], 0x8, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={0x5}, 0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x100) getsockopt$inet_int(r0, 0x0, 0x1a, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = gettid() ptrace$pokeuser(0x6, r3, 0x8, 0x5) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req={0xe6, 0x10000, 0x2, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0xffffffffffffff00, 0x7, 0x2, 0x9, 0xffffffff, 0x6, 0xfffffffffffeffff, 0x8, 0x0}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0x5c, &(0x7f0000000340)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={r5, 0x2c, &(0x7f0000000440)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x5, @ipv4={[], [], @rand_addr=0x5}, 0x9}]}, &(0x7f00000004c0)=0x10) write$P9_RSTAT(r2, &(0x7f0000000500)={0xa2, 0x7d, 0x2, {0x0, 0x9b, 0xff, 0x40, {0x8, 0x0, 0x6}, 0x1000000, 0x7, 0xe7, 0x200, 0x2f, 'md5sum.posix_acl_accesstrusted./\xa6systemvboxnet1', 0x15, '/proc/self/net/pfkey\x00', 0x12, '/dev/snd/pcmC#D#p\x00', 0x12, '/dev/snd/pcmC#D#p\x00'}}, 0xa2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000680)={0x4000000000000000}, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000006c0)={r5, 0x7, 0x4ed, 0x100000000}, 0x10) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000700)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r0, &(0x7f0000000740)="872be7175362101000ae6c2af99bed0c1b2bccae940a36"}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'bcsf0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000800)={0x1d, r8}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000840)=r6, 0x4) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000880)) accept4$inet6(r2, 0x0, &(0x7f00000008c0), 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000900)={0x0, 'ip_vti0\x00'}, 0x18) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000940)={0xfffffffffffffff8}) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x1c0, 0x0, 0xe8, 0x280, 0xe8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, &(0x7f0000000980), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x6}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@multicast2, @rand_addr=0x200000, 0xffffffff, 0xffffff00, 'ip6gre0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x8, 0x1, 0x4}, 0x0, 0x98, 0xd8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0xfffffffffffffff8, @ipv6=@local, 0x4e24}}}, {{@uncond, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x3ae1}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'hsr0\x00', '\x00', {0xff}, {0xff}, 0x5f, 0x2, 0x8}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x2, [0x5, 0x40, 0x6, 0x5, 0x5, 0x379], 0x9, 0x400}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x6}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3, 0x6}}, @common=@set={0x40, 'set\x00', 0x0, {{0x7, [0x23, 0x60, 0x8, 0x6, 0x9, 0x9], 0x6a, 0x8001}}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000fc0)) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000001040)={0x200000000000000, 0xd000, 0x800, 0xc, 0x8}) 13:34:13 executing program 2: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) read$eventfd(r2, &(0x7f0000000100), 0x8) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) sendmsg$netlink(r3, &(0x7f0000000400)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000200)={0x190, 0x2a, 0x0, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x4, @pid=r4}, @nested={0xdc, 0x68, [@typed={0x8, 0x83, @ipv4=@remote}, @typed={0x8, 0x9, @pid=r5}, @generic="c21513127369a3711afd3fc9fd8b347716a22ff86eb10a91ec29afc07562331353da8ebc376d2d6482a9a8b62495c9ceead65a58dacec94f7feea573c4b844551a512921", @generic="80fa0822f73498edf9ec4a6c59eb4a9dde449e77e71d2a8f3ba630dafea669166bd2536dad83409aee48bca5281fb6f9789549792f4f6beab01e2ec433b6471f848c7260cdc3fd9a632b1a4c7eca3ef0f338f4678dc60e470d029656ffbc6dcd15bac31cc930c4ab5c6a42dba8740195d07da9078a1df98586398f341f239a8fdeb9fb4e"]}, @typed={0x10, 0x12, @str='/dev/kvm\x00'}, @nested={0x80, 0x8, [@typed={0xc, 0x72, @str='wlan0-\x00'}, @generic="dfa22034ef56bdf5c27b0f32945f64ef6adca969dced89f0eda9c12cc1a31d45e3dcf4189038c102ecd73c3834bac7bb18ff92c1b2968ec69bdf07c1d60f2ededb6f5db1365605c0e74690c7d2c2661a1ed052c019103eff47", @generic="94165f085507986add62456145cbfed0cfbbbc7c"]}, @generic="029b64e9936450e87a"]}, 0x190}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) [ 332.756784] binder: 11362:11363 Release 1 refcount change on invalid ref 1 ret -22 13:34:14 executing program 2: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = getuid() fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v3={0x3000000, [{0xe2c, 0xadf}, {0x96f, 0x401}], r1}, 0x18, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r3 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r2, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r4 = dup(r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r4, 0x0) sendfile(0xffffffffffffff9c, r2, &(0x7f00000001c0), 0x0) [ 333.200711] binder: 11374:11376 Release 1 refcount change on invalid ref 1 ret -22 13:34:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) r2 = getpgid(0xffffffffffffffff) r3 = getpid() kcmp(r2, r3, 0x0, r0, r0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x11}]}]}, 0xffd7}}, 0x0) 13:34:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x80000) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x4, 0x7fff, 0x3ff, 0xb5c]}) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8001}) readv(r3, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/37, 0x25}], 0x1) syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x7, 0x1) tkill(r1, 0x1000000000013) [ 333.487683] binder: 11383:11384 transaction failed 29189/-22, size 24-8 line 2834 [ 333.516132] binder: 11383:11384 Release 1 refcount change on invalid ref 1 ret -22 [ 333.554738] binder: undelivered TRANSACTION_ERROR: 29189 [ 333.588036] IPVS: ftp: loaded support on port[0] = 21 13:34:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x56aa, 0x11, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x6012, r1, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/ion\x00'}], 0xa, "e328b6fffe235c314b24bc49282b86113c08a592201f8d339fa7c585a4f2acb5883b04db0b55b4b678279b7da8f7e5a1d22c00a129ab7d01ae7c3a9291bad5586402dd3fe8868f213b4455caf5e24fc2bccb748342f3423a251fb384547131e3516ca04bcb6189d59b093d1cbc94c380e5b5a7a2c809446d1e161f49489f0b1a73ae9ebf3c84c7924f26e776b5c47a1fc63e822fdff7daf4e71825f4c31cb209687eb470bebdd054883966f4271038b592c86d29669e594c5e4bfbef01d7daf0c7177529"}, 0xd9) [ 333.768057] binder: 11391:11394 transaction failed 29189/-22, size 24-8 line 2834 [ 333.798649] ion_mmap: failure mapping buffer to userspace [ 333.809369] ion_mmap: failure mapping buffer to userspace [ 333.812732] binder: 11391:11394 Release 1 refcount change on invalid ref 1 ret -22 [ 333.835487] binder: undelivered TRANSACTION_ERROR: 29189 13:34:14 executing program 1: unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='/exe\x00\x00\x00\x00\x00\x005\xc8\xe1\xe8\xf7\x8f>\rqz\xc1\x88\x9aE\xe5\x81\xc9\xe1Jk\x8f\x95\xf5\xd2\x86\x8a\xe8\xc7V\xe9\xd1\x8f\xd6\x9a\xb3\xc8\xdbZo\x16+H\xc8F\xb9uO\xef\xbf\x0e<\x0f\x82\xbf\xbb\xc3\xdd\xeb\xb6`\x9b\x03\xfb\xb4M$gy\xf3\x82>=oF\xd3,\xe9\xbb\x12\xa2\xa0\x05N\xd9\x1bk\x1f\xf6\xcbh\xe0\xe9\xc2\xbb\xb8T>\x9fmr\xf6\x1c\x9c\xea\xe48\x19\ti*\x94\x88\xc3:\xa7\x84ho\xca;\xe4\x18\xd8\xdb\x04N\xb7\xc6\x91') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x102, 0x400000000000003, {0x8000, 0x6bd6, 0x3f, 0x8}}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000140)=""/91, 0x5}) 13:34:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 334.053450] binder: 11402:11403 transaction failed 29189/-22, size 24-8 line 2834 [ 334.055008] chnl_net:caif_netlink_parms(): no params data found [ 334.072948] binder: 11402:11403 Release 1 refcount change on invalid ref 1 ret -22 [ 334.108181] binder: undelivered TRANSACTION_ERROR: 29189 [ 334.150308] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.156957] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.165206] device bridge_slave_0 entered promiscuous mode [ 334.176567] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.183197] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.191266] device bridge_slave_1 entered promiscuous mode [ 334.248127] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 334.267754] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 334.342822] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 334.351507] team0: Port device team_slave_0 added [ 334.360558] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 334.369315] team0: Port device team_slave_1 added [ 334.377997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 334.386747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 334.427081] device hsr_slave_0 entered promiscuous mode [ 334.435556] device hsr_slave_1 entered promiscuous mode [ 334.443615] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 334.451159] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 334.483224] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.489755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.496934] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.503521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.606907] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 334.613673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.629927] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 334.647228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.659425] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.668293] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.681413] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 334.703528] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 334.709655] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.727801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.736166] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.742741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.805551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.814279] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.820774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.830426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.840221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.849115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.864679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.872852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.885245] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 334.891308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.921187] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 334.941887] 8021q: adding VLAN 0 to HW filter on device batadv0 13:34:16 executing program 3: lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:gpg_agent_exec_t:s0\x00', 0x26, 0x1) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x6, 0x100) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r1, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x77359400}, {r2, r3/1000+30000}}, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0)={0x81}, 0x1) 13:34:16 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x7f}, &(0x7f0000000100)=0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) 13:34:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:16 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000007c0)={0x0, 0x0, 0x300e}) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x2, 0x32754d56, 0x3, 0x407, 0xffffffffffffffff, @discrete={0x1, 0x9}}) [ 335.190335] binder_alloc: 11416: binder_alloc_buf, no vma [ 335.196192] binder: 11416:11418 transaction failed 29189/-3, size 24-8 line 2973 13:34:16 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0x7, 0x3d2) [ 335.265118] binder: 11416:11424 Release 1 refcount change on invalid ref 1 ret -22 [ 335.289063] binder: undelivered TRANSACTION_ERROR: 29189 13:34:16 executing program 0: modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x20001800, 0x2000, 0x3ff, 0x3, 0x6, 0x4, 0xd39f, 0x401, 0x100}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67000000007f000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) utime(&(0x7f0000000140)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 13:34:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:16 executing program 3: r0 = socket(0x20000000000000a, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffffffffc8e2, 0x102) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/55, 0x37) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_buf(r0, 0x1, 0x1000000000000003, &(0x7f0000e530e9)=""/16, &(0x7f0000000040)=0x10) 13:34:16 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa06, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) write$UHID_INPUT(r0, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) [ 335.552777] binder_alloc: 11432: binder_alloc_buf, no vma [ 335.558420] binder: 11432:11436 transaction failed 29189/-3, size 24-8 line 2973 13:34:16 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80, 0x0) fanotify_mark(0xffffffffffffffff, 0x10e, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') [ 335.622958] binder: 11432:11441 Release 1 refcount change on invalid ref 1 ret -22 [ 335.676395] binder: undelivered TRANSACTION_ERROR: 29189 13:34:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xb, &(0x7f00000001c0)='ip6erspan0\x00', 0xffffffffffffffff}, 0x30) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000240)={0x5}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x2ee) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r4 = accept4$tipc(r3, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x800) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000180)={'ip6erspan0\x00', {0x2, 0x4e21, @remote}}) 13:34:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:16 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x8001, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='&\x00') r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) 13:34:16 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000001c0)={{0x3}, 'port0\x00', 0x8c, 0x40, 0x3, 0x100, 0x3, 0x2, 0x8853, 0x0, 0x4, 0x400}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x1) ioctl$int_in(r1, 0x800000c0045009, &(0x7f0000000100)=0x2) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18}, 0x18) ioctl$int_in(r1, 0x800000c0045009, &(0x7f0000000080)=0xffffffffffffffff) sendto$inet(r1, &(0x7f0000000140)="0bc10b9daaf26c57f82c8f93b0c1c70454385c82c0b5c0faa2025214462ededee512ad3a219d2fea0f41aad688e6ff9b7d6c56f9ad61cfb814c63341adf827489666a83845af16f395131c76b4e33016f4e84d97f8ae46446a83c0b20f", 0x5d, 0x1, 0x0, 0x0) [ 335.988764] binder_alloc: 11458: binder_alloc_buf, no vma [ 335.994683] binder: 11458:11461 transaction failed 29189/-3, size 24-8 line 2973 13:34:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xb, &(0x7f00000001c0)='ip6erspan0\x00', 0xffffffffffffffff}, 0x30) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000240)={0x5}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x2ee) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r4 = accept4$tipc(r3, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x800) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000180)={'ip6erspan0\x00', {0x2, 0x4e21, @remote}}) [ 336.033124] binder: 11458:11461 Release 1 refcount change on invalid ref 1 ret -22 [ 336.063802] binder: undelivered TRANSACTION_ERROR: 29189 13:34:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/79) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000000)={0x8, 0x1, 0x2, 0x0, 0x0, 0x7, 0xe}) 13:34:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:17 executing program 0: unshare(0x8020000) semget$private(0x0, 0x4, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000180)={0x3, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e21, @empty}}}, 0x108) semop(0x0, &(0x7f0000000140)=[{0x0, 0x0, 0x1000}, {0x3, 0x1}], 0x2) unshare(0x8020400) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) [ 336.279241] binder: 11473:11474 transaction failed 29189/-22, size 24-8 line 2834 13:34:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000080)={0x190, 0x8, 0x7, 0x3, 0x7}) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, 0x0, 0x0, r2, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000300)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x4}) [ 336.336206] binder: undelivered TRANSACTION_ERROR: 29189 13:34:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10001, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x5, 0x1}, 'port0\x00', 0x20, 0x20004, 0x1000, 0x2, 0x3, 0x9, 0x649acbe8, 0x0, 0x2, 0x6}) socketpair$unix(0x1, 0x8000000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x2710}, 0xfffffffffffffd6f) r3 = getpid() fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000840)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000880)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000980)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, r0, 0x0, 0x1, &(0x7f0000000a40)='\x00'}, 0x30) lstat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = getgid() r23 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002300)='/dev/ppp\x00', 0x20000, 0x0) sendmmsg$unix(r2, &(0x7f0000002480)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000200)="f47e5a3bff2fdf1203de41485668b4", 0xf}, {&(0x7f0000000240)="14bbf85f705c40bbc1dd60b99a23cd2f03d4", 0x12}, {&(0x7f0000000280)="fe17a799cf365e7a327dffdbecb5f60b2221546786deecfed1b97f47664e5ad86cdda14276bfab061125f28a02acf5c06baa464c5060bdccba928638a8e4594790236384d4bd186653e433d6096b609e84297bb5b7f1a718038426d00f03be3097250715", 0x64}, {&(0x7f0000000300)="e0d670c577c66a17a373da9bcfab509aeb04b3121330ac8afce0db35fb55e0c529b3198f", 0x24}, {&(0x7f0000000340)="2cfd68aa733c146c0362db6ef700fd1b074d799160dc9ecc848c44809829deb76f8cfc0c7c05d617cca3c115ae984063047217d9f77f82b8d2499d19bb97fc6f09dc90a32d0d4f92cc68fd393ee7e52ffd816241d21d75c105afbeb2efcaf03526a8902e545048e6db81f4493294e82d048df6e70a789ce437deb3744ecca874f8e79052ddc23dd8a7c919d22d4e3ab0b2254bae60371413226cf9e9003c3c1f41aa325ab5c6c7d8f3dbce5a806115d7fff85f70f4e38405cee35af55dbb38eecb51a5e1538ec8db41f7a6f14c203bc5679a7b36ebdf82ef84de696bf29a", 0xde}, {&(0x7f0000000440)="77dd167e14b7372c9561a2b5a017fe9c5bf5981bc3d7e442bf48d6bd9c2018f1b37163d81823f31b34339c24dffbdf2ac4f74ff70304f8867f9cb2282ca37c54a394cc51188226b1860a795521285b683ed6e4dc188025f8", 0x58}], 0x6, &(0x7f0000000b80)=[@cred={0x20, 0x1, 0x2, r3, r4, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r17}, @cred={0x20, 0x1, 0x2, r18, r20, r22}], 0x80, 0x8040}, {&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000c80)="9d71bd6eed5697e9b358e992d8c5557f59f4d4623e3ebb542db74d0cbe07063be46c2394b1fd51cf0e66807a5f81d7d4e8add63b596e1966732d4a5c7dafee7305aff5ac108903c383373062acebc89ce2eab2a60688f6cff01b8b40ffdb1971b487691b10fc58929fb59956700418be0b1460fc0151bdea316e3f41aea6bf02b5744edddf623f828efb7354c2ebd3a0ea05193d08e35f2dee53c01446ca0264cbc6ae3aa7cfb04da93f4dcde52e104d7a9d83ed635b53bf05eceaef2c5296c95d88f080a3435450e04093293b12367c", 0xd0}, {&(0x7f0000000d80)="6f321ae45143357062148f830261e5e4f9b082dddd7556695e023e434493ceb77b1c5367ff56a2a62c8ee31c470fb9fc6bef6f45a1f407e888581d371b07b285e0dbe7", 0x43}, {&(0x7f0000000e00)="ef782b3d0b1f0a4621cdc83d0c983bb5428f4c051e77fb1f6972f2780bf2af8b47554ccb04", 0x25}, {&(0x7f0000000e40)="b088173200606587aff3b1f6f9e5da53879e798a7af5f65dbb3788da8a0247b19922df3c682bac700719279cf47434358b6babda59d3162fc0cd8b09e167f1d62e077c3134ede1c92d4d6a06a6f6b706ba6cd45c7c1567af3277c7f857b824b96c2ccb", 0x63}, {&(0x7f0000000ec0)="b44e17af29521cafde7d4ceba7df275b353a75b3710b6e3ecfcdb1752191bd263720199d2804bbcbf6aa370577502ed152a72db4056a7b209ec92b21e24ec7e0585be8ee3e58fc55729acfe9f2945093dbc73ec9819659395e0faee7", 0x5c}, {&(0x7f0000000f40)="c1567b3cf2681f2a3255a5c3f341850167a00620c1997e0271679d7235e112", 0x1f}], 0x6, &(0x7f0000001000)=[@cred={0x20, 0x1, 0x2, r15, r11, r21}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r10, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r16, r17}, @rights={0x30, 0x1, 0x1, [r0, r1, r2, r1, r2, r2, r19, r1]}, @cred={0x20, 0x1, 0x2, r10, r16, r5}, @cred={0x20, 0x1, 0x2, r3, r6, r21}], 0xe8, 0x4800}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x7}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001180)="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", 0xfc}, {&(0x7f0000001280)="6d24f0eab71d7ad8b2ce87171dee76746471b42d08f841ffe0e08f30da86ab9dc7e20d94c5572cf974959fb479cc5348102ec2302fdc4ee98ca8831b6c5c75874e8bddf15170158ea2276305134f4b927a5ffb94e328a2a42781f00ba7bd8723258c8c18c7b5704fbaf61f633b54d96a436ab3030fd3958ce9f340f276392941b5ce63aa225bbdab8353cab3592f506cb369262fc2bd88bc731879133c844f5a40d8054e4307784d7ff2c7ff318e811b7f799145125afca6e4a2e7b59eb812432a3092694757d7ca1269c23196d3d1421c0fef3b6f7d5acb98f6e66cb6ba", 0xde}], 0x2, 0x0, 0x0, 0x20000000}, {&(0x7f00000013c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001440)="d0a088964027e9963bc24571418c0202e6216f331d3c0949bbdf1ba0c5d5209422701865ac7ef1fd3b4938", 0x2b}, {&(0x7f0000001480)="e7277cb051e65e3b2c5ef598071696dbc6e7", 0x12}, {&(0x7f00000014c0)="7a14f60c91f295d8f72b785888df23abfb0588dd8c77cd7daed0591b9f36efac30a3aed613acba03482616aacd9ec2efe60a539faac19a4d64b9692311f219fd50e904f3cc18ba38e54b25d2aff99e774fd1ac6347f564b8cb2d12cf41e3e9bf1b8df20de0a0dcfbc7f2922d8c7beba9174460960445b9e5e7a4d29e531f8ca2add3652ba971ff5fb7ec704b0556cbe3956e582d0323d8088f4d786a00207ac973bd1d83b9d83424935666a717d74b32849d95fd19dcc2", 0xb7}], 0x3, &(0x7f00000015c0)=[@rights={0x18, 0x1, 0x1, [r19, r0]}, @cred={0x20, 0x1, 0x2, r18, r16, r21}, @cred={0x20, 0x1, 0x2, r10, r4, r7}, @rights={0x30, 0x1, 0x1, [r0, r2, r0, r1, r19, r0, r2, r2]}], 0x88, 0x40}, {&(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001700)="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", 0xfd}, {&(0x7f0000001800)="c063", 0x2}, {&(0x7f0000002640)="0bf2f87a133983cff00dad216020992668f21aab0271632fc16c97362536438d", 0x20}], 0x3, 0x0, 0x0, 0x4008014}, {&(0x7f00000018c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001940)="d1bbc6d2a5039a2438df2dd7103295749742dd7f06e0c56197bfe2213730b5c8f44e6df8503a2978ecf64008f41847d02df206761bf9b33fd36771b9e4f0936a2a0911547e774c05331ceef38314c1e7a633e24e5807fa4df0b2b9c0701b2c6a097ed17189113d7bac57810d58edd40a1535169ebeccd6a5b29929fba527f525c1796bd225ebda88c81d54cd", 0x8c}, {&(0x7f0000001a00)="711141c3f3411c2cef761bee16a52a3c527a8c0f44073c1ec108c1d9ef04fa6838b8675ed92de094a4fe0d56f1b06bc4c8d76863d79da9338031e503538aecc3206b338a6c85efa049a7111deb707c70333b36843c396ad81ed9ce55ff6cc22a09660342788cc799d8650226f1480cec7ea34567ead8bc2746d70d06c80c9aee6fd08481a69375ca34a9b2109a1025795c7180acfc9178c64e1a04584e258044c31ff5dab68054317d40bb9aabf4fb6f52d44fa3ffee7c3da437f5975e285a1781923abe2ee44f0f807170debcd08e88f1d20c3c7229b5abed1757b0042a14", 0xdf}], 0x2, &(0x7f0000002680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="00000000180000000000000001000000210000005195d2161ffe46a12124257f0269e19e85e0b33efe303ec84f39e1e280d2d7c18b2e4981b03d5a", @ANYRES32=r19, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r19, @ANYRES32=r19, @ANYRES32=r1], 0x80}, {&(0x7f0000001bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000001c40)="043f8e63b2c358ffe4ee52dc02ab856cd6c5189ff5e6f2bb5eef1095fa6cf9108743b9ccdfd509893cff4d99176ed94b4246df148f7290e8996db380", 0x3c}, {&(0x7f0000001c80)="c5491edf15870992e1cc95b8e1b968c506cab15441b15a551b10f90ee1065e8057bbc4", 0x23}, {&(0x7f0000001cc0)="fd0e6001280a8d57a8dbd1c993bde6e83d590d63327e74485f9e48efef66021f34b08b4353ee1743adf979e735dfdc311a4d5ca9f6f2ce86e3065889e76ee779773319acee784a66c6e749664230e74f7bcc80cd4326d1bc0d20f63e94ab80e7f2172150241377d2e7f1f79d6d820af2349e91bc9d51a666caa14a6a254aa0bad2447a1b84c85bc20e1fbf33128795479fc73181b5ee183e544c0a1a4637f99097c7794df1841b4d5443aee22e7be0dd3ed39d07200c14e4c4847470d12d50585d45cce93e83b49307c3eac0f30882a44838e027e632cdcbfd722dd62e090080c3fc", 0xe2}, {&(0x7f0000001dc0)="0efd27ce4a0f36c68f1351bd8ecf1b376ed6bb87bec5738cdc5da8b49dcea7d793e646098571a0c7b030fe2764f838be4f506465afa3dd63812db76dbeffa1d8fcb21efa6f39581468c273a0e0ac1dbb193c314705479e677aa3fc27f403ddfd28700f417db14d8557c0bbc81b3208292b1c815b5d4571c059b27a8939fb651c52a6432decdcc6cc1c", 0x89}, {&(0x7f0000001e80)="2f894a06cf018e2997f622b1aa4dea568c5b5b12373e6cb75f70718170cfcd5d63383e261727d15190715cb137f95073ee930b4c3ee049400fcdf5b488f62e638fe49377d2b85285819604821731aefd715eb032db7e3422d5bbea0776ca7f34b9fdbe9f4ef8aa5896af7b30782edf03a402f4b75b6ac608947f855ead600406cfd05499604752c00a4e4ec42941d6a9bd72bd6d14708240f3948a8b2cd1449b6ffbbdb76d8e5340190cb45a93900508b1a1f8865867bf3eb0f1e9bc78119f4855586d5559badf42c0b9583829f0cc0682ad41d69dd3a5f74ed0f9f2a92bfd524204fdecdf2ecf8f993876ffe039beca281c5a", 0xf3}, {&(0x7f0000001f80)="c55c2d27d92fa742efd3979d2ee3919a06e175dbcb2cce3cd2037f72dd391d12af88a37e2c018edb6837b335514ee1bd21730fe857df68ea4700760f26b7707dedb89af6b38c9886741df4bbd6321dfaed69374d62a0346fe94584e008a7eea49f447c1f03868d09654d8f2efc02d84249d66c40e035a8319dc3afd58287fa1006ca", 0x82}, {&(0x7f0000002040)="03c5c0cea63525b7e2cf99bf1312afc6bd583df8cb7f1dc1d8b4ae9c966fed7dcaa50780a946c493c982f93406b56465b8dc842e89675939416c0095172adaffbddd37d83de8d8882b542465316c871ff3bdf8d49b45c3e17c5280882a51f67fe74b7aad5ad69de5afad585b63bcc15cd55051e09b20e9dc91d3263754003900262fdf6123c261dbaa621be874000a8a5a5d5eafaed338762b96af95751bcdf034ef42ddb3af9d2ef6764f5ab4d042e5a6a58b035c3a90337abef0ff9e245c6eaf", 0xc1}, {&(0x7f0000002140)="62327e3852d3f1d94bfe0cb70d3e1310ae1959d829d86027da46fd1a7f3e876319cfcfe7d8a87dce373a9fd0add47760f1a9ea41334045f9a847dec15104758e00fcedfb99aecb62963b737af9fc1633bd394072f5c219dacfe008634eb386a087b01294939107331d2c746f95fb5305f208f7f66e48b71b0ac2a06cdb835cb9e88725f8883917582bc6a60a78ebbc3b7d3fdd90e3951a2cf9b1f1e6cc53c1ffa46c9a5c42c4a4419379a0baa92821246acd93", 0xb3}, {&(0x7f0000002200)="30994ef7474d88a694ec5096dea14a1f27665160b59493b735e812c4bbe83311", 0x20}], 0x9, &(0x7f0000002340)=[@cred={0x20, 0x1, 0x2, r3, r14, r5}, @rights={0x20, 0x1, 0x1, [r1, r2, r0, r19]}, @rights={0x20, 0x1, 0x1, [r2, r2, r1, r23]}, @rights={0x38, 0x1, 0x1, [r2, r19, r2, r0, r19, r2, r0, r1, r2]}, @rights={0x20, 0x1, 0x1, [r2, r2, r19]}, @rights={0x28, 0x1, 0x1, [r2, r19, r2, r0, r1, r2]}, @rights={0x18, 0x1, 0x1, [r2]}, @cred={0x20, 0x1, 0x2, r8, r9, r17}], 0x118, 0x4000}], 0x7, 0x0) [ 336.649963] binder: 11489:11490 transaction failed 29189/-22, size 24-8 line 2834 13:34:17 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x2f6, 0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) renameat2(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x5) mknod(0x0, 0x2dd301e51b2ce6ec, 0x0) [ 336.708940] binder: undelivered TRANSACTION_ERROR: 29189 13:34:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x500, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x666f25e5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x800) socket$vsock_dgram(0x28, 0x2, 0x0) read(r2, &(0x7f0000000080)=""/119, 0x77) 13:34:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:17 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40000, 0x0) sendto$isdn(r2, &(0x7f0000000140)={0x400, 0x30ff, "51f6f8de7b6e588161cf68d734c86d33bc97ae869a4d6e38733a2a3999de10d6728b0a1c9c090fa289246d52f31c5e7dd29fbf3273cde3a6c53f08dfe8ae7c49393f9e23d8991bb3d2c2561b41a80401f0d1897e0e705df3a00252e0a6b90838486d75461746df6fbd62dd34e8d2967feecc3d94aea14d0b9a656abe43b34a77903c9f8dde89d056741200355a861c6f975a318a250ca709f4cc16c2eeb0ea2f16ba478bef3bd58072415700e67fae422dfb15073c00b1c6c40036c7fb7d71a4ddac075ea1db7a01e912e5fd679ffe1d7d7e743cbf9978"}, 0xdf, 0x10, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x6, 0x1a, &(0x7f0000000040), &(0x7f0000013000)=0x221) r4 = dup3(r1, r3, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000080)=[0x20, 0x0, 0xb6, 0x0, 0x59, 0x4, 0x1, 0x1c1], 0x8, 0x8, 0x7, 0x7fffffff, 0x8, 0x0, {0x5, 0x0, 0x7, 0x3, 0x3ff, 0x6afaa3b2, 0xffffffffffffffd0, 0x4, 0x6, 0x4544, 0x3412, 0x1, 0xe5b, 0x8, "46276da72c7a1fa326b8fa46e283dbf33c50d2675aff0ab04cbb91908d1a918f"}}) close(r0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000002c0)={0x0, {{0x2, 0x4e21, @multicast2}}}, 0x88) 13:34:18 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000200)=""/1, 0x2034afa5}], 0x1, 0x0) close(r2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000340)={0x8, @sliced={0x1, [0x0, 0x5c, 0x9, 0x80000001, 0xffff, 0x100000000, 0x8, 0x3, 0x9b6, 0x0, 0x80, 0xaa2, 0x0, 0x9, 0x7, 0x4e0, 0x257ad2d5, 0x8, 0x8, 0xb8, 0x7fff, 0xfffffffffffffe01, 0xb88, 0xfffffffffffffffa, 0x10000, 0x2, 0x88c7, 0x8, 0x40000000, 0x4, 0x2, 0x8, 0x4, 0x80, 0xfffffffffffffff8, 0x4, 0xfffffffffffffffd, 0xa8a, 0xfffffffffffffffb, 0x8, 0x9, 0x1ff, 0x3, 0x5, 0x1, 0xffffffffffffff81, 0x7, 0x4], 0x8}}) 13:34:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r2 = shmget$private(0x0, 0x4000, 0x480, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/61) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x406, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') ioctl$void(r4, 0xc0045878) [ 337.039534] binder: 11505:11506 transaction failed 29189/-22, size 24-8 line 2834 [ 337.072692] binder: undelivered TRANSACTION_ERROR: 29189 13:34:18 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:18 executing program 1: unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3f, 0x7, [0x7, 0x7fff, 0xfffffffffffffff8, 0x400, 0x3, 0x1, 0x1]}, &(0x7f0000000040)=0x16) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r5, @in={{0x2, 0x4e21, @local}}, 0x7, 0x7, 0x8, 0xfffffffffffffff8, 0x44}, 0x98) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 13:34:18 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:18 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x100000000006) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x20323, 0x7f}) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000003c0)) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000080)) getsockname(r0, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000380)=0xffffffffffffff0d) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000340)={0x6, 0x4}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="080100002900f6152dbd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="0e000b00ffff1f00020007000800010061746d004800020008000400e0ffffff08000100", @ANYRES32=r0, @ANYBLOB="24000300c06ad574f9242cf4876d9c9aed919fe92ae1e9c8d3fb20216d1e859288d77700080004001000100008000100", @ANYRES32=r0, @ANYBLOB="0800050009da00000c00010064736d61726b00000c00020008000400080000000800010061746d006c0002001c00030048fd547cba07791eeef06d670d22137a45b883299cccb30008000400eeffe7ff08000100", @ANYRES32=r0, @ANYBLOB="08010100", @ANYRES32=r0, @ANYBLOB="0800030094f0ac2408000100", @ANYRES32=r0, @ANYBLOB="0800040001000c0014000300f54bd9f93666d4bb9720ed2bc755000008000100", @ANYRES32=r0], 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x44804) 13:34:18 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 337.501315] vhci_hcd: invalid port number 127 [ 337.506102] vhci_hcd: invalid port number 127 13:34:18 executing program 3: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40041285, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000800)}) pipe2(&(0x7f0000000080), 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffb, 0x20, 0xfff, 0xffff, 0x80, 0x2, 0x2}, &(0x7f0000000100)={0x7, 0x1, 0xfffffffffffffffb, 0x7fffffff, 0x8, 0xfffffffffffffc00, 0x4, 0x8001}, &(0x7f0000000140)={0x3, 0x3d84e993, 0x6, 0x7fffffff, 0x0, 0x3, 0x1ff, 0x3}, &(0x7f00000001c0)={r2, r3+30000000}, &(0x7f0000000280)={&(0x7f0000000240)={0x6}, 0x8}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="878588f40acfb865f27989a9b808cd13", 0x10) [ 337.544092] vhci_hcd: invalid port number 127 [ 337.548686] vhci_hcd: invalid port number 127 13:34:18 executing program 1: setrlimit(0x80000000000, &(0x7f0000000040)={0x402, 0x400000000000000}) 13:34:18 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x100000000006) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x20323, 0x7f}) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000003c0)) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000080)) getsockname(r0, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000380)=0xffffffffffffff0d) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000340)={0x6, 0x4}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="080100002900f6152dbd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="0e000b00ffff1f00020007000800010061746d004800020008000400e0ffffff08000100", @ANYRES32=r0, @ANYBLOB="24000300c06ad574f9242cf4876d9c9aed919fe92ae1e9c8d3fb20216d1e859288d77700080004001000100008000100", @ANYRES32=r0, @ANYBLOB="0800050009da00000c00010064736d61726b00000c00020008000400080000000800010061746d006c0002001c00030048fd547cba07791eeef06d670d22137a45b883299cccb30008000400eeffe7ff08000100", @ANYRES32=r0, @ANYBLOB="08010100", @ANYRES32=r0, @ANYBLOB="0800030094f0ac2408000100", @ANYRES32=r0, @ANYBLOB="0800040001000c0014000300f54bd9f93666d4bb9720ed2bc755000008000100", @ANYRES32=r0], 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x44804) 13:34:18 executing program 3: r0 = socket(0x10, 0x802, 0x20000) write(r0, &(0x7f0000000400)="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", 0x442) 13:34:18 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:18 executing program 1: unshare(0x2000400) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x48004) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') [ 337.925166] vhci_hcd: invalid port number 127 [ 337.929870] vhci_hcd: invalid port number 127 13:34:19 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:19 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80420400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8930, &(0x7f00000001c0)={'lo\x00\x00\xe4\xff\xff\xff\xff\x00\x00\x00\x00\xff\xea\x00', &(0x7f0000000140)=@ethtool_ringparam}) 13:34:19 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x40000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x48) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) madvise(&(0x7f000034e000/0x1000)=nil, 0x1000, 0x1) 13:34:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0xc008551b, &(0x7f0000000140)={0x7, 0x7000000, 0x0, 0x0, '\xdd\xfb\xe3m\xe3\xf9\xb5\xe3\xe0\x04\xbc\xc0\xaeM\xe5\xd4\xe81\xc6\x8bl)V\xc2\x87Dv\xee\x83\xe4\x17EOhL\xabjq\xb19dN\xa9z'}) 13:34:19 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:19 executing program 1: unshare(0x400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x400000, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0)={0x2}, 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x305001, 0x0) flock(r1, 0x0) 13:34:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, &(0x7f0000000600)=""/50, 0x0, 0x402}}, 0x305) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/24, 0x18, &(0x7f00000004c0)=""/101, 0x0, 0x2}}, 0x68) write$vnet(r1, &(0x7f0000000440)={0x1, {&(0x7f0000000640)=""/197, 0xc5, &(0x7f0000000240)=""/71, 0x0, 0x2}}, 0x68) 13:34:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$inet6_buf(r1, 0x29, 0x46, &(0x7f0000c86000), &(0x7f0000000000)=0x284ea92c5e2cee3a) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x217, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x0, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0xfffffffffffffe85}, 0x1, 0x0, 0x0, 0x4d}, 0x8001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000008}) flock(r0, 0x0) 13:34:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2$9p(&(0x7f0000000100), 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000), &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 13:34:19 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000300)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r0, &(0x7f00000000c0)='./file0\x00', r2, r3, 0x800) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={r1, 0x1, 0x6, @random="c25edade0502"}, 0x10) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r6 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000002c0)={0x80000002}) epoll_pwait(r6, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) [ 338.700838] binder_alloc: 11588: binder_alloc_buf, no vma [ 338.706597] binder: 11588:11591 transaction failed 29189/-3, size 24-8 line 2973 [ 338.738109] Invalid option length (519) for dns_resolver key 13:34:19 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x11) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000000)={0x8, 0x1ff}) 13:34:19 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000180)='./bus\x00') r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x60240, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xcb6, 0x4) umount2(&(0x7f0000b1d000)='.', 0x2) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) [ 338.794181] binder: 11588:11591 Release 1 refcount change on invalid ref 1 ret -22 [ 338.820398] binder: undelivered TRANSACTION_ERROR: 29189 13:34:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:20 executing program 0: ioperm(0x4, 0xeed, 0x10001) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x80000000032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), 0x288) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3f, 0x200) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) [ 339.053093] binder_alloc: 11608: binder_alloc_buf, no vma [ 339.058844] binder: 11608:11609 transaction failed 29189/-3, size 24-8 line 2973 13:34:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x2) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000085000700ff030000615000000000000039ca000002000000ad6a15826245caeb513cb5a3b38c205b77d53ec533da084c72194764352802b6c5ee0e1da8b5c6f405dc4e05cd3445c1bafda17c456f5b1c7891b4004d4f40dd3a4cea532b2f2f7d1970be5b4e3c276b0e58de6424e8bf0e3ffdca929798bc910aef2eeb04c01f7b9419bafe76b39d0e989fa139e34ba1a3873e1f846faa880007e677d7ca1f690cf37ba2c27fe757bacfebbddf69cc2d88349d25d38f8b526cd45f7017d936338158ae3eb8e7bc05d9fdc18f576a69b2cbdb12c229b020a3f2e68c5319bae9c560c2257c71d68351c9c3baa836bb698e386959c671b6f7fabec69f205f881a61f5bbacc57c17b50cd3f43b9348dac4651cd7cb69f2e4a617fd47fd57f22ea144fb071719aaf20aee86a37ce6e94f1a08cefd1d02"], 0x19d) unshare(0x20400) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff01e, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x7, &(0x7f0000000080), &(0x7f00000002c0)}, 0x78) [ 339.097506] binder: 11608:11615 Release 1 refcount change on invalid ref 1 ret -22 [ 339.126085] binder: undelivered TRANSACTION_ERROR: 29189 13:34:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup3(r0, r0, 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0xff, 0x2, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="1f", 0x0}, 0x18) fanotify_mark(r1, 0xca, 0x10, r1, &(0x7f0000000100)='./file0\x00') sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x80}}, 0x0) 13:34:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000180)='./bus\x00') r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x60240, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xcb6, 0x4) umount2(&(0x7f0000b1d000)='.', 0x2) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) 13:34:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000180)='./bus\x00') r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x60240, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xcb6, 0x4) umount2(&(0x7f0000b1d000)='.', 0x2) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) 13:34:20 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) unshare(0x8000400) getpeername$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0xfffffffffffffffe) 13:34:20 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x2, 0x0) read(r0, 0x0, 0x0) [ 339.504803] binder_alloc: 11628: binder_alloc_buf, no vma [ 339.510444] binder: 11628:11629 transaction failed 29189/-3, size 24-8 line 2973 [ 339.560647] binder: 11628:11635 Release 1 refcount change on invalid ref 1 ret -22 [ 339.603724] binder: undelivered TRANSACTION_ERROR: 29189 13:34:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) unshare(0x20400) read(r0, &(0x7f0000000080)=""/28, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x1, 0xff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x133}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={r4, 0x8}, &(0x7f0000000240)=0x8) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 13:34:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:20 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000180)='./bus\x00') r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x60240, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xcb6, 0x4) umount2(&(0x7f0000b1d000)='.', 0x2) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) 13:34:20 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) unshare(0x8000400) getpeername$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0xfffffffffffffffe) [ 339.954948] binder_alloc: 11649: binder_alloc_buf, no vma [ 339.960654] binder: 11649:11651 transaction failed 29189/-3, size 24-8 line 2973 [ 339.994546] binder: 11649:11651 Release 1 refcount change on invalid ref 1 ret -22 [ 340.005451] binder: undelivered TRANSACTION_ERROR: 29189 13:34:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000180)='./bus\x00') r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x60240, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xcb6, 0x4) umount2(&(0x7f0000b1d000)='.', 0x2) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) 13:34:21 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) unshare(0x8000400) getpeername$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0xfffffffffffffffe) 13:34:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:21 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) unshare(0x8000400) getpeername$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0xfffffffffffffffe) [ 340.208379] binder_alloc: 11663: binder_alloc_buf, no vma [ 340.214302] binder: 11663:11664 transaction failed 29189/-3, size 24-8 line 2973 [ 340.248535] binder: 11663:11664 Release 1 refcount change on invalid ref 1 ret -22 13:34:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000180)='./bus\x00') r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x60240, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0xcb6, 0x4) umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:21 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) unshare(0x8000400) getpeername$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0xfffffffffffffffe) [ 340.514103] binder_alloc: 11672: binder_alloc_buf, no vma [ 340.519830] binder: 11672:11674 transaction failed 29189/-3, size 24-8 line 2973 [ 340.568339] binder: 11672:11678 Release 1 refcount change on invalid ref 1 ret -22 [ 340.599960] binder_release_work: 1 callbacks suppressed [ 340.599974] binder: undelivered TRANSACTION_ERROR: 29189 13:34:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000180)='./bus\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x60240, 0x0) umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:21 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/sequencer\x00', 0x80080, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000001100)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x7c, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000f81000)=0x90) pipe2(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x83ffd) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/4096) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x0) 13:34:21 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) unshare(0x8000400) getpeername$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0xfffffffffffffffe) 13:34:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 340.894690] binder: 11684:11689 transaction failed 29189/-22, size 24-8 line 2834 13:34:22 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) unshare(0x8000400) getpeername$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0xfffffffffffffffe) 13:34:22 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000180)='./bus\x00') umount2(&(0x7f0000b1d000)='.', 0x2) [ 341.006811] binder: 11684:11689 Release 1 refcount change on invalid ref 1 ret -22 [ 341.027884] binder: undelivered TRANSACTION_ERROR: 29189 13:34:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:22 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) unshare(0x8000400) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0xfffffffffffffffe) 13:34:22 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) [ 341.272011] binder: 11701:11702 transaction failed 29189/-22, size 24-8 line 2834 [ 341.327629] binder: 11701:11702 Release 1 refcount change on invalid ref 1 ret -22 [ 341.350789] binder: undelivered TRANSACTION_ERROR: 29189 13:34:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:22 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0xfffffffffffffffe) 13:34:22 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) umount2(&(0x7f0000b1d000)='.', 0x2) [ 341.567663] binder: 11711:11712 transaction failed 29189/-22, size 24-8 line 2834 [ 341.616289] binder: 11711:11712 Release 1 refcount change on invalid ref 1 ret -22 [ 341.663326] binder: undelivered TRANSACTION_ERROR: 29189 13:34:22 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:22 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/sequencer\x00', 0x80080, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000001100)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x7c, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet6(r2, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000f81000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000f81000)=0x90) pipe2(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x83ffd) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000080)=""/4096) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x0) 13:34:22 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0xfffffffffffffffe) 13:34:22 executing program 2: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 341.963703] binder: 11725:11730 Release 1 refcount change on invalid ref 1 ret -22 13:34:23 executing program 2: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:23 executing program 3: mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:23 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0xfffffffffffffffe) [ 342.123606] binder: 11731:11732 Release 1 refcount change on invalid ref 1 ret -22 13:34:23 executing program 3: mkdir(0x0, 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:23 executing program 2: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:23 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) unshare(0x8000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) [ 342.381009] binder: 11745:11746 Release 1 refcount change on invalid ref 1 ret -22 13:34:23 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) ioctl$NBD_DO_IT(r0, 0xab03) unshare(0x8000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) 13:34:23 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 342.685126] binder: 11757:11758 ioctl c0306201 0 returned -14 [ 342.712892] binder: 11757:11758 Release 1 refcount change on invalid ref 1 ret -22 13:34:23 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2000000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x73, 0x0, &(0x7f00000001c0)=0x157) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) close(r0) 13:34:23 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x5a, 0x9, 0x0, 0x101]}, 0xc) unshare(0x8000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) 13:34:23 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 342.985252] binder: 11769:11770 ioctl c0306201 0 returned -14 13:34:24 executing program 1: syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x40) unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) [ 343.029946] binder: 11769:11770 Release 1 refcount change on invalid ref 1 ret -22 13:34:24 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:24 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x3}, 0xf) sendto$inet6(r1, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @remote}, &(0x7f00000000c0)=0xc) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000001700)={r3, 0x1, 0x6, @local}, 0x10) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), 0x9190da7ff8c76f0b}, 0x0) 13:34:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:24 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:24 executing program 4: r0 = semget$private(0x0, 0x0, 0x200) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r6 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x8, r1, r3, r4, r6, 0x26, 0xfffffffffffff7bb}, 0xae, 0x8001, 0x8}) r7 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='ip6_vti0\x00'}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x10040, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r8, 0xc040563d, &(0x7f0000000340)={0x1, 0x0, 0x100, 0x7, {0x6, 0x8, 0x8000, 0x2}}) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x4100, 0x0) ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f00000003c0)) prctl$PR_GET_THP_DISABLE(0x2a) truncate(&(0x7f0000000400)='./file0\x00', 0x1) r10 = creat(&(0x7f0000000440)='./file0\x00', 0x20) write$P9_RSTATu(r10, &(0x7f0000000480)={0x6e, 0x7d, 0x2, {{0x0, 0x59, 0x100000001, 0x20000000, {0x82, 0x1, 0x4}, 0x800000, 0x4, 0x5, 0x8000, 0x0, '', 0x11, 'cgroupsystemeth1\\', 0xb, '/dev/hwrng\x00', 0xa, '/dev/null\x00'}, 0x0, '', r5, r6, r5}}, 0x6e) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000500)={0x0, 0xfffffffffffff001}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000580)={r11, 0x400, 0x4, 0x1f, 0x418d, 0x5}, 0x14) ioctl$sock_ifreq(r8, 0x8934, &(0x7f00000005c0)={'team_slave_1\x00', @ifru_map={0x100, 0x0, 0x7, 0x101, 0x8, 0xfe54}}) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) getsockopt$packet_buf(r10, 0x107, 0x6, &(0x7f00000006c0)=""/95, &(0x7f0000000740)=0x5f) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xfc, r12, 0xc04, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffffffff8001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040054}, 0x8000) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000000980)=0x800) ptrace$peekuser(0x3, r2, 0x7) r13 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r14 = request_key(&(0x7f0000000a40)='ceph\x00', &(0x7f0000000a80)={'syz', 0x0}, &(0x7f0000000ac0)='selinux(\x00', 0xfffffffffffffffe) keyctl$link(0x8, r13, r14) ioctl$BLKRRPART(r9, 0x125f, 0x0) prctl$PR_SET_MM(0x23, 0xe, &(0x7f0000ffd000/0x3000)=nil) [ 343.267258] binder: 11779:11780 ioctl c0306201 0 returned -14 [ 343.316439] binder: 11779:11787 Release 1 refcount change on invalid ref 1 ret -22 13:34:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x2040) getsockname$unix(r0, &(0x7f0000000280), &(0x7f0000000300)=0x6e) r1 = socket(0x2000000000000021, 0x2, 0x2) write$binfmt_script(r1, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x24842, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000200)=0x8001, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) setsockopt$inet6_dccp_buf(r1, 0x110, 0xcd, 0x0, 0xffffffffffffff12) r2 = dup(r1) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000003c0)={0x2, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000800)={0x6, 0x0, &(0x7f0000000740)=""/187, &(0x7f0000000640)=""/53, &(0x7f0000000680)=""/186, 0xf000}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000340)={@empty, 0x0}, &(0x7f0000000400)=0x14) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') prctl$PR_GET_SECUREBITS(0x1b) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@mcast1, @local, @mcast1, 0x3, 0xffffffff, 0x1, 0x0, 0x27, 0x800000, r3}) setxattr$trusted_overlay_opaque(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.opaque\x00', &(0x7f0000000600)='y\x00', 0x2, 0x3) 13:34:24 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:24 executing program 1: unshare(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:24 executing program 1: unshare(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:24 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(0x0) umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x2, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x7, 0x0, 0x1, 0xd0}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x4, r2}) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 13:34:25 executing program 1: unshare(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:25 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(0x0, 0x2) [ 344.039113] binder: BINDER_SET_CONTEXT_MGR already set [ 344.044729] binder: 11813:11815 ioctl 40046207 0 returned -16 13:34:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 344.142452] binder: 11813:11820 transaction failed 29189/-22, size 0-0 line 2834 [ 344.496654] IPVS: ftp: loaded support on port[0] = 21 [ 344.664529] chnl_net:caif_netlink_parms(): no params data found [ 344.742696] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.749247] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.757674] device bridge_slave_0 entered promiscuous mode [ 344.770208] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.776852] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.785440] device bridge_slave_1 entered promiscuous mode [ 344.824974] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 344.838558] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 344.871754] binder: undelivered TRANSACTION_ERROR: 29189 [ 344.871905] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 344.886304] team0: Port device team_slave_0 added [ 344.915885] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 344.924649] team0: Port device team_slave_1 added [ 344.930871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 344.954730] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 345.015318] device hsr_slave_0 entered promiscuous mode [ 345.050240] device hsr_slave_1 entered promiscuous mode [ 345.072692] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 345.080193] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 345.113011] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.119594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.126885] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.133515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.224703] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 345.230843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.247305] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 345.262517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.291174] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.305441] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.335942] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 345.373001] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 345.379149] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.400588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.408998] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.415580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.431278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.439631] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.446295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.480884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 345.505115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 345.513647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 345.522448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 345.553714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.569724] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 345.575953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 345.607683] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 345.629327] 8021q: adding VLAN 0 to HW filter on device batadv0 13:34:26 executing program 1: unshare(0x8000400) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0xfffffffffffffffe) 13:34:26 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x0) 13:34:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:26 executing program 4: socket$kcm(0x11, 0x2, 0x300) r0 = socket$kcm(0xa, 0x522000000003, 0x11) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x7, 0x200, 0x95e, 0x4, r1, 0xfffffffffffffff7}, 0x2c) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000000c0)={0x10000, "530be5a63cb0315429a17d14769b4b87e005b83b675b3eebd3df9d41ab887d4f", 0x1, 0x1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) futimesat(r1, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)={{0x77359400}, {0x0, 0x7530}}) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000140)=0x3, 0x4) 13:34:26 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x4, 0xff}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xffff, 0x5, 0x9, 0x3, 0x60}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r1, 0x401, 0x5, 0x5, 0x8205, 0x1, 0xc5e9, 0x8001, {r2, @in6={{0xa, 0x4e24, 0x3, @mcast2}}, 0x5, 0x9, 0x1, 0x101, 0x7c}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000100)) [ 346.034503] binder_thread_write: 3 callbacks suppressed [ 346.034534] binder: 11840:11846 Release 1 refcount change on invalid ref 1 ret -22 13:34:27 executing program 1: unshare(0x8000400) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0xfffffffffffffffe) 13:34:27 executing program 0: socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000001c0)=""/187) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in6={0xa, 0x4e21, 0x7fffffff, @remote, 0x2}}}, 0x90) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4003) shmctl$SHM_LOCK(r1, 0xb) shmget(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000300)={{0x3b, @broadcast, 0x4e20, 0x3, 'dh\x00', 0x1, 0x20, 0x31}, {@rand_addr=0x3, 0x4e23, 0x3, 0x1, 0x2, 0x400}}, 0x44) shmctl$IPC_RMID(r1, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 13:34:27 executing program 3 (fault-call:3 fault-nth:0): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:27 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='lo\x00\x00\t\x005\x04\xe5\xfb\xb0E\xcdU\a\xde', 0x7) r1 = getuid() fchown(r0, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) [ 346.352574] FAULT_INJECTION: forcing a failure. [ 346.352574] name failslab, interval 1, probability 0, space 0, times 1 [ 346.364122] CPU: 1 PID: 11859 Comm: syz-executor3 Not tainted 4.20.0-rc7+ #3 [ 346.371353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.380742] Call Trace: [ 346.383395] dump_stack+0x173/0x1d0 [ 346.387097] should_fail+0xa19/0xb20 [ 346.390890] __should_failslab+0x278/0x2a0 [ 346.395176] should_failslab+0x29/0x70 [ 346.399125] kmem_cache_alloc+0xf9/0xb90 [ 346.403242] ? getname_flags+0x12f/0xb10 [ 346.404246] binder: 11862:11863 Release 1 refcount change on invalid ref 1 ret -22 [ 346.407391] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 346.407462] getname_flags+0x12f/0xb10 [ 346.424494] ? security_capable+0x1ca/0x200 [ 346.428882] user_path_mountpoint_at+0x92/0x100 [ 346.433615] ksys_umount+0x1db/0x1db0 [ 346.437477] ? prepare_exit_to_usermode+0x114/0x420 [ 346.442548] ? syscall_return_slowpath+0xb2/0x650 [ 346.447448] __se_sys_umount+0x67/0x90 13:34:27 executing program 0: r0 = userfaultfd(0x80800) r1 = dup3(r0, r0, 0x80000) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000280)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)=0x0) r4 = gettid() setpgid(r3, r4) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000001c0)) recvfrom$packet(r1, &(0x7f0000000000)=""/213, 0xd5, 0x0, &(0x7f0000000180)={0x11, 0xff, r2, 0x1, 0x7, 0x6, @random="9baffdc40187"}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000240)) [ 346.451393] __x64_sys_umount+0x3e/0x60 [ 346.455415] do_syscall_64+0xbc/0xf0 [ 346.459199] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 346.464440] RIP: 0033:0x457ec9 [ 346.467688] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.486654] RSP: 002b:00007f709958ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 346.494472] RAX: ffffffffffffffda RBX: 00007f709958ac90 RCX: 0000000000457ec9 13:34:27 executing program 1: unshare(0x8000400) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0xfffffffffffffffe) [ 346.501777] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020b1d000 [ 346.509128] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 346.516482] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f709958b6d4 [ 346.523830] R13: 00000000004c6ab2 R14: 00000000004dbdb8 R15: 0000000000000003 13:34:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:27 executing program 4: syz_open_dev$amidi(&(0x7f0000000480)='/dev/amidi#\x00', 0x2, 0x0) pipe(&(0x7f0000000000)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x2a}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 13:34:27 executing program 3 (fault-call:3 fault-nth:1): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) [ 346.811173] binder: 11876:11878 Release 1 refcount change on invalid ref 1 ret -22 13:34:27 executing program 1 (fault-call:2 fault-nth:0): unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:27 executing program 0: clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffffa, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x795, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8, 0x0, 0x0, 0x0, 0x7}) 13:34:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:28 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x2f, @empty, 0x4e21, 0x0, 'fo\x00', 0x2, 0x100000001, 0x6c}, {@local, 0x4e23, 0x12003, 0x800, 0xff, 0xf60}}, 0x44) 13:34:28 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='exofs\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x61b, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40018000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x10001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x114}}, 0x4000810) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) getsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f0000000280)={@mcast1}, &(0x7f00000002c0)=0x14) umount2(&(0x7f0000000000)='.', 0x2) mount(&(0x7f0000000600)=@md0='/dev/md0\x00', &(0x7f0000000640)='./file1\x00', &(0x7f00000005c0)='adfs\x00', 0x10400, &(0x7f0000000200)='ramfs\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0x40) 13:34:28 executing program 4: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040)=0xffffffffffff03f2, 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 13:34:28 executing program 0: socketpair(0x5, 0x0, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x6, {{0x2, 0x10, @multicast2}}}, 0x88) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) [ 347.155467] binder: 11892:11893 got transaction with invalid offset (0, min 0 max 0) or object. [ 347.164610] binder: 11892:11893 transaction failed 29201/-22, size 0-8 line 3035 [ 347.263544] binder: 11892:11897 Release 1 refcount change on invalid ref 1 ret -22 [ 347.312160] binder: undelivered TRANSACTION_ERROR: 29201 [ 347.392735] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001 13:34:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:28 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x1) 13:34:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$TCFLSH(r1, 0x541b, 0x68ce) r2 = gettid() prlimit64(r2, 0xf, &(0x7f0000000000)={0x1f, 0x6}, 0x0) [ 347.584172] binder: 11918:11919 got transaction with invalid offset (0, min 0 max 0) or object. [ 347.593496] binder: 11918:11919 transaction failed 29201/-22, size 0-8 line 3035 13:34:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000880)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x7, @mcast1}]}}}, @IFLA_BROADCAST={0xc, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x5c}}, 0x0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x100000000, 0x2000) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x0, 0x3}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000040)=0x1) [ 347.678039] binder: 11918:11925 Release 1 refcount change on invalid ref 1 ret -22 13:34:28 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000500)=[0xffffffffffffffff, 0xee01, 0x0, 0xee00]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x1, 0x2}, [{0x2, 0x4, r0}, {0x2, 0x1, r1}, {0x2, 0x7, r2}], {0x4, 0x1}, [{0x8, 0x4, r3}, {0x8, 0x2, r4}, {0x8, 0x2, r5}, {0x8, 0x1, r6}], {0x10, 0x1}, {0x20, 0x2}}, 0x5c, 0x2) [ 347.720245] binder: undelivered TRANSACTION_ERROR: 29201 13:34:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1, 0x0, 0x223}}, 0x20) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) unshare(0x20400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r2, r0, 0x8, 0x2}, 0x10) 13:34:28 executing program 1: unshare(0x8000400) r0 = socket(0x10, 0x4, 0x80000001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0xa0, @remote, 0x10001}, @in6={0xa, 0x2c9ec6f9, 0x5, @loopback, 0x9}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, @in={0x2, 0x4e24, @multicast1}], 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x1d, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @empty}, &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@loopback, 0x4e20, 0x0, 0x4e24, 0x6, 0x0, 0x80, 0x896b398ca73565b4, 0x88, r3, r4}, {0x1, 0x401, 0x7f, 0x2, 0x800, 0x10001, 0x129, 0xf8}, {0x9, 0x4, 0x1, 0xc}, 0x3, 0x6e6bbc, 0x1, 0x1, 0x3, 0x3}, {{@in6=@loopback, 0x4d5, 0x3c}, 0x2, @in=@remote, 0x0, 0x7, 0x1, 0xfe90, 0x3ff, 0x3, 0x675}}, 0xe8) setsockopt$inet6_dccp_buf(r0, 0x21, 0x8d, &(0x7f0000000440)="8f5f224bb2ea247ee16a51c344cc6a9479f639a5d8c557e31c32b828d98bebca90a88d21febfc94da3b31cf986f5772dd0cfa587bf0fd666bedabf62dea873e6e7ae5a06fc7f34d9cc8b", 0x4a) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000004c0), &(0x7f0000000500)=0xb) [ 347.997498] binder: 11938:11942 got transaction with invalid offset (0, min 0 max 0) or object. [ 348.006724] binder: 11938:11942 transaction failed 29201/-22, size 0-8 line 3035 [ 348.120911] binder: 11938:11953 Release 1 refcount change on invalid ref 1 ret -22 13:34:29 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfffffffffffffffe) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x408000, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x1, 0xfd8c, 0x0, 0x3, 0x36, 0x7ff, 0x476f1d3c, 0x1f, 0x100000000}}, 0x43) 13:34:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x3, &(0x7f0000000200), 0xfffffffffffffffd, 0x0, 0xb, &(0x7f0000000880)=""/11}, 0x48) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4480, 0x2) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x18) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x10001) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="98f676c7a00a20d2d40ba00ae90dec32a647394aadc8112df2cc4e0d0a6ac1e2d009921b7563baa076fb11d324caffe593b0b18e93bc257a9741217b9146bad467bd07229f8502560dc50be0e1597e9175ba38fbdf6573b49b33da5f1e6dac83bf1d88e0687e74a2db92b5b42c7238eec06c764517ca18b52f059921b994b22370a2f646e758e755b0b94e410ea283e9ba4761069f5a0e5c394b856573a553ee166c75813b564cc46c8ace93b3ea886542412e7a14be474521144b411042c299a096f6309b9960f11723de2902bd5067b017c7d28b4b1006350407de9e3ea5a3e9bf656978189bec9795f23996f497f9cc1afd2ded21") ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000200)) 13:34:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000280)=""/171) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000380)={0x0, 0x0, [0xfffffffffffffffb, 0x14bf8093, 0x742]}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', r1, r2, 0x100) [ 348.224928] binder: undelivered TRANSACTION_ERROR: 29201 13:34:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000180)="61dd9b7e", 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=""/217, &(0x7f0000000140)=0xd9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x246, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000002, @mcast2}, 0x1c) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3f) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0xa3, &(0x7f00000001c0)="4aac638fb4a80ad3ee4c2c46a53c5e70c1c090b7aa9bd93effc52e4039b8e4e2bc0a46e1cd9abdc7d49945739679f04873425116903d32540686c686a13105a805b150576c53508563346c21028809e18e27a76f29d0e4e504853c2eb5c25ab02c30572ade9202c48938414368de2556688791a47da930bc9ad5ee0f58feeaafad5d7ac400257de359b676fa58ad28521acf6c589367e03028531463980f86c4519174", 0x9, 0x749, 0x8, 0x6, 0x7, 0x2, 0x10000, 'syz1\x00'}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r2, 0x6c3}, &(0x7f0000000480)=0x8) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000380)={0x34, 0x0, &(0x7f0000000340)}) 13:34:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:29 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='userbdevem0!lo\x1aprocself\x00', 0xfffffffffffffff8) r2 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="2454e4d8e2cb64fea5f994f3601d82a41946de97590e8231be591f94be4d6a3832c530591473ccc62fb9ef3ac1a9d7dae00a22a9a8e12450fb63b481d534db99a6a8bbb80f3f191f909b478e832077720cee5894288371a02b870ede36bfbd3c996b1913a6e717f28b0cff8a1f2f1ce1e2f3eed6", 0x74, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, r2) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x9) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x20) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f00000002c0)=0x6) 13:34:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x101001, 0x90) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000040)={0x3, 0x9}) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) getpeername(r1, &(0x7f00000000c0)=@isdn, &(0x7f0000000140)=0x80) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000180)={0x8}, 0x0, 0x8) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) 13:34:29 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001500)=""/240, 0xf0}, 0x0) r0 = socket(0xc, 0x3, 0xfffffffffffffffc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_getroute={0x1c}, 0x1c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xc00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:34:29 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) getgroups(0x7, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff, 0xee00, 0xee01, 0x0, 0xffffffffffffffff, 0xee01]) chown(&(0x7f0000000000)='./file0\x00', r0, r1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) [ 348.691503] binder: 11974:11976 got transaction with invalid offset (0, min 0 max 0) or object. [ 348.700877] binder: 11974:11976 transaction failed 29201/-22, size 0-8 line 3035 13:34:29 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0x2, 0x314, 0x1}) [ 348.763114] binder: 11974:11984 Release 1 refcount change on invalid ref 1 ret -22 [ 348.802373] binder: undelivered TRANSACTION_ERROR: 29201 13:34:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigqueueinfo(0x0, 0x8, &(0x7f0000000040)={0x0, 0x0, 0xffff}) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0xfffffffffffffffb, 0x2}, {0x7, 0x7bd0}], r1}, 0x18, 0x2) 13:34:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)={r0, 0x401, 0x100000000, "e4efd7f90d23df996e1e00f9123c08c8e8d76a9c6dc1b007fd71e30552a38bce116fb85cde6c0a7c553a92152764e6534bfb86338da5a1dcf5fb7e9e1d8d83eed25cd927fa9c4847c77a1716233741fca4318817a36a8e1878fc1be506ddbcaa5db10377e7fb0b43c32bad11117e237078d7d13d18775b12426694ad01eed1eb6a3a5b3977b4bdee165a2da663f8e68110bc3be7"}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x8e, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r2, 0x705, 0x0, 0x0, {0xd}}, 0x15e}}, 0x0) [ 349.055969] binder: 11999:12001 got transaction with invalid offset (0, min 0 max 0) or object. [ 349.065114] binder: 11999:12001 transaction failed 29201/-22, size 0-8 line 3035 13:34:30 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:30 executing program 1: unshare(0x8000400) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0xfffffffffffffffe) [ 349.182108] binder: 11999:12004 Release 1 refcount change on invalid ref 1 ret -22 [ 349.243895] binder: undelivered TRANSACTION_ERROR: 29201 13:34:30 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "f53c22faf4fb11266031a805cb132b1d3804a1201fadd0e088d89d7b9236beb8", "e29c672fb5a80c4b7cc8bad27907e076448789a35c51fd83b53bd9789fe40637", "293cc5eea1b5e240e33c064a86f432956aa2ca281e174b332d2c4f01d4860975", "26289af4d93582e41b828faebb46dbb73403b141aa2021c8bd019ab0ee7cc9cd", "959650ec38608173e2c121ae27e440f9ca0696ea4f374d952f5bbfd7f4592260", "f14d78cb6e837688c760d99e", 0x7, 0x200, 0x4, 0x1000, 0x9}}) madvise(&(0x7f0000a75000/0x2000)=nil, 0x2000, 0xc) pipe(&(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x118, 0x1, {"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"}}, {0x0, "d9b0ca33db2689668a378bbf4c5c23b39bdedc390292d96fb4d5a3445c1110ec0ae024c54601ad54660d5b7bb62e1b607996bf788dec037c60b24e635d0ae6913dd93753d2273b9de2a80c9dab8ae2368173ec1a434b0726a3da707a7a5a4198fcbcd09c866ed7724dc1b1ecf4a80be7982014b8e43c112aa9cbaac2ccdb7091ee1da4c84044ea03310690800f748348ecef19076e0c099f70774a03d81415e3c772f7553b144905"}}, &(0x7f00000006c0)=""/192, 0x1c2, 0xc0}, 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@rand_addr, @empty, 0x0}, &(0x7f0000000240)=0xc) sendmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="030000002004e4fffe010000000000007d0371d55b1243aca207116d8ae736d8fa5197d641c93d4ff639c457d8675f922575b3eb1ce5f1c25b8b77103ec08bcfb1bada24ae08f9ae0391295dcb8fd88f4e2a03292e6aa027426a1661bb4a7a6e63fefabe8a661ff0a4c6cc523084a7c510104d72deab8b3f709eca750c6bca3371e18aa5f72e9aa5d211673fcb9e3626abf6020aa93cd6f7cce280e5a5ba47d392adfa6815c5ad99f1e95f672307dabd66e7b38bf829e8851afb63ded59fce27", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="01000000010000000100002004010000b803425cae73cc44"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) 13:34:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$inet(r1, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000dbf000), 0x3a8, 0x0, &(0x7f0000b2d000)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x114, 0x2000000002715, &(0x7f0000000080)=""/13, &(0x7f0000000040)=0x2d) 13:34:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:30 executing program 1: unshare(0x8000400) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0xffffffffffffffe1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000140)="01232ed9aa861b5ecc5fa3d33b4ee7500e931825cf733aaa12725af746941e926c6864ef07e7be7fbc445cc0b73f") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x7, 0x8000) accept4$unix(r2, 0x0, &(0x7f00000001c0), 0x80000) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) 13:34:30 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x80) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f00000000c0)={0xffffffff, 0x2, 0x1, 0x6, 0x16, 0x100000001}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)=0x0) r2 = getpgrp(r1) prlimit64(r2, 0x1, &(0x7f0000000280)={0x100000000, 0xc07}, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) [ 349.565972] binder: 12024:12027 got transaction with invalid offset (0, min 0 max 0) or object. [ 349.575154] binder: 12024:12027 transaction failed 29201/-22, size 0-8 line 3035 [ 349.686180] binder: 12024:12036 Release 1 refcount change on invalid ref 1 ret -22 13:34:30 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) [ 349.728114] binder: undelivered TRANSACTION_ERROR: 29201 13:34:30 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000200)="240000005e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) 13:34:30 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x105180, 0x0) r1 = accept$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) accept$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:30 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r0) unshare(0x8000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) 13:34:31 executing program 4: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/61, 0x3d, 0x10060, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x610001, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10100020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4048040) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f000090b000/0x4000)=nil, 0x4000) dup3(r0, r1, 0x0) [ 350.062590] binder: 12048:12050 got transaction with invalid offset (0, min 0 max 24) or object. [ 350.071823] binder: 12048:12050 transaction failed 29201/-22, size 24-8 line 3035 [ 350.137647] binder: 12048:12056 Release 1 refcount change on invalid ref 1 ret -22 [ 350.168192] binder: undelivered TRANSACTION_ERROR: 29201 13:34:31 executing program 1: unshare(0x8000400) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x701000, 0x20) ioctl$VIDIOC_G_STD(0xffffffffffffff9c, 0x80085617, &(0x7f0000000100)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=r1) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0xffffffff00000000, 0x8001, 0x0, 0xfff}, {0x4, 0x1, 0x8, 0x8}, {0x5, 0x2, 0xfffffffffffff5be, 0x101}, {0x8, 0x80, 0x8, 0x5}, {0x2, 0xdc6, 0x9, 0x80000001}, {0x2, 0x9c01, 0x0, 0x6}, {0x10001, 0x101, 0x9, 0x401}, {0x5, 0x80000001, 0x9, 0xffff}]}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9d, 0x101200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000040)={0x6, 0x1, 0x1, 0x0, 0xf}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, 0xfffffffffffffffe) 13:34:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:31 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0xf90, 0x6, 0x7, 0x1, 0x1, 0x8}) chdir(&(0x7f0000000080)='./file0\x00') ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x4e20, @local}, {0x307, @broadcast}, 0x4, {0x2, 0x4e21, @empty}, 'teql0\x00'}) umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000700000000000019078ac2314bbac1414110304907800000000450000000000000000010000ac2314aaac141400084000000000000000000000e0000002000000007f00000100000000ffffffff00000000e000000100000000ac14140000000000000000000000000000000000"], 0x0) [ 350.479131] binder: 12069:12071 got transaction with invalid offset (0, min 0 max 24) or object. [ 350.488387] binder: 12069:12071 transaction failed 29201/-22, size 24-8 line 3035 13:34:31 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/46, 0x2e}], 0x2) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000003, 0x2012, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x8, 0x1, 0x3, 0x8, 0xffffffffffffffb7, 0x1cd}, 0x20) [ 350.587165] binder: undelivered TRANSACTION_ERROR: 29201 13:34:31 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() getresgid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [{0x2, 0x5, r1}], {0x4, 0x1}, [{0x8, 0x7, r2}, {0x8, 0x4, r3}, {0x8, 0x0, r4}, {0x8, 0x1, r5}, {0x8, 0x4, r6}, {0x8, 0x1, r7}], {0x10, 0x7}, {0x20, 0x2}}, 0x5c, 0x2) preadv(r0, &(0x7f00000017c0), 0x1be, 0x400000000074) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x6, [0x6, 0x5, 0x101, 0x9, 0xfff, 0x100, 0x7, 0x2, 0x80000000, 0x8, 0x8, 0x4, 0x3ff, 0x9, 0xfffffffffffffffe, 0x0, 0x4, 0x3, 0x4, 0x1, 0x3, 0x9, 0xffffffffffff347a, 0x9, 0xf3a4, 0xfffffffffffffffe, 0xf9c1, 0x8000, 0x8, 0x9, 0x6, 0x100000001, 0x8483, 0x5, 0x2, 0x0, 0x3, 0x9, 0x1000, 0x101, 0x0, 0x5, 0x3b0c, 0x3, 0x5, 0xffffffffffffffe0, 0x9, 0x400], 0x4}) 13:34:31 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x6, &(0x7f00000000c0)='ramfs\x00'}, 0x30) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000200)=0x2) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x2, {{0x3a9, 0x3, 0x1, r1}}}, 0x28) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) [ 350.870951] binder: 12088:12091 got transaction with invalid offset (0, min 0 max 24) or object. [ 350.880198] binder: 12088:12091 transaction failed 29201/-22, size 24-8 line 3035 13:34:32 executing program 1: unshare(0x8000400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x24) setsockopt$inet_dccp_int(r0, 0x21, 0x15, &(0x7f0000000040)=0x5, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) [ 350.964879] binder: undelivered TRANSACTION_ERROR: 29201 13:34:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:32 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/145, 0x91}, {&(0x7f00000002c0)=""/81, 0x51}], 0x2}, 0x40000161) umount2(&(0x7f0000b1d000)='.', 0x2) [ 351.268915] binder_thread_write: 2 callbacks suppressed [ 351.269250] binder: 12106:12107 Release 1 refcount change on invalid ref 1 ret -22 13:34:32 executing program 0: syz_emit_ethernet(0x77, &(0x7f0000002800)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "b3df53", 0x41, 0x84, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x43050000]}, @dev, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x0, 0x0, "96b6f6320e560ee09dd40a829315d259b5b78248c008d424ecfbc3c8a58e469b35551cd0fc658d0e28788022a52dd82f14ace3132856e8348a"}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x1]}) 13:34:32 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x85a, 0x103100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xc035}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x4, 0x200}, &(0x7f0000000100)=0x8) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000140)=0x2, 0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) [ 351.379829] binder: release 12106:12107 transaction 101 out, still active [ 351.387017] binder: undelivered TRANSACTION_COMPLETE 13:34:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4800000000000000, 0x0, 0x0, 0x234, 0x0, 0x0}) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x0, &(0x7f0000000000)='}cpusetsystem/vmnet0\x00', 0x0, &(0x7f0000000280)='/dev/binder#\x00'], 0x0, 0x200000000001900) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x50080) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0xf5, "3bc1e546fd01bee46f34722bbf00a5c7f12d205c05b02fb4037fd20d8a94ff1ddaa54d3023d62f911f432af0c0e57c083c85559e679da9f786673a89dd0c96efccc2dbcfc1b6b44f7bfb5facdc45c074a3cd528de228568853949684709785efcc473205698bb6b10cad75fbbbc2b9af28b03d1c25ec742b81d9a2779524e7ec692908ded195451373e150a6c6284f7dfbd8e2a6dca95ce832e9035b041267956e38a7d8dbf65e0d1069135b74e0a52cb81e752e4ac65a1fb50aa08ab8c6341e6d49d270d178a39f17dca7200a03aa33d3ed5f29f32995eec9c867b3fe160a3272dc0b91e791110236dc70eaf7661689b09bff8e72"}, &(0x7f0000000440)=0xfd) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000480)=r2, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) bind$rds(r1, &(0x7f0000000540)={0x2, 0x4e20, @remote}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e20, @multicast1}}, 0x60e, 0xffffffffffffb513}, 0x90) 13:34:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 351.614404] binder: send failed reply for transaction 101, target dead 13:34:32 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:gpg_agent_exec_t:s0\x00', 0x26, 0x2) 13:34:32 executing program 0: syz_emit_ethernet(0x77, &(0x7f0000002800)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "b3df53", 0x41, 0x84, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x43050000]}, @dev, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x0, 0x0, "96b6f6320e560ee09dd40a829315d259b5b78248c008d424ecfbc3c8a58e469b35551cd0fc658d0e28788022a52dd82f14ace3132856e8348a"}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x1]}) [ 351.767357] binder: 12121:12122 ioctl c0306201 20000180 returned -14 13:34:32 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) unshare(0x2000400) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x5, @empty, 0x1}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x5, @remote, 0x4}], 0x48) 13:34:32 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0xab9e, &(0x7f0000000040)=0x1) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) [ 351.833173] binder: 12123:12123 ioctl c0306201 20000180 returned -14 [ 351.860867] binder: 12126:12127 Release 1 refcount change on invalid ref 1 ret -22 [ 351.946054] binder: release 12126:12127 transaction 103 out, still active [ 351.953236] binder: undelivered TRANSACTION_COMPLETE 13:34:33 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) recvfrom$packet(r0, &(0x7f00000000c0)=""/60, 0x3c, 0x2000, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 352.103217] binder: send failed reply for transaction 103, target dead 13:34:33 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x200000000220000, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x40000, 0x88000) 13:34:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = getpgid(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_matches\x00') setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm, @sack_perm, @mss={0x2, 0x1000}], 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0x50, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, r2, 0x0, 0x4, &(0x7f0000000140)='tls\x00', r3}, 0x30) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x4) ptrace$setopts(0x4200, r4, 0x800, 0x20) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000), 0x4f928187a9e75e36) recvmsg(r0, &(0x7f0000001680)={&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x3, &(0x7f0000001580)=""/254, 0xfe}, 0x40000000) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000016c0)={@local, @mcast2, @mcast2, 0x81, 0xfffffffffffffff8, 0x401, 0x500, 0x8001, 0x40000000, r5}) sendmmsg(r0, &(0x7f0000000040), 0x0, 0x0) [ 352.286854] binder: 12151:12153 Release 1 refcount change on invalid ref 1 ret -22 [ 352.342189] binder: release 12151:12153 transaction 105 out, still active [ 352.349279] binder: undelivered TRANSACTION_COMPLETE 13:34:33 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x101000) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x2827, 0x7f, [], &(0x7f0000000040)=0x80}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:33 executing program 0: socket$pppoe(0x18, 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x101400, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) mmap(&(0x7f0000c8b000/0x4000)=nil, 0x4000, 0x2000007, 0x1c, r0, 0x2000000000000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x28, 0x6, &(0x7f0000581000)={{{@in, @in6=@mcast2}}}, &(0x7f0000000000)=0xe8) 13:34:33 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='efs\x00', 0x40, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 352.495584] binder: send failed reply for transaction 105, target dead 13:34:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") socket$inet6_sctp(0xa, 0x1010000000005, 0x84) unshare(0x60000000) syz_genetlink_get_family_id$nbd(0x0) bind(0xffffffffffffffff, 0x0, 0xffffffffffffff0b) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'s\xf9zk\x04Cled9\x1f\x8e\xac\xf1\x97\x8d', @ifru_map}) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000080)) socket$unix(0x1, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) [ 352.672377] binder: 12169:12170 Release 1 refcount change on invalid ref 1 ret -22 [ 352.712041] binder: release 12169:12170 transaction 107 out, still active [ 352.719125] binder: undelivered TRANSACTION_COMPLETE [ 352.740075] IPVS: ftp: loaded support on port[0] = 21 13:34:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7fffffff, &(0x7f0000000080)="0adc1f42af4d573c123f09000000") socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x2) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x1000000000000002, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$packet(0x11, 0x2, 0x300) recvmmsg(r1, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) 13:34:33 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x90400, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f00000002c0)=0x9) unshare(0x8000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r2, 0x10001, 0x8}, 0x2) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x6, 0x20980) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000840}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x30, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 13:34:33 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getpeername$tipc(r0, &(0x7f00000000c0)=@id, &(0x7f0000000140)=0x10) umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 352.928487] binder: send failed reply for transaction 107, target dead 13:34:34 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x101, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)="75bc7967fbca584166", 0x9, r0}, 0x68) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x102, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) unshare(0x10030000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x450000, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x1000, 0xffffffffffffffc0, 0x68e, 0xffffffffffffffe1, 0x22d, 0x100000000, 0x2, 0x0, 0x4000005de4ea01, 0x0, 0x80000001}, 0xb) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0xfffffffffffffffe) socket$inet_udplite(0x2, 0x2, 0x88) [ 353.086695] binder: 12192:12194 Release 1 refcount change on invalid ref 1 ret -22 [ 353.113314] binder: release 12192:12194 transaction 109 out, still active [ 353.120368] binder: undelivered TRANSACTION_COMPLETE 13:34:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 13:34:34 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x2) [ 353.233832] binder: send failed reply for transaction 109, target dead 13:34:34 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x5) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0x0) [ 353.445858] binder: 12212:12214 Release 1 refcount change on invalid ref 1 ret -22 [ 353.473103] binder: release 12212:12214 transaction 111 out, still active [ 353.480204] binder: undelivered TRANSACTION_COMPLETE 13:34:34 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x200000, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/4096) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0xfffffffffffffffe) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000080)=0x4, 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001100)=@sack_info={0x0, 0x0, 0xfe3}, &(0x7f0000001140)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001180)={r4, 0x3}, 0x8) 13:34:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) [ 353.573442] binder: send failed reply for transaction 111, target dead [ 353.612908] protocol 88fb is buggy, dev hsr_slave_0 [ 353.618576] protocol 88fb is buggy, dev hsr_slave_1 13:34:34 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x120) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000180)='vboxnet0\'\'\xf8!wlan0self/posix_acl_access.,\x00', &(0x7f0000000200)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', &(0x7f0000000240)='bdev\x00', &(0x7f0000000280)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', &(0x7f00000002c0)='em0,}\x00'], &(0x7f0000000540)=[&(0x7f0000000340)='bdev\x00', &(0x7f0000000380)='ramfs\x00', &(0x7f00000003c0)='ppp1-$wlan1em1proc%\xba\x00', &(0x7f0000000400)='wlan0@+\x00', &(0x7f0000000440)='user\'\x9cppp0\x00', &(0x7f0000000480)='-\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='ramfs\x00']) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000000600)='./file0\x00', 0x2) [ 353.705711] binder: release 12219:12224 transaction 113 out, still active [ 353.712897] binder: unexpected work type, 4, not freed [ 353.718243] binder: undelivered TRANSACTION_COMPLETE 13:34:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 13:34:34 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000380)=0x5, 0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_setup(0xfffffffffffffff9, &(0x7f0000000140)=0x0) io_submit(r5, 0x2, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000180)="1d4528e8a1a935c2350942ac9dfd1fb5cf8f228c4aece8d3eb045a0a7f17bf3ff2c1177bb1177f9554621bdf0ba7b14472deff310b086a6dac1a495782a59110330cbd3165acf9245723b527afc3f6f6f49f28d4d5717163aecc1ab6b14900fdba800372daec4928bf5172da7a9aa7dd0ba79c8c8e4767cb1504f295275f709531a674cd5d25fae6e44b1945f2b51e04d0e2b21f2032cf7327c0de0a2362459c17af85c90fc3cd4bd951697de39e36422082c71256d4e735253265d7d5a91654333a1e7e82f342b6692e95f7", 0xcc, 0x100000000, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x101, r3, &(0x7f00000002c0)="d9cd32f2b7079d7c00fe36ff50644b0b4b81f34e2f4633530e3254f96588568fd75468a8426a7795fa0f8b1db976067ddb41ccdc", 0x34, 0x68f9}]) getsockopt$sock_int(r4, 0x1, 0xc, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) 13:34:34 executing program 1: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2000000000, 0x4000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000100)=""/34) unshare(0x16040100) socketpair(0x16, 0x5, 0xa68b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreq(r2, 0x0, 0x0, &(0x7f0000000040)={@multicast1, @remote}, &(0x7f0000000080)=0x8) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, 0xfffffffffffffffe) [ 353.874595] binder: send failed reply for transaction 113, target dead 13:34:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) setrlimit(0x400000000000007, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x2c) r1 = getpgid(0x0) sched_rr_get_interval(r1, &(0x7f0000000340)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x80000000, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) [ 354.044008] binder: 12239:12243 ioctl c0306201 0 returned -14 13:34:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x200001) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x3e) chdir(&(0x7f0000000180)='./file0\x00') ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) umount2(&(0x7f0000b1d000)='.', 0x2) mq_open(&(0x7f0000000080)='-$\x00', 0x2, 0x22, &(0x7f0000000140)={0x80, 0x80, 0x40, 0x5, 0x5, 0xffffffff, 0x93}) [ 354.084549] binder: release 12239:12243 transaction 117 out, still active [ 354.091704] binder: unexpected work type, 4, not freed [ 354.097016] binder: undelivered TRANSACTION_COMPLETE 13:34:35 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x2000000010103) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x4000000001, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 13:34:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 354.244036] binder: send failed reply for transaction 117, target dead 13:34:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x20a000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xe6e5) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @dev}}, 0x0, 0x1ffffffffffffe3}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r2, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r5) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x3}, 0xa) 13:34:35 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0x80, 0x80000001, 0x7fff, 0x3, 0x3, 0x4}) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:35 executing program 1: unshare(0x8008000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:35 executing program 0: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) [ 354.549276] binder: release 12263:12265 transaction 121 out, still active [ 354.556477] binder: unexpected work type, 4, not freed [ 354.561968] binder: undelivered TRANSACTION_COMPLETE 13:34:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 354.699952] binder: send failed reply for transaction 121, target dead 13:34:35 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/209, &(0x7f0000000100)=0xd1) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)=""/188, &(0x7f0000000200)=0xbc) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x46, 0x505080) sendto$unix(r1, &(0x7f0000000280)="c838a4d3d92454085a894e71ce3d05cfd0296330ec773886a44206033e71c18e7059a1c3ae957d87a3adc97a25f307a07fa9ac2be1a484f67e9f97d22e91bed1437383fb8c7ca968b29006e2316461b14e06b8d894eaac3207", 0x59, 0x41, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 13:34:35 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x8000) getsockopt$inet6_int(r0, 0x29, 0x2, 0x0, &(0x7f0000013000)) [ 354.868551] binder: release 12282:12283 transaction 125 out, still active [ 354.875712] binder: unexpected work type, 4, not freed [ 354.881021] binder: undelivered TRANSACTION_COMPLETE 13:34:36 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0xa) mkdir(&(0x7f0000000000)='./file0\x00', 0x1) 13:34:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r1 = open$dir(&(0x7f0000000240)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./control\x00') symlink(&(0x7f0000000140)='./control/file0\x00', &(0x7f0000000180)='./control/file0\x00') r2 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./control/file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2a0000, 0x0) 13:34:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 355.053813] binder: send failed reply for transaction 125, target dead 13:34:36 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@v1={0x2, 'u'}, 0x2, 0x1) ioctl$void(r0, 0xc0045c79) keyctl$session_to_parent(0x12) 13:34:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/156, 0x9c}], 0x1) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = fcntl$getown(r1, 0x9) fcntl$setown(r1, 0x8, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) [ 355.256439] binder: unexpected work type, 4, not freed 13:34:36 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='status\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x528a0002}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_newroute={0x84, 0x18, 0x1, 0x70bd27, 0x25dfdbff, {0x1c, 0xb4, 0x94, 0x7, 0xff, 0x7, 0xff, 0x4}, [@RTA_DST={0x10, 0x1, [{0x8, 0x80000001, 0xc640, 0xb8}, {0x7ff, 0x2, 0xc1df, 0x3}, {0x1, 0x9, 0x7fffffff, 0xfff}]}, @RTA_DST={0x24, 0x1, [{0x6, 0x401, 0x3, 0xd4}, {0x8, 0x6, 0x1}, {0x86b5, 0x3ff, 0x100000001, 0x1}, {0x1, 0x120, 0x0, 0xfffffffeffffffff}, {0x1f, 0x5, 0x6, 0xb0}, {0xb3, 0x3, 0x5, 0x5}, {0x100000001, 0x581, 0x480000, 0xfffffffffffff005}, {0x7, 0x4ce0, 0xffffffffffffb0f6, 0x6}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x550}, @RTA_DST={0x24, 0x1, [{0xbac, 0x4, 0x8, 0x2}, {0x5, 0x80, 0x401, 0x1c3}, {0x9, 0x80, 0x5, 0x3e1}, {0xfffffffffffffff9, 0x6eec, 0x8b, 0x1}, {0x4, 0x2, 0x249, 0x7}, {0x3, 0x1f, 0x9, 0x280000000000000}, {0x45, 0x20, 0x1, 0x10001}, {0x33df, 0x6, 0xffffffffffffffc0, 0x1ff}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x7fff) 13:34:36 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x200, 0x1) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) [ 355.607882] binder: unexpected work type, 4, not freed 13:34:36 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) 13:34:36 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:36 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffff, 0x40100) syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') pread64(r0, &(0x7f0000000000), 0x0, 0x700) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) [ 355.954504] binder: unexpected work type, 4, not freed 13:34:37 executing program 1: unshare(0x8000400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="03000000000000000600000008000000020000000101000015000000090000000400000000000000000000000000001162c8e5695f29e2000200ecffea010000ffffff7f01000000070000070000000000000000000000000b0000009fe300000200000005000000feffffff0700000007000000000000000000000000000000"]) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0xfffffffffffffffe) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101000, 0x0) 13:34:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) 13:34:37 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200801, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000180)=0x84) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/150, 0x96}, {&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/232, 0xe8}], 0x3, 0x4b) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000480)=""/31) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000005c0)={@multicast2, @local, 0x0}, &(0x7f0000000600)=0xc) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@local, @in6=@remote, 0x4e24, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0xff, r2, r3}, {0x5, 0x80, 0x0, 0x559b, 0x80000000, 0x3, 0x5f2c, 0x3}, {0x100, 0xfffffffffffffff9, 0x8, 0x20}, 0x82c, 0x6e6bbc, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x4d6, 0xff}, 0xa, @in=@multicast2, 0x34ff, 0x3, 0x3, 0x6, 0x6, 0xfffffffffffffffc, 0x7}}, 0xe8) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000800)={0xff, @local, 0x4e21, 0x3, 'fo\x00', 0x28, 0xe1ba, 0x52}, 0x2c) write$FUSE_GETXATTR(r0, &(0x7f0000000840)={0x18, 0x0, 0x2, {0xea8}}, 0x18) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000880)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000008c0)=0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000900)=r5) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000940)={0x9, 0x1, 0x1ff}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000980)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000009c0)={r1, 0x10001, 0x4b3}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a80)={0x10, 0x0, &(0x7f0000000a00)=[@request_death={0x400c630e, 0x3, 0x1}], 0x21, 0x0, &(0x7f0000000a40)="ca6231a1ca2b2c8686c0869408d0b758d466cb62cf2e9ca0d7b23b450a9db55343"}) ioctl$TIOCCONS(r0, 0x541d) modify_ldt$write2(0x11, &(0x7f0000000ac0)={0x316b, 0x20000000, 0xffffffffffffffff, 0x1, 0x100000000, 0x401, 0x6c618dbc, 0x1, 0x81, 0x2}, 0x10) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/dlm-control\x00', 0x121400, 0x0) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f0000000b40)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000b80)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000c80)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000c40)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000cc0)={0x4, 0x8, 0xfa00, {r7, 0x7}}, 0x10) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f0000000d00)) restart_syscall() ioctl$sock_netdev_private(r6, 0x89f4, &(0x7f0000000d40)="f6f38b2714559d82cef70e74c1d9f283f16f33493a4e6e23df826479298eec3ad8") write$P9_RCLUNK(r6, &(0x7f0000000d80)={0x7, 0x79, 0x2}, 0x7) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) 13:34:37 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, 0x0) r0 = socket(0x10, 0x400000000080803, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f00485bc04fef7001d0a0b49ffed000000800028000800030001000000", 0x24) [ 356.238239] binder: unexpected work type, 4, not freed [ 356.285835] Unknown ioctl 1074310800 13:34:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') getdents64(r0, &(0x7f0000000200)=""/116, 0x21) 13:34:37 executing program 3: mkdir(&(0x7f0000000140)='./file2\x00', 0x106001f) mount(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000001c0)='minix\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x103842, 0x0) mkdirat(r0, &(0x7f0000000080)='.\x00', 0xd4) chdir(&(0x7f0000000000)='./file1/file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f000000060000001807000000000000380500009002000090020000d803000048060000480600004806000048060000480600000600000064b76ec5794395187a99b1d319b2e7858399eff753050a679609d61814125d423ded3ded94c4c1a317af0b2e4eeed3b7f173f58447eae1b8be0dd541af07470071ef985d", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00038010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000002000000000000004800534e50540000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa004000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100158010000000000000000000000000000000000000000000000004800686268000000000000000000000000000000000000000000000000000000ab09000001010002070001800500b8000500070004004db3ffff970c07000800090007000000060048005445450000000000000000000000000000000000000000000000000000010000000500000000000000000000000069726c616e30000000000000000000001a0d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200148010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000004000000000000003000616800000000000000000000000000000000000000000000000000000000000004d4000004d406000000be0200002800434845434b53554d000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003801600100000000000000000000000000000000000000000000000048006862680000000000000000000000000000000000000000000000000000000000000004010100e30001000000060001000900c10006000600ffffcc00010002000900020001002800686c000000000000000000000000000000000000000000000000000000000103000000000000280053594e50524f58590000000000000000000000000000000000000000000008d8080000000000fe800000000000000000000000000023fe8000000000000000000000000000bbff0000ffffffffffffffffffffffffffffffff00ffffffff00000000ffffff0079616d3000000000000000000000000076657468315f746f5f68737200000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000007f003f0320000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800534e5054000000000000000000000000000000000000000000000000000000000000000000000000000000000001ffffffff0000000000000000000000002a328f0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x778) umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release], 0x0, 0x0, 0x0}) 13:34:37 executing program 1: unshare(0x100) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @local}, {0x1, @dev={[], 0x11}}, 0x4, {0x2, 0x4e23, @rand_addr=0xa73}, 'ifb0\x00'}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00t\xa6\xb6$\xcb\xd6\x12W\xd1\xa0{L\x03J\xaa\x1c\xd4H\x1e\xf9:\x1a9#\xa1\x92\nyN\xda\xd2@\x9d\xda}j^\xc3\xa7\x10\xe7\xddzp\f B\xa1.\xbe\xe0\xee\xa8\x11\xd0\xd3\x93\xf9\x98\xa4Rg\xc2\xbbwj\x88\xfb=\x7f\x9d\xd5e&\xe3\xe8q\xbf\x19i\xf6\xa4\xb7c\xf6\x84\xff\x00\x9c\xbf\r\xc2\x7f\xb2\xefz\xe2\xb2K\xa5\x13\xee\xff\xbd\xeeD\xc8\xa4$\xdcz\x06\x90\xe1\xfa\xcdW7') renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') [ 356.629946] binder: 12365:12368 Release 1 refcount change on invalid ref 0 ret -22 13:34:37 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x135f, 0x42) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000140)=0x40) mkdir(&(0x7f00000000c0)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) r1 = getpid() r2 = getpid() tgkill(r1, r2, 0x36) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) [ 356.682869] binder_thread_release: 4 callbacks suppressed [ 356.682890] binder: release 12365:12368 transaction 145 out, still active [ 356.695627] binder: unexpected work type, 4, not freed [ 356.700952] binder_release_work: 4 callbacks suppressed [ 356.700962] binder: undelivered TRANSACTION_COMPLETE 13:34:37 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() r0 = socket(0x10, 0x400000000080803, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f00485bc04fef7001d0a0b49ffed000000800028000800030001000000", 0x24) 13:34:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release], 0x0, 0x0, 0x0}) [ 356.881713] binder_send_failed_reply: 4 callbacks suppressed [ 356.881729] binder: send failed reply for transaction 145, target dead 13:34:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x110, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0xb3e0}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c, 0x28}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x80, 0x0) close(r2) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x202100) renameat2(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00', 0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xfffffffffffffc00, 0x1, [0x2]}, &(0x7f00000004c0)=0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x40200, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r4, 0x80000001, 0x1, 0x1}, &(0x7f0000000540)=0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') 13:34:38 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]}) clone(0x202102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) [ 357.106381] binder: 12385:12387 Release 1 refcount change on invalid ref 0 ret -22 [ 357.129525] binder: release 12385:12387 transaction 149 out, still active [ 357.136740] binder: unexpected work type, 4, not freed [ 357.142132] binder: undelivered TRANSACTION_COMPLETE [ 357.241101] kauditd_printk_skb: 3 callbacks suppressed [ 357.241130] audit: type=1326 audit(1546868078.281:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12391 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 357.267993] binder: send failed reply for transaction 149, target dead [ 357.476363] IPVS: ftp: loaded support on port[0] = 21 [ 357.592204] chnl_net:caif_netlink_parms(): no params data found [ 357.640378] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.646964] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.654926] device bridge_slave_0 entered promiscuous mode [ 357.663122] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.669543] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.677583] device bridge_slave_1 entered promiscuous mode [ 357.703990] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 357.714953] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 357.737830] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 357.745985] team0: Port device team_slave_0 added [ 357.753462] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 357.762003] team0: Port device team_slave_1 added [ 357.767928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 357.776819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 357.803237] device hsr_slave_0 entered promiscuous mode [ 357.809345] device hsr_slave_1 entered promiscuous mode [ 357.816286] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 357.823842] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 357.846302] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.852856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.859806] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.866431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.959663] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 357.965889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.976794] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 357.988055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.997769] audit: type=1326 audit(1546868079.051:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12396 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad2a code=0xffff0000 [ 357.998284] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.032511] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.044850] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 358.079246] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 358.085491] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.101010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.109612] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.116181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.145401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.154825] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.161233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.169783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 358.179807] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.194531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.209979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.228769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.240883] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 358.247094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.256230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.276671] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 358.291921] 8021q: adding VLAN 0 to HW filter on device batadv0 13:34:39 executing program 5: 13:34:39 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/7) 13:34:39 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe9ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) dup3(r1, r0, 0x0) 13:34:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release], 0x0, 0x0, 0x0}) 13:34:39 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000700), &(0x7f0000000740)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setrlimit(0xf, &(0x7f00000004c0)={0x5, 0x1ff}) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000500)='./file0\x00', r2, r3) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') r4 = semget$private(0x0, 0x0, 0x100) semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f00000003c0)=""/249) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000680)={0x2, r1}) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000200)={0x5, 0x2, @raw_data=[0x5540, 0x5, 0x2, 0x40, 0x20, 0x6, 0x0, 0x2, 0x6a03, 0x4, 0x6, 0x2, 0x4, 0x40, 0x32f3, 0x7]}) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000380)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) linkat(r1, &(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x1400) 13:34:39 executing program 0: socketpair$unix(0x1, 0x40000400000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x400) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r1, 0x5, 0x0) [ 358.440940] binder: 12407:12410 Release 1 refcount change on invalid ref 0 ret -22 [ 358.483288] binder: release 12407:12410 transaction 153 out, still active [ 358.490333] binder: unexpected work type, 4, not freed [ 358.497047] binder: undelivered TRANSACTION_COMPLETE 13:34:39 executing program 2: 13:34:39 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) [ 358.614856] binder: send failed reply for transaction 153, target dead 13:34:39 executing program 0: 13:34:39 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x400000000080803, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f00485bc04fef7001d0a0b49ffed000000800028000800030001000000", 0x24) 13:34:39 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:39 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe9ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) dup3(r1, r0, 0x0) 13:34:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000001340)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 13:34:40 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f0000000000)) 13:34:40 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000200)={0x36a, 0x1, 0x7, 0x9, 0x5, 0x80000000}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000140)=""/96) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0)) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x4}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)="329b9928799f1a48699b5897894502cc50c531c2cf1d33386acfb982892e7e9451faeb2b2d0ffef3e764e3f6a7d706e247b02d341ab3eaf09cbabc46218a926e2d2b1c", 0x43) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000280)) 13:34:40 executing program 5: 13:34:40 executing program 0: 13:34:40 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x20) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000140)={0x0, 0x7}, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000180)={0x399f1336, r1}, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffff7fffffff, 0x5, 0x7, 0x3, 0x1}) umount2(&(0x7f0000b1d000)='.', 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={r0, r0, 0xc, 0x2}, 0x10) 13:34:40 executing program 2: 13:34:40 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe9ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) dup3(r1, r0, 0x0) 13:34:40 executing program 5: 13:34:40 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x800, 0x400) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x1, 0x7, @remote, 0xee}}, 0x2, 0xf6}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000003c0)={r1, 0x7, 0x0, 0x7f, 0x20}, &(0x7f0000000400)=0x18) unshare(0x700) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0xfffffffffffffffe) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x4000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000100)=[{}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @random}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000440)=0xfff) socketpair(0x3, 0x0, 0x4481572b, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000001c0)={[{0x1000, 0xc021, 0x7f, 0x5, 0x2, 0x3, 0x8, 0x8, 0x9, 0x2, 0x40, 0x8, 0x7ff}, {0xe216, 0x3, 0xffffffff, 0x3f, 0x10000, 0x9, 0x1ff, 0x7, 0x8000, 0x4856, 0x9, 0x32, 0x9}, {0x0, 0x3, 0x8, 0x6e3, 0x3, 0x3, 0x8000, 0x2bd, 0x7, 0x7, 0x5, 0x7fff, 0x3}], 0x1}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:34:40 executing program 0: 13:34:40 executing program 2: 13:34:40 executing program 0: 13:34:40 executing program 4: 13:34:40 executing program 5: 13:34:40 executing program 1: unshare(0x8000400) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040), &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) 13:34:41 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000000000)='.', 0x2) 13:34:41 executing program 2: 13:34:41 executing program 4: 13:34:41 executing program 5: 13:34:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlink(&(0x7f0000000040)='./file0\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') rmdir(0x0) 13:34:41 executing program 2: r0 = socket$inet6(0xa, 0x8000000000000003, 0x3) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 13:34:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x88, 0x0, &(0x7f0000001840)={@loopback, @local, @multicast2}, 0xc) 13:34:41 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x4000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000080)=""/94) 13:34:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x12) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r0, r1, &(0x7f0000000080), 0x80000003) [ 360.414435] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use) 13:34:41 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x2040) mkdir(&(0x7f00000000c0)='./file0\x00', 0x102) write$P9_RLERRORu(r0, &(0x7f0000000140)={0x13, 0x7, 0x2, {{0xfffffffffffffec1, 'rai\xbbs\x00'}, 0x7}}, 0x132) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 13:34:41 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) 13:34:41 executing program 1: unshare(0x8000400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0xfffffffffffffffe) 13:34:41 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x0, 0x0, 0x0, {0x0, 0x7530}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "34876edfb035813c"}}, 0x48}}, 0x0) 13:34:42 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0xc, &(0x7f000095bffc)={0x8}, 0x4) 13:34:42 executing program 3: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x8002, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000300)={0x8001007, 0x9a, 0x2}) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mount(&(0x7f0000000180)=@sr0='/dev/sr0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='iso9660\x00', 0x10000, &(0x7f0000000280)='trusted.') getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', 'ramfs\x00'}, &(0x7f0000000140)=""/41, 0x29) 13:34:42 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x10000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000940)=0x14, 0x800) accept$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f00)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001000)={@local, 0x0}, &(0x7f0000001040)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f0000001440)={&(0x7f0000001080)={0x394, r2, 0x104, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x140, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xffffffffffffff6d, 0x6, 0xfff, 0x3}, {0x4, 0x8, 0x80, 0x8}, {0x18, 0x7, 0x2, 0x7fff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x230, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x394}, 0x1, 0x0, 0x0, 0x4000}, 0x80) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) [ 361.506859] IPVS: set_ctl: invalid protocol: 58 172.20.20.16:20000 [ 361.539557] device bond0 entered promiscuous mode [ 361.544765] device bond_slave_0 entered promiscuous mode [ 361.550741] device bond_slave_1 entered promiscuous mode 13:34:42 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x6) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x4, 0x800000000105082) r1 = memfd_create(&(0x7f0000000480)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x102000000) 13:34:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) 13:34:42 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') ioctl$RNDZAPENTCNT(r0, 0x5452, &(0x7f0000000080)) [ 361.820650] IPVS: ftp: loaded support on port[0] = 21 13:34:43 executing program 1: unshare(0x28000417) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:43 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) umount2(&(0x7f0000b1d000)='.', 0x2) [ 362.307140] IPVS: set_ctl: invalid protocol: 58 172.20.20.16:20000 13:34:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 13:34:43 executing program 2: mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200001e4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 13:34:43 executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x3b7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 13:34:43 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1214c0, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/28) 13:34:43 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x2) [ 362.599277] IPVS: ftp: loaded support on port[0] = 21 13:34:43 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8040, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x4) umount2(&(0x7f0000b1d000)='.', 0x2) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)=""/163, 0xa3) 13:34:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000d80)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)='D', 0x1}], 0x1, 0x0, 0x0, 0x24000010}], 0x1, 0x40) 13:34:44 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) write(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000001400), 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x894a, &(0x7f0000000080)={'sit0\x00', @ifru_names='ip6gre0\x00'}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000240)={0x6, 0x0, 0x6, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000600)={'veth1\x00', 0xc8b2000000000000}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0xffffffffffffff99, 0x4000040) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000340)={0x18, 0x0, 0x7, {0x80}}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x15d, [0x20000440, 0x0, 0x0, 0x20000470, 0x200004a0], 0x0, &(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x1d5) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000002580)) 13:34:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigsuspend(&(0x7f0000000080), 0x8) 13:34:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00t\xa6\xb6$\xcb\xd6\x12W\xd1\xa0{L\x03J\xaa\x1c\xd4H\x1e\xf9:\x1a9#\xa1\x92\nyN\xda\xd2@\x9d\xda}j^\xc3\xa7\x10\xe7\xddzp\f B\xa1.\xbe\xe0\xee\xa8\x11\xd0\xd3\x93\xf9\x98\xa4Rg\xc2\xbbwj\x88\xfb=\x7f\x9d\xd5e&\xe3\xe8q\xbf\x19i\xf6\xa4\xb7c\xf6\x84\xff\x00\x9c\xbf\r\xc2\x7f\xb2\xefz\xe2\xb2K\xa5\x13\xee\xff\xbd\xeeD\xc8\xa4$\xdcz\x06\x90\xe1\xfa\xcdW7') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000140)=""/163, 0xa3) [ 363.297315] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 13:34:44 executing program 0: socket$nl_route(0x10, 0x3, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x5450, 0x0) [ 363.422865] QAT: Invalid ioctl 13:34:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) gettid() sendmsg$netlink(r0, &(0x7f0000007900)={0x0, 0x0, &(0x7f00000075c0)=[{&(0x7f0000001180)={0x10, 0x16, 0x700, 0x70bd2a, 0x25dfdbfe}, 0x10}, {&(0x7f0000002600)={0x10, 0x27, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}, {&(0x7f0000002b00)={0x10, 0x18, 0x808, 0x70bd25, 0x25dfdbfc}, 0x10}, {&(0x7f0000004c80)={0x64, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x14, 0x78, @ipv6=@local}, @nested={0x34, 0x6, [@typed={0x8, 0x92, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0xc, 0x52, @u64=0x1}, @typed={0x8, 0x7c, @fd}, @typed={0x14, 0xa, @ipv6=@loopback}]}, @nested={0xc, 0x0, [@typed={0x8, 0xf, @fd}]}]}, 0x64}], 0x4, 0x0, 0x0, 0x84}, 0x8000) fgetxattr(r0, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00', &(0x7f0000000040)=""/4096, 0x1000) fcntl$getown(0xffffffffffffffff, 0x9) 13:34:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) creat(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) write(r0, &(0x7f0000000540), 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:34:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), 0x14) 13:34:44 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@mcast1, @empty, @local, 0x9, 0x800, 0xfffffffffffffffe, 0x400, 0x7fffffff, 0x100, r2}) 13:34:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="00009b4c"], 0x1) [ 363.880559] QAT: Invalid ioctl 13:34:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f00000001c0)) 13:34:45 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x28}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="d7dbb23bab31f7d84ff4dfb4c7fc", 0x0, 0x31ef}, 0x28) 13:34:45 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x101, 0x0) sendmsg$alg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)="5e6d84553600a1e0ada823ca1bf950f94c4a633fc8c5e6487896759a4884ce3c2c2beaedadd86ff8e05953e073db202d0a80c2964021d108590b1a46240a212f6515cf38399c0838a0d94474f2e9acab0f8ecc1aaa409299200f1d743231a59ebbdb6ff69cff2f3b9182748fa675050639498ff32f82719b903efb68cb935879cac0bf460b74d180b40a682daf5b7552c13e61db41160a21a7617d92a353ae0666fd421b4d10dd226c", 0xa9}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x28, 0x117, 0x2, 0x13, "cf7540ab33fb328070d48642658df021e7aef1"}, @iv={0xc8, 0x117, 0x2, 0xad, "30c7c0f930b56c50b575073166881c0a5702adf3e02b6b6b87832e4551d68db82306437210b6fdf42a7b255c55a2d1414c135938569d632bdde4c986d638d5803740f0dd524be6d808a0ed40ea511f68059f2f702c21679bcd87e2d0d75a37632ed532e6ccfbb9bfcabbe86a6df1e556157fb5efedccff9204a8d6f95b4279b749cde00e6ce15603e35686ff2b1c713b3d5d2f04d218f5900cacbb86df142324b0a84727b12c3b6418af613caf"}], 0x108, 0x20000800}, 0x20000004) unshare(0x8000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x7, &(0x7f0000000300)={0x0, 0x22, 0x7, @tid=0xffffffffffffffff}, &(0x7f0000000900)=0x0) timer_getoverrun(r2) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) lsetxattr$trusted_overlay_origin(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='trusted.overlay.origin\x00', &(0x7f00000009c0)='y\x00', 0x2, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x4, 0xacc6696a51450614) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000480)={r4, &(0x7f00000003c0)=""/179}) sendto(r1, &(0x7f0000000000)="a546926192a489f13dfb02b3317896fe365ceba4e756fce3795ea2571650443e2dd16959695d7eea75d7a24a42242ea93268eab3517d8857f70ca6102717a2813d7e900e95501bb63ebd4b8476eb829e90fe7cc018755e3426610f79f0de64f92713631a20a8aff0c2c6c847d735d37e41b7c6f28068029d83ea8fdf2f48e5fd1dee6b34d4918b8f9829b27efb95c55dd4f245133bee09c7af491826e083f493658dc10ac2260405077518f08a874e506cfa812b9a465291e5ad", 0x45, 0x90, &(0x7f00000001c0)=@x25={0x9, @remote={[], 0x3}}, 0x3c) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) recvmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/23, 0x17}, {&(0x7f0000000240)=""/124, 0x7c}], 0x2}, 0x7}], 0x1, 0x0, &(0x7f00000008c0)={0x0, 0x1c9c380}) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000100)) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000a00)) fsetxattr$security_capability(r3, &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v3={0x3000000, [{0x6, 0x4}, {0x800, 0x100000001}], r6}, 0x18, 0x1) 13:34:45 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x10}], 0x10}}], 0x1, 0x1) 13:34:45 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x800000, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x100000001}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x100}}, {@max_read={'max_read', 0x3d, 0x1000}}, {@allow_other='allow_other'}], [{@fowner_eq={'fowner', 0x3d, r4}}]}}) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0x6) 13:34:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x803, 0x2000000007) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) 13:34:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 13:34:46 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x200, 0x107000) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="14fe8c42fbec08e07b64a30ba1a17b79dd16877b5f91b98fe1d6de26fab01dd71f07e6a8356d2eb12c907baf4dfab6c88bfb5adeb30d826da22c2feba2fc526011970d80", 0x44}, {&(0x7f00000000c0)="5d8a6fbd1c753410a960f475a24549c387e033b81cf6ed8eae35526fbd4fa20c81f3bf2d4c28daa8ef", 0x29}, {&(0x7f0000000280)="32c7a70e187bc620a06a6128e30980abd6477f4f24e1cb8a45a9aa92cbb33d95f1d78aa3ae0f7413b712fa4d28a743b2b7d5f39f0bcdc2a1f338ecd029d80b495e3a14c49a9b84a0c5881807ba7e35e17cae2714a618b607acb26fe7ab4630d83ebb3b0cbf5cc9f26ad86d653e898f29f4695149a35beffdc90d8f", 0x7b}, {&(0x7f0000000300)="6d1556564d5fad18fc2c532a518afecf357c31be430859cc1628a4e3e5d714a27bcfd3b334effe71155e6d8ab4e87e984245da6ee4b4cf3067d07b44d9e3787522971ae01a9340e69275043d77b29b6a09dad39e433eba5ad099bfe7d5a2f7600e7f963c2ef6043684099d8ec820ba749e1ebccfc38888416b", 0x79}, {&(0x7f0000000380)="4ababeaf6751d17e52236bfc429131400cfa46f11e159e", 0x17}, {&(0x7f00000003c0)="37b5bdaaf27a9c00b6c4ce6fef5cdd41a727b35c2cc3e0f37bf34c5d53796339726ec5e3360eea6fe5054c2c372f05154611fc84ded993916f27", 0x3a}], 0x6, &(0x7f0000000480)=[{0x68, 0x117, 0x9, "84a0f73d5b124ba533ac89e17a7b606b32470511bada2ebce2a17521dd74e84bfaa833f587729dd1f364c56ed55a79cffd6395409b272e0fb5ebe62e6b41b7d290197bc037e8f0f2c4af6fa829cb17dbae760a5d"}], 0x68}, 0xc001) 13:34:46 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 13:34:46 executing program 1: unshare(0x2010000) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x40000000003ffd, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040)) [ 365.064757] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.072225] bridge0: port 1(bridge_slave_0) entered disabled state 13:34:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x40, 0x7f}) 13:34:47 executing program 1: unshare(0x8000400) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) setreuid(r0, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000040)={0xa6, 0x0, 0x8}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, 0xfffffffffffffffe) 13:34:47 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x2) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) getgid() write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0025f004", 0x9) 13:34:47 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:47 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002300)=""/4096, 0x1000) 13:34:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x20) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000e, 0x80010, 0xffffffffffffffff, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x1f6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') [ 366.544080] syz-executor4 (12760): /proc/12753/oom_adj is deprecated, please use /proc/12753/oom_score_adj instead. 13:34:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)="df6c51c7bf5f8a4d8643869e4ccb891cdfcdf8426b0192fdaceef8985d539aa3ca359c284afe17", 0x27) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'ip6_vth0\x00', {0x2, 0x0, @multicast2}}) setsockopt$inet6_buf(r0, 0x29, 0x80000000000040, &(0x7f0000000080), 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 13:34:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) 13:34:47 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200, 0xebbba3e554444981) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000040)=')eth0keyring\x00', 0xffffffffffffffff}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000100)={{0x5, 0x3, 0x400, 0x100, 'syz0\x00', 0x100000000}, 0x3, 0x51, 0x2, r2, 0x8, 0x0, 'syz1\x00', &(0x7f00000000c0)=['lo\x00', '*eth0\x00', '\x00', 'vmnet0\x00', 'systemuser\x00', '@selfwlan1@system(0\x00', '\x00', '^\x00'], 0x33, [], [0x2, 0x3, 0x8, 0x2]}) 13:34:47 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0x8) 13:34:47 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x2) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13:34:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000140)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f00000000c0)={0x9, 0x0, 0x201d, 0x5, 0xfffffffffffffffa, {0xfffffffffffffff7, 0x9}, 0x1}) 13:34:48 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/113) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100), 0x4) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f00000000c0)=0x7) 13:34:48 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 13:34:48 executing program 2: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) socketpair$unix(0x1, 0x4000001000000001, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000500)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 13:34:48 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x19, 0x0, 0x7f}) 13:34:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x80800) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000140)={'veth0_to_bond\x00', @ifru_mtu=0xa7}) 13:34:48 executing program 0: r0 = gettid() perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000136000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) ppoll(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000000), 0x8) 13:34:48 executing program 5: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 13:34:48 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x1000, 0x2, 0x72, 0x9}, 0x8) 13:34:48 executing program 4: r0 = gettid() perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000136000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000000), 0x8) 13:34:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 13:34:48 executing program 2: openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clone(0x13102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:34:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x200, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000005c0)=""/4096) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x14e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$netlink(r2, 0x0, &(0x7f0000000100)) listen(r1, 0xfffffffffffffffc) fdatasync(r2) r3 = accept4$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x80800) lsetxattr$security_smack_transmute(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.SMACK64TRANSMUTE\x00', &(0x7f00000003c0)='TRUE', 0x4, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000040)=0xc, 0x4) r5 = accept$inet(0xffffffffffffff9c, &(0x7f00000004c0)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) creat(&(0x7f0000000440)='./file0\x00', 0x190) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000001c0)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, &(0x7f0000000200)) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) creat(&(0x7f0000000180)='./file0\x00', 0x2) write(r5, &(0x7f0000000000)="33ac71a9f1dd71f1e7e0a575e159956043f9defc02ed0d987507fe116f9d634aa89a", 0x22) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000240)={'security\x00'}, &(0x7f00000002c0)=0x54) 13:34:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x2) 13:34:49 executing program 1: unshare(0x8000400) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000040)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) 13:34:49 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x1, 0x802, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000012f80)={0x3, 0xfffffffffffffffc, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}}, 0x0) [ 368.000491] ptrace attach of "/root/syz-executor2"[12845] was attempted by "/root/syz-executor2"[12846] 13:34:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80047437, &(0x7f0000000180)) 13:34:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r0, r1, 0x0, 0x80000003) 13:34:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x1, &(0x7f0000000080)='\x00', 0xffffffffffffffff}, 0x30) write$cgroup_pid(r0, &(0x7f0000000180)=r1, 0x12) chdir(&(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200)=0x2, 0xfffffcf8) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000240)={{0x3e, @multicast2, 0x4e20, 0x2, 'sed\x00', 0x20, 0x37f, 0x47}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e23, 0x7}}, 0x44) 13:34:49 executing program 1: unshare(0x40101) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x4880) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) 13:34:49 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x3) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000100)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, 0x0, 0x0) 13:34:49 executing program 5: bpf$MAP_CREATE(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) 13:34:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000001c00)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') readv(r1, &(0x7f00000015c0)=[{&(0x7f0000001680)=""/148, 0x94}, {&(0x7f0000000280)=""/192, 0xc0}], 0x2) 13:34:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x4, 0x8001, 0x8, 0x800, r1}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000200)=0xd000) umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:49 executing program 1: unshare(0x20110) r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000000)=[{r0, 0x40}, {r0, 0x20}, {r0, 0x2}, {r0}, {r0, 0x8}, {r0}, {r0, 0x2000}, {r0, 0x8000}], 0x8, 0x1ff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000001c0)="3a3c740c58a8b0ccb9d686cd14051406", 0x10) 13:34:49 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x2) 13:34:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 13:34:50 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xc, 0x30, 0x1280, 0xffffffff}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0xffff, 0x401, 0x1ff, 0x8, 0x4}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r1, 0x5, 0x8e, 0x2, 0x504d, 0x1ff, 0x9c, 0x160e, {r2, @in6={{0xa, 0x4e22, 0xfffffffffffffff7, @mcast2, 0x2}}, 0x9, 0x7fffffff, 0x7fff, 0x5, 0x100}}, &(0x7f00000002c0)=0xb0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000180), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) close(r1) 13:34:50 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="2f6465762f6e756c6c623000f25fc6f27b4c8b2850111d9788c39514b1d1b7e1008884aacaa8a2099289501b6b92d05202e6dc1d9202518aa7b47f4226b0e48381a4a036751c8e65807b2cbf2721fe6a56a3cd5db83cb7ae13b873b5deff117275cfca2ba55dbadac835d7c141c00ba765d2da6df1d839387261b8d19ca11c19bb61791e765528a6405e66ecf4ca3d7a8d5e54a29ad26534f87c800b76f85b1413f1ba94fb29e6efb8c077d0936f75a13c5f54e7ef2ed9dcddb57f8e0cb15623bc2e13766bcc7c12ccc825e0b7a7d79a2bbafb2d82601c50943dc75a1d97"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ntfs\x00', 0x40000, &(0x7f0000000200)='ramfs\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@ax25={{}, [@bcast, @bcast, @default, @null, @null]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/173, 0xad}], 0x1, &(0x7f0000000480)=""/9, 0x9}, 0x40002000) umount2(&(0x7f0000b1d000)='.', 0x2) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000600)={0x800, 0x108, "35b230562b0093325cb5948c35f916b31a2a6dfae5fa852c86608ef2d3ac680c", 0x6, 0x100, 0x100, 0x1}) [ 369.249764] tls_set_device_offload_rx: netdev lo with no TLS offload 13:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x8, &(0x7f000095bffc), 0x4) 13:34:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000180), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) 13:34:50 executing program 1: unshare(0x8000400) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x4879, 0x201d}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) 13:34:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, 0x0, 0x0) 13:34:50 executing program 0: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'team0\x00\x00\xff\xff\xff\xc0\x00', 0xc201}) [ 369.616678] tls_set_device_offload_rx: netdev lo with no TLS offload [ 369.641387] tls_set_device_offload_rx: netdev lo with no TLS offload 13:34:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = eventfd(0x0) r2 = dup2(r0, r1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) 13:34:50 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) shutdown(r0, 0x1) 13:34:51 executing program 5: clone(0xa102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x16) getrandom(&(0x7f0000000000)=""/11, 0xffffffffffffffd8, 0x0) 13:34:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpeername(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000540)=0x80) r3 = dup2(r0, r2) write$cgroup_type(r3, &(0x7f0000000280)='threaded\x00', 0x9) 13:34:51 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x10400) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 13:34:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000), 0x4) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) 13:34:51 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffffffa, 0x2000) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:51 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x4a4001) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x45001010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xfffffffffffffffd, 0x100000001, 0x2, 0x6}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000180)={0x43, 0x9, 0x1, {0x6, 0x0, 0x2, 0x228e, 0x7, 0x100000000, 0xefb, 0x9a5, 0x18}}, 0x43) 13:34:51 executing program 4: semget(0x2, 0x0, 0x680) 13:34:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0xffffffffffffffcd, 0x0) getpeername(r0, &(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) prctl$PR_SET_SECUREBITS(0x1c, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) uname(0x0) r3 = dup2(r1, r2) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) epoll_pwait(r3, 0x0, 0x0, 0x9, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x0, 0x0, 0x0) [ 370.750131] Â: renamed from team0 13:34:51 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x18000, 0x20) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0x1a, 0x8}) unshare(0x8000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) 13:34:52 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xff, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0xf, 0x1, {{0x0, 0x4, 0x6}, 0x10001}}, 0x18) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) listen(r1, 0x34a) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair(0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000001c0), 0x4) 13:34:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000000580)={&(0x7f0000000000)=@abs={0x1}, 0x6e, 0x0}, 0x20000000) 13:34:53 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) seccomp(0x0, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x101, 0x400}, {0x4, 0x9, 0x3}, {0x4, 0xe67, 0x8, 0x3}, {0x80, 0x873a, 0xffffffffffffffff, 0x3ff}]}) r1 = socket$unix(0x1, 0x5, 0x0) getsockname$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) dup2(r1, r0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000100)="aa", 0x1) 13:34:53 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x80) ioctl$UI_DEV_DESTROY(r0, 0x5502) mkdir(&(0x7f0000000200)='./file0\x00', 0x14) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:53 executing program 1: unshare(0x8000400) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4, 0x9}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) 13:34:53 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) prctl$PR_GET_TIMERSLACK(0x1e) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0xfffffffffffffdc6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socket$unix(0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xa4) getitimer(0x0, 0x0) getsockopt(r0, 0x401, 0xffff, &(0x7f0000000180)=""/215, &(0x7f0000000280)=0xd7) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.apparmor\x00', &(0x7f0000000140)='tls\x00', 0x4, 0x1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) lsetxattr$security_smack_entry(&(0x7f00000002c0)='./file0\x00', &(0x7f0000001340)='security.SMACK64MMAP\x00', &(0x7f0000001380)='security.apparmor\x00', 0x12, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x54) fchmod(0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 13:34:53 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) ppoll(0x0, 0x283, 0x0, 0x0, 0xfffffd0c) 13:34:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 13:34:54 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x80000000, 0x5, 0x0, 0x100000000, 0x4}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @remote}}, 0xc3, 0x8, 0x3, 0x2, 0xa0}, 0x98) write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) 13:34:54 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x10000000004e20}, 0x1c) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x22) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) 13:34:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) 13:34:54 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6}, 0x90) 13:34:54 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x400000, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x81) r1 = getuid() r2 = getegid() mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x100088, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}], [{@subj_role={'subj_role', 0x3d, '-d+'}}, {@seclabel='seclabel'}, {@obj_type={'obj_type'}}, {@dont_appraise='dont_appraise'}]}}) umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:54 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0000) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f"], 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) 13:34:54 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x10000000004e20}, 0x1c) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x22) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 13:34:54 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x1110, 0xffffffffffffffff, 0x5) 13:34:54 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x200) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x400240, 0x8) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000400)={@local, @dev, @multicast2}, &(0x7f0000000440)=0xc) ioctl$VT_WAITACTIVE(r1, 0x5607) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x30040, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file1\x00', r1}, 0x10) chdir(&(0x7f0000000080)='./file0\x00') ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000240)={0x4107, 0xf0a2, 0x3, 0x1}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000280)) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000340)={0x0, 0x4}, 0x2) umount2(&(0x7f0000b1d000)='.', 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x5) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000200)) 13:34:54 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 13:34:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8637, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="832fa844bb1802"], 0x7) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x6c, 0x0) 13:34:54 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)={0x30, 0x4, 0x0, {0x1, 0x4, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x67e, 0x6, 0xff, 0xffffffffffffff2f, r2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6}, 0x90) 13:34:55 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0xc) 13:34:55 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000001f000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000480)="ac1513b874ddfdede00c612798b3", 0x0}, 0x28) 13:34:55 executing program 2: r0 = socket$kcm(0xa, 0x805, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="cf", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x7000000]}, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)='o', 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x40, 0x107, 0x4, "b2b4751e5f6c4357ab5ddfb89b5c772999f420e62b514f8b340e14492c4351f89a60691617ed6e3d326c69"}], 0x40}, 0x1) close(r0) 13:34:55 executing program 5: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) 13:34:55 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@rand_addr=0x2, @in6=@mcast1, 0x4e22, 0x401, 0x4e22, 0xfffffffffffffffd, 0x2, 0x80, 0x20, 0x0, 0x0, r1}, {0x6, 0x7fff, 0x4, 0x2, 0xffffffffffffffff, 0xaca, 0x80000000000, 0x81}, {0x5, 0x1, 0x401, 0x100}, 0x5, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d3}, 0x2, @in6=@mcast2, 0x3505, 0x4, 0x2, 0x1, 0x14f, 0x668f, 0x4b5f57fe}}, 0xe8) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:55 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000000)={'bond0\x00\x00\x00TG\xd0\x06\x00\x06\x00', @ifru_names='bond_slave_1\x00\x00\x03/'}) 13:34:55 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x8) 13:34:55 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7000000000001b4bfa3000000000000070300002cfeffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400300000000006506000001ed00ff7f140000000000006f460000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000"], 0x0}, 0x48) 13:34:55 executing program 2: socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:34:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = gettid() fstat(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001780)={0x0, 0x0, 0x0}, &(0x7f00000017c0)=0xc) r5 = fcntl$getown(r0, 0x9) r6 = getuid() stat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000018c0)={0x0, 0x0}, &(0x7f0000001900)=0xc) r10 = socket$tipc(0x1e, 0x7, 0x0) ioctl$FIGETBSZ(r10, 0x2, &(0x7f0000001a40)) stat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001bc0)) stat(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000001a80)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="5c8c43594d44ba1a7c018ba9f292f54a7c4e593da9edad5268aedd9cdf4dc79b000f04630671debb465971f44121221d7660216b55ec884d914e5d494281ed", 0x3f}, {&(0x7f0000001200)="ddb11d49d71c2ad20126f5c08941ca65cfc594e087617363676989baae48148b5a07e8cb8d1d74f6c4707bffaea4a6fe12dcec0de03903506901fb5fc26e5a072c5913a9197a5d6aed39ce8a49971014392a6a6e", 0x54}, {&(0x7f0000001280)="80802b6e049922771f36c64ea3b92054ad1e33fe078bc93a476e30218ce9e889fb6439ed8cb880001be397205e208024e6818a8f2a375ac2431f480506e415eaed6b4c2db3e7011829f5bc6b749b2bc37da841dd86d96a069190fe37f3c2235c265dab372e4ce9d5bb514ace622a9db440578d10022ce552c68f7d81b845d1c0a981f97922404c3c3a671464c5b34cf1bfa1dd9c5116817195e958733ed6268c5b4009fe579674baab3ed3f0e1be913b35b508", 0xb3}, {&(0x7f0000001340)="668940c5ae3f799ba64e978a1c54be360b9fd7505f4babaabe8d902fecee61", 0x1f}, {&(0x7f0000001380)="971a6eb21dfc4ed02a9f1d7a4e7791212a5ed5ace1616b811404e79c59f13602760a59c941838937e4a224547fbe80d05a922ce6f7f23933fec64cff90203abd176db3af6c534db3e5690b229f4f05175c181b06a4e633b2d6ed0d073b4bdbee8048fc2405a6a7af9541f9f8820c45fcfc22a084094f3302dfd12e2c0e3c837004647a3ea4d335", 0x87}, {&(0x7f0000001440)="8509a688bc1697a8fc6a8a843759e2a2f82c1361cca3d95bb3928b3c739aeb04c2e34b665a53613f8a424f0e9bea67c8506e0aa36eac9c4f1588ae9bdb1c248a06cf5b52d229a95ca5dd2dad1b3802150d8ca0852d3abe1c", 0x58}, {&(0x7f00000014c0)="96e9008efa4df6a1a97cf3cd9a", 0xd}, {&(0x7f0000001500)="9318a7da417dae4a08b25af914fa4cf8fe126c6b2c0f3ab5fdbbae8bfb21e091d942a7421ee13e9c6ceef24396b4c1352ff2b9de5e47698a81418ae02727a2a05dae5c380b97e4dec089e59f1f270d6d59669d9a685006aed835c6171f557f3d89c7437855e40bd043f6032a390429e7ddea841cd8e86ccaaaa6e31bda5ba53d8003129dcf1084411a1c5a36278d0eb8ae02b4830b4032c531b3a3a7cbb21ef7c528e3fd63568d946fc20385c8ca8953730e32bd1c8f85e49361e786707b11b20c60591b7694ed1aa5289e73a945912764f98956b3f503550bbb98a158ba8924d95e59c565678ca9c65964b9a89398a0500a4195ae4c3bd9895a", 0xfa}, {&(0x7f0000001600)="ebcd57ab4a2a571b0b", 0x9}], 0xa, &(0x7f0000001d00)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000002000000000000000010000000100525fed74a39d29c6b7e7b4c1249043c2eb76ec620d8401f2e2017acf0bd15300eeca105b7b1e7244780d4c0986f6dc99871e1ba0cf6e7087", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x40000}, 0x4000) getsockopt$inet_buf(r0, 0x0, 0x3f, &(0x7f0000000000)=""/154, &(0x7f00000000c0)=0x9a) statx(r1, &(0x7f0000001b00)='./file0\x00', 0x100, 0x1, &(0x7f0000001f00)) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000001ac0)={0x4007, 0x4, 0x4, 0x8}) 13:34:55 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = getuid() r1 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000740)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000840)=0xe8) r10 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="02000000010002000000000002000200", @ANYRES32=r0, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000000ee241525be3588df3eb04258c152a5702aba3fddc24a8934a643d6095bc1f385adc65c50146cc822056ed691322091a9a84c5cac7117ee4a9c02312fef9bc28ced3b05df820878d0055375530bd9d9af5034ba9ea4ffb3603eb12a95b04f89393d9d723a23c19d", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32=r9, @ANYBLOB="040004000000000008000600", @ANYRES32=r10, @ANYBLOB="10000400000000002000040000000000"], 0x6c, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') pipe(&(0x7f0000000880)={0xffffffffffffffff}) sendmmsg(r11, &(0x7f0000004f40)=[{{&(0x7f00000008c0)=@ethernet={0x6, @dev={[], 0xd}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000a80)="b7d79ca9e2a79e7236bf33d7148947b706735f2cc73e41c17b001654c19a8d391b593561c6423ca0e214f34120fce0fb14061d57f004c67d998a4fa3eaaa70b5387b8e40320fca9af9e96e3843dbefac8b50b7fa4aed1c537a1b59b476bd095ad7515d93829b5b7cf35fe935115b9bd2280dde6c2bfda17c2962b45949", 0x7d}, {&(0x7f0000000b00)="2131028188e8d2d4988d494f0f6e9349c5cdc779d8774c8c6a2666a45d0ba99c8a0420fc030357d71a57b8e6fbc0b83bc193e6327964ec336845d18890b2e426593ca00485f57cb49843059ae27d786513dcd6029c5b9b111bdbec9c9560f3280c679220c297a8a96100f71a50d35ab51e858d042f4d3b30861e8a6c622d921b05958a88a415c7c4eee275c8886bb2de4c9766a9ac43473e1b279422b77cd053cc7befad2b04cadc554e7749a2eee870d26af8618b153f7b09ae723f0fdfd22eb84e0e9238b94bdfcbf567b493cf34e99b0afe2a715909496a278fc728019753b89fd5efcdfef5342a545d0d6a09e39c4a", 0xf1}], 0x2, &(0x7f0000000c00)=[{0x20, 0x116, 0xf29, "7c1dec6026a8f7ce99bdc9f603c363"}, {0x1010, 0x11e, 0x101, "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"}, {0x50, 0x19b, 0xfffffffffffffff9, "3165063bc885f7a6b258360d0189b61c70aab4f92bd0a013ee34cc6d71d88297fc4f7da3bf65f84b1bfed84d6ada6074f2c975f3940ac364a7750e474e"}, {0x88, 0x19f, 0x3f, "e42841e935c8ae5ffe9cfe8df27df30a37327ed0a6566ef5ce85ee647896da475a0df132a0b2185408348553b4273e008a8b839d7407777e1e2d14acfbb899867871768f7638ea83c3517859a43f9cc204b0656a4ff46df37af66e6ea27a302e72988184b241133cce3c82aac967fb4b02e6381a1e35"}, {0x58, 0x11f, 0x0, "7bf0ff48e109ba070b7f6d866b4c7b52cd2b6d4fb8e2d175753e7e1aba670c15e362ad33a4d03555b5c9628a1e0d28c8f49e509ccbe2b3fa71aaea082dff953e5f"}, {0x48, 0x10a, 0x65, "6b22d0d8a6eaae1d81b3b54c909c6fe11cce0024457415bff4f9d8d6b0b30f9ec69981db14cc50f928d000aa17705afdc334a9"}, {0x30, 0x108, 0x1000, "468b6925eb76ffa084fc2885e143bf3369b46d714c4788006aaf48"}, {0x60, 0x84, 0xf1, "a6cf6dacd03c1e5626dd7fc58fa892b0313e8001cd9abb47e6211e1cbed8ea86b41609fe6ff428f8432961ea26e6947d7ca4ad7d5385faf7c25686775f72cdb6f06195d2797f8a30e619ee89"}], 0x1238}, 0x8}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001e40)="204329a5cebf04bdae216196e78300fd2b3354613193dc610314f09395f8b45efa7d7a38f6fddc19d16af2997851f32fb2666ff34bd62646a876edd34f04091d0b7c7029476956f61bb791fa5656c9aaf0ae19465622b5ce15622aa6980ef99d6670378da078a692e383baac5a807c64e6387281bd2a2c4ca93dd8478d0102ab083ddc7d7696c6492b4fc11214c87f8e2e77fee3cf3fb639c6ff64336df16d010778400fb10c73d36998", 0xaa}, {&(0x7f0000001f00)="b819226742d9a7d306f772c39cf41bddb5fb13c95160c56f11b351f58151c97f830d23a8322c0e62085287874985501597f1ece8332f76a832917d558a4c029211f6ea5f4251cf47b818128a21be25e7e986a0bd8abb729c8cfe874f9ba23f5b999c3843a6bb9b1c5e363ca732e4b20f40273f99ed3704c69ce3d0cff78fe701049b2e8f28ef12b97aaf1e2c0d392f1c221a5b2afd68562b66f55c9b3940042f0a276e3ad2d9dd38c34fb63797a79042376084b1fc2d87ccc16f3121e28e97f551f1ca12dbaeb5a75be0b3a7c6e568dfff50b1b99c02d50bdb", 0xd9}, {&(0x7f0000002000)="9ddc28e458e4b5a67ae7c785a4955b878a43e978ea", 0x15}, {&(0x7f0000002040)="f56315163b6186116ce91351eea5234d9715aff1cedb74f7af0c7846cdb1f2f817f5e8459aa0784ed86945150586fbbee1c2bbc233455c60af5f0c4684fb68b0e04d739acc2d3dfd86ea094d3d1cd230a767982a15a3ddc5dd8ab7b2da17c4d03da16432afb9505e31f12cd2b826a4f7e3683a382b35903881d922402833587f2ac7dab7da3621c25b49edb07e355037dd", 0x91}, {&(0x7f0000002100)="ed82784e4c9b3c6555899626517f758a19ec7cd41d6fcf0295a1a58c111657e0ab3f12dfad802da6afb548b16377a89d3c80fdd7982d8e1342348bb7055d5f1ba823724611752490aab0eb488d14a5b28474b21d9a605db9d32e0318298f4dac3221e0cb03712b2ded76ef3216a32f30dc9ab112188499404294d2dfab3bb938cc0a77e93c1282214a8c0b938425b5289760bef7b25b67f8c231982a6b99b21371e749b6261ff64717b18f399b5e3951897c71ac22c274d5c6132adfafc41db35006f33c61ba57fbbb3e234a70b718a59ee90d752864636fcbfd7e06aae4756a29227ded534ccee1cecbf0f658a9d7", 0xef}, {&(0x7f0000002200)="2a128a4b58a54d4bdc8aac3929e20962bd6b47ac5e85a16a1d846753bfcc806bd7029a4f2e4e5b3fe9d97820c62ea22b779e924356b989365f2f4783b3e4de328fad81ecdbc643e7f8ee6dff9407d4792830bb4b3ccf3b81ce78ee0a24fbfe79f26ad5f977292bd83f14379fcd1f62a2a0bf57ca7c80d42e5900807f", 0x7c}, {&(0x7f0000002280)="8fbd190b08a036555cb1c10cf4dcf28092d248baa9c7d1a0c646ce0d33087ba7fe2b5978d408d313159ee7423acc11094a0885dd1b3b674974eb342d41a58e4ac6fce7924f034f2bcd57092162e4dee7e403fcef0b3b5eb7f7a51f43c5da5815d7185f26750c46a0de8cbb5f20a8e78012e1bc82a0aa3021bdf696fc922a0f0ba27156569861d467ca8ad1b9136c0a9147ddda719691dda1b5fcbdd81fd3f60f47", 0xa1}, {&(0x7f0000002340)="51fa9ca1749bc4eb007dd56f5e30b58d510109662010267adc5376e8f38aa88fbf150fdf2e2d429781bcdf196f6a1186a42c03fa9b6622b547b66f3df53b8479a9fbba048cb9ab9088fa127d77c73e06125ecdb2c1", 0x55}, {&(0x7f00000023c0)="ad2ae70cde77be2e27cc122179ba6a17d86065f3b36e6a9a38ae4feb9d0e1539b59118737e6a6b7648bd09052c7d4b2b6c4eb09e19443dcf9d64b284ff5d2bfbe7ed5085bb68a2e53ad40e964c8c15c37bedd7af2b91ff59be7cf1c51aff6ead5093c17898f71c81894b7df389d7515bfcfda7638cc15471a99757d2ab7210e015493f473f099418ea996d62b9e8622fafa59b", 0x93}, {&(0x7f0000002480)="98764ddf7985f7032530f264f58603f4ff9ce56b58f0cb94ab81f5d223fc0284c1ffad4cb5dbc5be0b7b04a51bbf7dd45819f0c1cd07e527ba0aef477c9966e1ddf55ea0e4dbcf2585ec6ecda75c4481f55cdf4a794ed726", 0x58}], 0xa, &(0x7f00000025c0)=[{0x40, 0x104, 0x8, "9d25211020fe4f547b7d5579628d3461ba0c9c9a77b15adccd12837d0a0185e0554880a802eecbbc3e988260f057"}, {0xa8, 0x115, 0xfffffffffffffff9, "9cae25b6b218f88ad4a56c564f684d2990841a3647c68f8bc31395cbc9074ff3267bc06d62bba93def4d0d957e2f8f666d459d07faf5d14e77dc0c63894313544be1b1c5485aec433957e4846377a4a68ee53a287a7daa6c7193b44bad26538a4fc5e7af5352e2e24eee16a3d43df062f23cebe77a9c0a46dd00258715d04bd98affe40bd744224f96ebd7715c4ee7fb1462"}, {0xb0, 0x10b, 0x19d4a759, "3a57f8c421e28bfd7b244d34fe521e0bbc3775573208ae65a1de9858795fef391ef28ceebdec2e4b95fe322fd63908303fb6d42a74d011c0e6fc207c25c4d9ad0a07b38f3ec7db1dc3155404d0c4c09d2c0cc91795c08476c34083aaaad5ad0393e7958378fa8d9d0741c3cb3cf95bcd2028ceb16d1d85437f35f45062e5c5f1cf8a2d941479518a54a642f6b0132d6ae4aae83974dc22f85965e5f5e42342d5"}], 0x198}, 0x3}, {{&(0x7f0000002780)=@can={0x1d, r8}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002800)="57fa83516018c1858251d31415beebcbb5d78c2c01a9ca9d8e9c38feac0ef3f2aa228461e82f6e64b29191aced1bf4f295aa646b6224464cae751bd649e4d0a7806d575537ac26e747d46e04b173bd68d454cd63c7980678613474633266383452429232849c745fabd3f3d0f4a777a3328455d0b8ffb28ad1d0fd4eff62e339bbd8f846adb7c3f717f40453d23c8cf23f6321df4f95d0cc6200c697e441ae0523f8755c45ad02d8cd049c81692aa17b226a69fc708f", 0xb6}, {&(0x7f00000028c0)="ae5152071a2ef8f0c7e0fdc7d2b3b06321ee8c0df5bb515000fd4f933e96647e8449cbdf3b3f535dbe8e4f2015eb0206001ec3c397aa75e630c98fbd5dcbfa4830a2337ca6a3c62f54d6a781c5fad9a0e37d5b345340e46c0a127bdc34bd2edbd2b9213ea6420502fc9d1cb8c5bc606958a487f2d28ab45f0cdd2d9fd77c7bf930c120135b6092f98f9f35bad90052af37b92f2a94c5826dc8c8439870030b6cab4c12ab3f59f7914ed178d0382bbbc3", 0xb0}, {&(0x7f0000002980)="ee822b1fe4a5947514d38a8a038011e433e7e3628bac215f179600d712e7a149288a61c744921c1b9544a29b687442eb4ee69f38294b570d74b616eef786ebecc6847b05fee81958e7422926250203eea074e7d9f07a9d72aad53187950827b04241382184de84cc2b1368b2e292f728943e3571267b75cd6054249284faaa0da58c454607ecfc562a3ed901560bd1e38460c4b73efec5891333210b7ef3db77e1803a8b5bb2cdd1341ecc3c9d6c1f77b6027469b31e772f011fb4f2232c349fe62f75cc339710", 0xc7}, {&(0x7f0000002a80)="1a63a35f08b8b55db7349c9981b9509731e261ef14e462e9333f68b0d980a417651613a4da70c1e94b1d7cf01a295b5af6865c3fbf62d0960b0ece1e7bd3219ad6b957", 0x43}, {&(0x7f0000002b00)="d6e274d54168", 0x6}], 0x5, &(0x7f0000002bc0)=[{0x90, 0x10c, 0x400, "0cef1883845ee3ae4d2dbdea2df831e2359be754c7bc2bea70d679f35f0b4f738cf7ae1fa57a2f77226ce91e53feb9ce48901a9ef45ba2d4fa19d3f8961718195e464b56725d60035892562713257af3f97c243283ef0a7fa6e6e5ca65213174d5475bc463302087924b928e4e5392693e7c4842032c16a605"}, {0xd0, 0x116, 0x10001, "30d1bacf45e29210782a523caf94a4e8ce305d8bf82d6c7254c469b06d0b6e978432776cf714da2582d28bc1e6312d59452163c222cc4f60d29e6566293e171c9179120322918b06af63943f575a459ff006f991ff0ec402cdb7278e6cf65d1988d1581561fd08139c0e0a6c3a3398defb3f11fc83ffd96096d4e21e96a75321fe316dddb4415a60b9d309ac25d25c85b092e6065de87ff37b9eaafedf80c5cac79795bce92433b802e1c15e6f7e57d035f2867d34d8a07e1d9e74dc"}, {0x110, 0x113, 0x6, "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"}, {0xc8, 0x0, 0x8fd1, "a9bc0139820bfd2db9f38794de022ac0cf2181a0a7e30977e357235b6e6a5f77a110fb496ddb32400177e6516e4cfa4aaaf14285f69d8b56cd98a1216cf6c98b26014d557c007845c8105e13ac158d026c4e9c58310a93ad9ebe2a7a2d088ccbb28c4197a92018ae9d16b9c29ba3e1fe801abc54bfb0c8f0338aaa0607ca1a3e85ad608eba70b4cd09fb39b8966109f9a20ae2e0b2cf0d148af0e347c5f6b575484338186a46752865fdd53142aa2c049a"}, {0xa0, 0x10f, 0x9, "8c4bb101bbd4a560c1e603982e2efa9997a2ef03d0fe166343134d1dd9f13562db3d7269dac8955637cf3c219f823785fbba8454648da939385228cd574cd13d3970ca6f146d9c8971935d6c50ea367d9d22acccafda29dfedc3655ee78cfd33bab15faf71620788fd9063fcf28201213aef2f293f39a5b832920fea43e23945c1eda4cb809d78c0bacf3e09746b0c7e"}, {0xf0, 0x118, 0x80000000, "f2bf6dd6deb80e020036de389534b0bc089b5d444012e77eb25624812a6aded11c07f8d6e6176b1f5b1e99273b8c17c3934ac4dc02da374f4691c156686fe720aacdd65cf9d33c6d543e68e4c4613af3d74588f8b94fa19ec210f9068eccf7b2160ce03eb4af100abf2da371a5919243afda3910f3a89dbab75c5701da05681318b03ecb2589d415282ae06b03de472513aee407967367b78444673bae5eede0758d2057d74368d096610f8b37ed807fa6ad26f2ebc1e2e67eb0b20cb63ea9f0ee0283589a55846131d00ffaaca104eef4ff0910e060849b214b3699c7001d62"}], 0x4c8}, 0x9}, {{&(0x7f00000030c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000003180)=[{&(0x7f0000003140)="e175775106d2550e8b0c44c589545dd27188d7d1", 0x14}], 0x1}, 0x80}, {{&(0x7f00000031c0)=@ll={0x11, 0xff, r3, 0x1, 0x3, 0x6, @local}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003240)="443311b5c94d611f1ed8186e902bece549f9a3c37547df17d369e72de8ba2ce9080f603ed9a2dac015cff5e89196700225c2db6c504f5290afaee4a5502cc5a2da58910f8bd9eaf73055", 0x4a}, {&(0x7f00000032c0)="39843f17bec3db4065bce6bb4aba361c13eaf7628792cdb8330dc11dd3ec5baf03912ccd8d29dcffc87d80a6f5d315457363529a816f6c6bdbe52781d97ced2ff818b77e3773e3a2525613cd9d41421e1dfd1def3d45873130e6723dbfef21c8e5356beb1ed2ed75eae18cd0963d3f02b0456f0d81cd", 0x76}, {&(0x7f0000003340)="239c484d00b9a49a83521be641c01b3ff198fca0a232da3e944f0fab849efcea2e52f29dcab09726e37bbb674092403429417d71dd3a1a2361e0f3a2da9b9d59690aa081158762b4cd330b31d7dc3566c621d9ed1722e2fb386a0ce560ec34419e396a5549daed56910aa217116075b7db70f4c58bfd84", 0x77}], 0x3}, 0x3b}, {{&(0x7f0000003400)=@hci={0x1f, r3, 0x1}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003480)="ed2e240025844819edcd3a16871a4f0d096c02bb2556a36a6403f270e3ca9ef4e60b2117d22258c7c4a137fc4b7c6e2bebedf8ce0c4c9ea8ea2125b11801ab8c2f9a0e4d8ab9131c2cc769080c601bf22a40fa54301936b05af25de922a6c3536eb2129be95184e503d0adeccbdf53d55732dd268febbd", 0x77}, {&(0x7f0000003500)="23081cb37552642b3f025b8ac8cda767cb8d6f14fdcdc071ce4ca8d6a59091345e962fa5930cb66e0be5daf4f68bbeafa137c3db400262de77cdf1429ad30b4704352829686dc415006963e28cce6339779542aa5d38a93243f1d3659f776b7fb56dc042de3171f1a746789dbb05e3c0345746eb85e7e3822d37bbe932ed2b5d43a88d5c866b615214e3bf8397ac52959b9347dfcafb413b8f431ffe9cb6a919b9206080be1283514c198e8e3ed0531f30db79f32adccd89e6e12da11740585a123a220e57db7b3a3f897eba", 0xcc}, {&(0x7f0000003600)="17e6c88b7193bb170885067ee0139793664ca820cb23f6328ffce0107ad36dcd6edd544baa38910ba1bfd3b9bd3de0950762d9b9580830d51faf5dcc85bfd3bd263075a29e23e2be401067833406b6fc9f80830ba687e17013c7e11a4518e7afaf317b856dea1a3ee6547d229ae31853a4e40d22e1ae2e784dbf039e887fd9d6bb8c7442aaf7339c3c399db1b1e24673febcc9b129ec1e54e923dbed7408d151a914057c6cc67c2d5c20f93915686b9d09a4af13ad2c182817ab6fb42cc76c084fbf249b30362209babb1e8340981f0e0662cf9e79b6a731a801b01d0c15bf99a551242c45e1aa46c5f08584e4d818bda9b03a7e91048b51", 0xf8}], 0x3, &(0x7f0000003740)=[{0x60, 0x113, 0x57, "e69ef00bbc840c3a32f142199281d1e881e93b09aa8bc6f90165cd7cd3c370d92d63354b2136b3e53871bfdfc11fea9e1f9d2cb891f611840182cd03ad552884f31dcdeebca96a2da9f4e2d749774e"}, {0x1010, 0x107, 0x400, "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"}, {0x20, 0x115, 0x2000, "1888963e96e0477a5a9c3dba56b66b6e"}, {0x100, 0x1ff, 0x4, "45d8203f876e381af6354dd45ed9641068037bcf15660fc3f2d79c52255e9bbc470058583589a286571caa3b503d452cbbdeb55894d0144194900aa31cda68b0f98578556c9b16c1b2b14b6ab595df68f7937480efd803cc59042bd8eaddb7f2ceac5d738c6ddbada51844943a278f2a084cf449e27ee5856a75e3e5d5b74e3dc7e66bfb9f461e1a4f0e6a2f132c30529301137251fc17cbbb6d3b395bb510fb37265dc486d3545c53e8ff31d58e68dd42cf554c2184ef8615a2c0537a2e916fa048e54987e4b0521c5523b8b93c5eb3e1109afa1a60ae503f68995fcdf58fc07ffc6163ffc7d7fc63"}, {0x48, 0x0, 0x6, "598a2f4b5a722c0cc88f30a5cfd7fcb60f50ab62e545c3e3f4da4bdfaa4e2794de6db383ddbba32c413365d999f8edab1763eea5"}, {0x110, 0x103, 0x8, "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"}, {0x50, 0x19d, 0x8e5, "277787d98f9ee30bab7a07729a2d410266780f09a12dccae69494958b84331b21d3b71488e1f0b187d012e4e09fcbbd4505a652fabf4497672738f0312e6da"}, {0x90, 0x111, 0x8, "f261730ba6735a685d391312a8d7834814948cc920a0ac352e7762247151c07bbb1d81810756a00250ef8221ae31893768e8b4239852ca89e3e687a617799a5fad9a9856bcf23606f5747d0922a8ac3828a7fadf822880ec5e0baf0b09abfe6d64d5705ea598f2e8156feb028f487074e1087a78b4655b4c79e0b0"}, {0x100, 0x1ff, 0xffff, "91b4bfc9dd99fba6f57a0a589a3f99fbf84ad6ba7f22b87bd84d63ff0a9f85a1777645d47f74b55a73d3b721eb3c6b90d46b7191abf56e387dcdcce0d671345cd11109daf95538b74297a240fc18ff1c875fb5041212714d3e23a398ed80d9b219defc12fcc7bca94361b3e295b3c1fb71c81e5118116497a56ba626fd39cda61444e68af9c1df855cc9ec0b0314005686e7ab7ae90d8adc559ff856a283f1b53cde4a60ab3c323a25dd7445695f400098de2935a24b243a24f026c63f5b36561b22e6759e76c1c0827cfcdef4469a1786380914f8dbb29ca9175eea9231dea2e2e7673f1ad31bb1394ffd5e0714"}, {0x98, 0x0, 0x1, "813e27eadb7592ebce47b11b7b31cc829eed190ce1aad4411d881cf2e20ba0debdcb1eadf512a032a90bbd356869de1c5dd80ac2a95df1a1833b7cefc389871b847a36782144115887b93c9b2ed654e11c7c6b802f8ff5ad9cfa15ff1cc1fd8b5e476da07239af2c016c5d2e85a038c606f700cf8f3b7e5d55de8daf2087eea130936fbd2ece"}], 0x1560}}, {{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000004cc0)="7fa9327a586624b05480a4e3ca95a53ce7f7f6f62e0e698d0f5f281477285357d3340de32a08bfbf62fecbfd5678283e60882ed92f19b9baa52f44d273ac14beb43d36d60095a21e723ae2eb88eaeef1b322f688a3514faef850994bb2ec7b23c63036e07f8a3e670d19440cd891da4fd6cfbad105b5a816c451ff7ec881", 0x7e}], 0x1, &(0x7f0000004d80)=[{0x108, 0x10f, 0x1f, "cc2b3039856fc8d4e1db37920526158ab7d90664c5fe301d928c91b5bac83f14684b80334869674150dab6f3267e7f0bfafcfd8cf5ae2c87a05ed168697921486fe4ccfc96e69c6f81e33e51b9dfdcb6bda381d851c63bb1d2aa244c4218aea858b39e545affda2fc120d4cc23622f953d4915044a90a96a3abafa34dfcc490ccbfffc4c761251c99a818165897fdd1fcd5c7f7e9a37f3470e86156f152c27899aa095f7d8a5d0abe271d841faddfa1d34d281c23b116fe3dab52c6e4d95eb8510ab641fe45cd339624933b6216ce54ac9734d7c0f028cb852a535e0fb1434c076587866298c82037cf4a3ec64a4b815c31474b344"}, {0x28, 0x1, 0x1ff, "a5f61fde90ba8ade649637f19b44f6a9b68cae"}, {0x80, 0x0, 0x2, "9b191ef03c54821dc3b09062fc356e791cfae2132f1a84d031a7717bb5b157130d76b143927b3b2476d024bf726ea58384e5aaedca0ed2e608789171b09f6c5b439bea7c947a6e9f8646d8dbe37bb5e281ab828cc5b68ca916045dccd0445b51bce7ecb6b0c1c34b7c6bd5bbc2c273"}], 0x1b0}, 0x1}], 0x7, 0x4000800) umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=@ethtool_dump={0x0, 0x0, 0x0, 0x7, "c369bbada06c34"}}) [ 374.732758] bond0: Releasing backup interface bond_slave_1 13:34:56 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7f, 0x60c40) write$apparmor_current(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7065724d70726f66696c652072616d667300670c64f1b2038f55979a3cc2f8eab6c9d89aeb028a86b06b4412f8000000000000f4740aebb6da143d4e536feabb1de154249ca38d7419eee135d25a3355b5914f2dfdd6d100dd232ee49b6aafa435d9b6b4bd6848fbba4d069a140384b8fe433bcfc9090000000200006205e93fa2365d19927a035692d6f80000040000000000000000"], 0x12) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000000c0)) 13:34:56 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:56 executing program 3: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace(0x4208, r0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, r3) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:56 executing program 1: unshare(0x8000402) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup3(r0, r0, 0x80000) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:56 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x80800) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x80, 0xb, 0x4, 0x1, {}, {0x5, 0xa, 0x8, 0x2, 0x9, 0x873, "308df385"}, 0x4, 0x4, @fd=0xffffffffffffffff, 0x4}) fcntl$dupfd(r0, 0x406, r1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) [ 375.663002] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 375.712508] bond0: Releasing backup interface bond_slave_1 [ 375.898040] bond0: Enslaving bond_slave_1 as an active interface with an up link 13:34:57 executing program 4: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x11) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) 13:34:57 executing program 1: unshare(0x8000400) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x22000, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x410000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000340)={0xc0000000, 0x100, "aad4b08a685d4d5490a818946b2ba8f459bf75e75b8ef5bad4d138863ab74ea6", 0x0, 0x8, 0xffffffffffffff73, 0x200, 0x1, 0x5305, 0x9, 0xc85, [0x8001, 0x400, 0x6, 0x3]}) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="00b916000000", @ANYRES16=r4, @ANYBLOB="040628bd7000fedbdf250e0000007c0005002c0002000800010001000000080001001b000000080001001900000008000300973700000800040009000000080001006962000008000100696200003c00020008000300010000000800010010000000080003000400000008000200ddffffff080002000900000008000300010000000800020007000000100007000c000300247200000000000010000200080002000600000004000400"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000100)) 13:34:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 13:34:57 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x80, 0x0}, 0x8015) setxattr$security_smack_entry(&(0x7f00000038c0)='./file0\x00', &(0x7f0000003900)='security.SMACK64IPIN\x00', &(0x7f0000003940)='\x00', 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 13:34:57 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) getegid() write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), 0x0, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000001c0)=0x200) 13:34:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a910b55b062950b86bc01abc8", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)="95d4fdd5d50e7f70fac0249473980fd3b9a78b096fe29c8f11", 0x19}], 0x1, 0x0, 0x0, 0x20000040}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x34910}], 0x1) 13:34:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x200000, 0x0) write$P9_RVERSION(r0, &(0x7f0000000240)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400180, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000000c0)={0x60, &(0x7f0000000140)="a1d6ed4d6b8ed5ee055d161a7c85fafc5ffe9b44f8817e8563eed2c4891e6865e4bf17afc15bde221f559fec8cdfdac6c39711cbcf60bef078eccc8b3b8c35a3be027adde10ed909db9f990cf6f36d68e6cb2ec05bb5d76164f720e61c57e497"}) epoll_create1(0x80000) 13:34:57 executing program 1: unshare(0x8000400) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "113ad96e95836b2c0219cc169307e9c4b53a9c76"}, 0x15, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0xfffffffffffffffe) 13:34:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x17b) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 13:34:57 executing program 4: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x11) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) 13:34:57 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x2, 0x20, 0x9, 0x3}, &(0x7f0000000080)=0x18) io_setup(0x9, &(0x7f0000001700)=0x0) io_submit(r2, 0x1, &(0x7f00000017c0)=[&(0x7f0000001780)={0x0, 0x0, 0x0, 0x6, 0x81, r0, &(0x7f0000001740)="761dc53ad90625b9ccac539234babf778b502c0d09daf2af2ede506e024bc74f7f3e44", 0x23, 0x9, 0x0, 0x2, r0}]) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x9, 0x5, 0x7, r1}, 0x10) unshare(0x8000400) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000001980)={&(0x7f0000000100)=@l2={0x1f, 0x6, {0x3, 0x9, 0x7, 0x3ff, 0x5, 0x8}, 0x1, 0x3}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000180)="60292f6c80db3c4b5b765f3fa81d9f760feea89277ac86a67f03a5cda32503386d904601ced04c45a3348d129ec5f9558bcc1e9b30578bfaa3246c11c6a71ec4b2247dfb0495fc02ffa2770183a4e40bb17e1f73e71cba672725f2ba8cc42b401971a5484b194c83a2657e6611ae7f64685928790145f57ca64258e7ade078d8b30bbc9d61e2153dc31230c0a3f8869c956a90482eacfbf13537e5110f0e4a77060788", 0xa3}, {&(0x7f0000000240)="8b68fe28d7fc41b21907bbab82f5c17e1451f66ec5257799202552dce5caf35a271cf4f1358d3a8484c55950a399de61a3fba474fe389659d0c3955b7aad305d5193fb6d28dce80509176f4810e5d28ca7ce9503862684c20dd1bcfb7d47cb26a000a39c54596450dd4eeec035712e967462b96b426b54dc92eca09309bcf495cf16fcc8f85f7e90964dd9aaeec24620408835ec1fdd9f30f0afc49b0910bc75559864cad4c0dfabd00fb316fc19d78e7a56883ed0f69f1d529e", 0xba}, {&(0x7f0000000300)="944dd40a6e883759cbffd12feb305b2bbc4ca94b983effdc7b63d1697723114fe80005d52889e9b28bba427d123c3da9cdeca1a9a331041673f2e435511702c3cabdf34185dba97325b75849bd07042996d24fa13cd57403e4452749e05dc5bdbdce2f1397bd2270dff28d2d280f17921f6769e7368fd99a586b96db5048b6d1d466282891e3b5f5da786c5102e6362df5211822b3a0cc97d8ffd218c17b3df6155ce652bcf6b57111fffffd765d6a1dc4862fb5df03229f5d2e5203044c6373db6c93cd287263598193f5b643929c39fdb13a3dab96c01c923dee0b859d49951fdb1ffa6f", 0xe5}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="17fbb290bd8c223c90c9b1b9bb0d2ef72532d28be2fe3196b7e620de7593c57a57f4de2a03ffb16a6a1e89b7670a9a7a0fe1b767847b35940f417b7b75ec6664934c79cb86a0393dcefbbfc26924075a23b8612c05e109aa7d0604fa147003b9ec05185dc03a5b240c6368a1ada3c11c3d7f1d47af08263062e3ade95d37c1eaf3206af7b5b8413bc768bad07b667343b4cfc6f9c93847caab0ec3e40ed974c60ca4e0caada60457635a16d2c6a2bfa538ad77ade7ee9ea8df40b49094ab6d4af593f1a2e77b65125bc16560eb01dc3758b703893dd52026442aad3ed6bda9b82be9bf528aaebfefd2f6faf7", 0xec}, {&(0x7f0000001500)="ebfda7fbe8b0dc7120a23accb3839449f16f4d200c331476df0a6b1bd3f35abf86e35adb4b4197f1beff5a315771bffaf8bca395a483f0ec8146aa200e3f3f47cb28019832b2d045c92019d119f485c338f617a2bb8f8b9634a7da7245e8f9f69fc39b95e358ae4f5943a497ed1d2107c71beb4dc78ec9447edf8398a9c6b9cbd182c997cd01ee54fb4787d59a667b2f20f081f5db71bbb70407867bc54ed6de8d", 0xa1}], 0x10000000000001ff, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x328}, 0x4000) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001680)={r1, 0x8}, &(0x7f00000016c0)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000001640)) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7f) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x4400, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:57 executing program 0: pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000180)='ppp0)^\x00', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:34:57 executing program 4: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x11) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) 13:34:58 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x80, 0x0}, 0x8015) setxattr$security_smack_entry(&(0x7f00000038c0)='./file0\x00', &(0x7f0000003900)='security.SMACK64IPIN\x00', &(0x7f0000003940)='\x00', 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 13:34:58 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="707fa122b5c3be8649bbae691b4a18a554edd511aa3d88bfd7b2cb45c4f928a52b2d6209dec6530450f37e06a4d3ec9f2c1c4af68ebe8508ea65e1c7884fec17b52e95cabbe97adba17d2c8d1e3f5497d681a3be2a41e098f335e4418b7d04e9fa94e665945127a92b2da1f84dab73930798671b0c00cb8c3990", 0x7a}], 0x1, 0x0) 13:34:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x80003) 13:34:58 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0xc) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:58 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f00003efff0)) rt_sigsuspend(&(0x7f0000000100), 0x8) 13:34:58 executing program 4: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x11) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) 13:34:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)={0x0}, 0x10) perf_event_open(0x0, 0x0, 0x0, r1, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xcb) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) 13:34:58 executing program 1: unshare(0x80003fe) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:58 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400000, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) ptrace$poke(0xffffffffffffffff, r1, &(0x7f00000002c0), 0x1) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x5) 13:34:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") uselib(0x0) 13:34:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21}}}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:34:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)) mount(0x0, 0x0, &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x2) 13:34:59 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}) 13:34:59 executing program 1: unshare(0x8000400) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ftruncate(r0, 0x401) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x3, 0x4) ioctl$FICLONE(r0, 0x40049409, r0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) 13:34:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) io_setup(0x5c, &(0x7f0000000680)) 13:34:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) 13:34:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x20}) 13:34:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {0x0}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 13:34:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000800)={0x0}) r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x111, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000840)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0xb8, 0x0, &(0x7f0000000880)=[@reply={0x40406301, {0x3, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x30, 0x20, &(0x7f0000000780)=[@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}], &(0x7f00000007c0)=[0x38, 0x78, 0x0, 0x48]}}, @increfs_done={0x40106308, r2, 0x4}, @dead_binder_done, @dead_binder_done={0x40086310, 0x2}, @request_death={0x400c630e, 0x2, 0x3}, @free_buffer={0x40086303, r3}, @free_buffer={0x40086303, r4}, @dead_binder_done, @acquire_done={0x40106309, r5, 0x1}], 0x6b, 0x0, &(0x7f0000000940)="8afe7a80d6ffab82edac1d31c9d112b06268b87d376f39d949952536c2bd3d1cbbf2361d021971a86d77ac33a8e514fd29fdd70defdd97d266de1acf5c2b7b8fdccc3205266149511ca38207e66d2dbcb4f11271221e942b6ba8aa99f56c72d896558eb34ba1d56e653493"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r6 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0xffff, 0x4000) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f0000000680)={0x80000000, 0x3, "c5c62ed5bfc5e56ab09e97bbd506c296326e57f7ed43fb06995b009974063cde", 0xfff, 0x4, 0x7, 0x5, 0x2, 0x100000000, 0x1, 0xceec, [0x3, 0xff, 0x7fffffff, 0x9]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f0000000580)=[@ptr={0x70742a85, 0x0, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0xfffffffffffffe32, 0x0, 0x0}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r8, 0x40045566, 0x9) recvmsg(r7, &(0x7f0000000540)={&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/114, 0x72}], 0x2, &(0x7f0000000440)=""/210, 0xd2}, 0x100) chdir(&(0x7f0000000080)='./file0\x00') setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000600), 0x4) umount2(&(0x7f0000b1d000)='.', 0x2) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000200)={{0x2, 0x3, 0x3f, 0x1, 0xff}, 0x1000, 0x7f, 'id1\x00', 'timer1\x00', 0x0, 0xff, 0xffffffffffffffe1, 0x9, 0x100000000}) 13:34:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x80850000, 0xc00000000000000}) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xfffffffffffffe84, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={r1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x3, @remote, 0x8}}, 0x81, 0x1f, 0x800, 0x8, 0xc0}, &(0x7f0000000180)=0x98) 13:34:59 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8), 0x269, 0x0) 13:34:59 executing program 1: unshare(0x8000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0xab, @broadcast, 0x4e23, 0x0, 'lc\x00', 0x20, 0x8, 0x54}, 0x2c) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0xfffffffffffffffe) [ 378.723110] binder: 13341:13342 got reply transaction with no transaction stack [ 378.730880] binder: 13341:13342 transaction failed 29201/-71, size 48-32 line 2741 [ 378.775352] ================================================================== [ 378.782769] BUG: KMSAN: uninit-value in _decode_session4+0x3d0/0x1c90 [ 378.789403] CPU: 1 PID: 13351 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #3 [ 378.796601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.805967] Call Trace: [ 378.808589] dump_stack+0x173/0x1d0 [ 378.810988] binder: 13341:13342 ioctl c0306201 20000040 returned -14 [ 378.812280] kmsan_report+0x12e/0x2a0 [ 378.812317] __msan_warning+0x82/0xf0 [ 378.812367] _decode_session4+0x3d0/0x1c90 [ 378.830710] __xfrm_decode_session+0x152/0x210 [ 378.835315] ? xfrm4_get_saddr+0x3e0/0x3e0 [ 378.839579] vti_tunnel_xmit+0x190/0x1b00 [ 378.843750] ? validate_xmit_xfrm+0x83/0x13d0 [ 378.848263] ? validate_xmit_skb+0x10a2/0x1580 [ 378.852872] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 378.858273] ? vti_tunnel_init+0x2f0/0x2f0 [ 378.862535] dev_hard_start_xmit+0x607/0xc40 [ 378.867012] __dev_queue_xmit+0x2e42/0x3bc0 [ 378.871423] dev_queue_xmit+0x4b/0x60 [ 378.875255] ? __netdev_pick_tx+0x1270/0x1270 [ 378.879778] packet_sendmsg+0x8306/0x8f30 [ 378.884019] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 378.889511] ? rw_copy_check_uvector+0x149/0x650 [ 378.894331] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 378.899792] ___sys_sendmsg+0xdb9/0x11b0 [ 378.903883] ? do_futex+0x350/0x68a0 [ 378.907635] ? compat_packet_setsockopt+0x360/0x360 [ 378.912687] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 378.918103] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 378.923490] ? __fget_light+0x6e1/0x750 [ 378.927537] __sys_sendmmsg+0x570/0xa60 [ 378.931577] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 378.937064] ? prepare_exit_to_usermode+0x114/0x420 [ 378.942107] ? syscall_return_slowpath+0x50/0x650 [ 378.946991] __se_sys_sendmmsg+0xbd/0xe0 [ 378.951099] __x64_sys_sendmmsg+0x56/0x70 [ 378.955268] do_syscall_64+0xbc/0xf0 [ 378.959012] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 378.964229] RIP: 0033:0x457ec9 [ 378.967437] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 378.986366] RSP: 002b:00007fa0416edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 378.994091] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457ec9 [ 379.001379] RDX: 0000000000000269 RSI: 0000000020871fc8 RDI: 0000000000000003 [ 379.008663] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 379.015946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa0416ee6d4 13:34:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)={0xd00000000000000, 0x800000000000000, 0x80850000, 0xc00000000000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) mlock2(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mkdir(0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xfffffffffffffe84, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote, 0x8}}, 0x81, 0x1f, 0x800, 0x8, 0xc0}, 0x0) 13:35:00 executing program 5: link(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)={0xd00000000000000, 0x800000000000000, 0x80850000, 0xc00000000000000}) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) mlock2(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xfffffffffffffe84, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x3, @remote, 0x8}}, 0x81, 0x0, 0x800, 0x8, 0xc0}, 0x0) [ 379.023230] R13: 00000000004c4cfb R14: 00000000004d8608 R15: 00000000ffffffff [ 379.030533] [ 379.032168] Uninit was created at: [ 379.035728] kmsan_internal_poison_shadow+0x92/0x150 [ 379.040858] kmsan_kmalloc+0xa6/0x130 [ 379.044680] kmsan_slab_alloc+0xe/0x10 [ 379.048589] __kmalloc_node_track_caller+0xe18/0x1030 [ 379.053800] __alloc_skb+0x309/0xa20 [ 379.057535] alloc_skb_with_frags+0x1c7/0xac0 [ 379.062047] sock_alloc_send_pskb+0xafd/0x10e0 [ 379.066658] packet_sendmsg+0x661a/0x8f30 [ 379.070830] ___sys_sendmsg+0xdb9/0x11b0 [ 379.074912] __sys_sendmmsg+0x570/0xa60 [ 379.078910] __se_sys_sendmmsg+0xbd/0xe0 [ 379.082990] __x64_sys_sendmmsg+0x56/0x70 [ 379.087155] do_syscall_64+0xbc/0xf0 [ 379.090890] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 379.096086] ================================================================== [ 379.103469] Disabling lock debugging due to kernel taint [ 379.108930] Kernel panic - not syncing: panic_on_warn set ... [ 379.114841] CPU: 1 PID: 13351 Comm: syz-executor2 Tainted: G B 4.20.0-rc7+ #3 [ 379.123436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.132801] Call Trace: [ 379.135428] dump_stack+0x173/0x1d0 [ 379.139100] panic+0x3ce/0x961 [ 379.142363] kmsan_report+0x293/0x2a0 [ 379.146197] __msan_warning+0x82/0xf0 [ 379.151332] _decode_session4+0x3d0/0x1c90 [ 379.155623] __xfrm_decode_session+0x152/0x210 [ 379.160237] ? xfrm4_get_saddr+0x3e0/0x3e0 [ 379.164512] vti_tunnel_xmit+0x190/0x1b00 [ 379.168682] ? validate_xmit_xfrm+0x83/0x13d0 13:35:00 executing program 5: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x7, 0x13, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 379.173201] ? validate_xmit_skb+0x10a2/0x1580 [ 379.177820] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 379.183234] ? vti_tunnel_init+0x2f0/0x2f0 [ 379.187503] dev_hard_start_xmit+0x607/0xc40 [ 379.191973] __dev_queue_xmit+0x2e42/0x3bc0 [ 379.196367] dev_queue_xmit+0x4b/0x60 [ 379.200186] ? __netdev_pick_tx+0x1270/0x1270 [ 379.204706] packet_sendmsg+0x8306/0x8f30 [ 379.208906] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 379.214385] ? rw_copy_check_uvector+0x149/0x650 [ 379.219185] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 379.224663] ___sys_sendmsg+0xdb9/0x11b0 [ 379.228748] ? do_futex+0x350/0x68a0 [ 379.232493] ? compat_packet_setsockopt+0x360/0x360 [ 379.237544] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 379.240823] IPVS: set_ctl: invalid protocol: 171 255.255.255.255:20003 [ 379.242974] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 379.242995] ? __fget_light+0x6e1/0x750 [ 379.243064] __sys_sendmmsg+0x570/0xa60 [ 379.243141] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 379.268991] ? prepare_exit_to_usermode+0x114/0x420 [ 379.274020] ? syscall_return_slowpath+0x50/0x650 [ 379.278904] __se_sys_sendmmsg+0xbd/0xe0 [ 379.282995] __x64_sys_sendmmsg+0x56/0x70 [ 379.287160] do_syscall_64+0xbc/0xf0 [ 379.291236] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 379.296433] RIP: 0033:0x457ec9 [ 379.299635] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 379.318541] RSP: 002b:00007fa0416edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 379.326256] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457ec9 [ 379.333536] RDX: 0000000000000269 RSI: 0000000020871fc8 RDI: 0000000000000003 [ 379.340808] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 379.348091] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa0416ee6d4 [ 379.355369] R13: 00000000004c4cfb R14: 00000000004d8608 R15: 00000000ffffffff [ 379.363631] Kernel Offset: disabled [ 379.367263] Rebooting in 86400 seconds..