[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.206' (ECDSA) to the list of known hosts. 2020/06/19 22:27:57 fuzzer started 2020/06/19 22:27:57 dialing manager at 10.128.0.26:36321 2020/06/19 22:27:57 syscalls: 3091 2020/06/19 22:27:57 code coverage: enabled 2020/06/19 22:27:57 comparison tracing: enabled 2020/06/19 22:27:57 extra coverage: enabled 2020/06/19 22:27:57 setuid sandbox: enabled 2020/06/19 22:27:57 namespace sandbox: enabled 2020/06/19 22:27:57 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/19 22:27:57 fault injection: enabled 2020/06/19 22:27:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/19 22:27:57 net packet injection: enabled 2020/06/19 22:27:57 net device setup: enabled 2020/06/19 22:27:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/19 22:27:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/19 22:27:57 USB emulation: enabled 22:30:35 executing program 0: syzkaller login: [ 214.521943][ T6822] IPVS: ftp: loaded support on port[0] = 21 [ 214.671054][ T6822] chnl_net:caif_netlink_parms(): no params data found 22:30:35 executing program 1: [ 214.773033][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.791133][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.799750][ T6822] device bridge_slave_0 entered promiscuous mode [ 214.824694][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.841656][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.850526][ T6822] device bridge_slave_1 entered promiscuous mode [ 214.898530][ T6952] IPVS: ftp: loaded support on port[0] = 21 [ 214.924115][ T6822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.956424][ T6822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.018452][ T6822] team0: Port device team_slave_0 added [ 215.047667][ T6822] team0: Port device team_slave_1 added 22:30:35 executing program 2: [ 215.119301][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.129266][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.158033][ T6822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.188963][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.199355][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.229016][ T6822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.336141][ T6952] chnl_net:caif_netlink_parms(): no params data found [ 215.407453][ T6822] device hsr_slave_0 entered promiscuous mode 22:30:36 executing program 3: [ 215.464829][ T6822] device hsr_slave_1 entered promiscuous mode [ 215.558674][ T7085] IPVS: ftp: loaded support on port[0] = 21 22:30:36 executing program 4: [ 215.877212][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.893058][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.914405][ T6952] device bridge_slave_0 entered promiscuous mode [ 215.963392][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.970621][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.985472][ T6952] device bridge_slave_1 entered promiscuous mode [ 216.101359][ T7177] IPVS: ftp: loaded support on port[0] = 21 [ 216.159073][ T6952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.230015][ T6952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.255441][ T6822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.285765][ T7085] chnl_net:caif_netlink_parms(): no params data found [ 216.324147][ T6822] netdevsim netdevsim0 netdevsim1: renamed from eth1 22:30:37 executing program 5: [ 216.335742][ T7229] IPVS: ftp: loaded support on port[0] = 21 [ 216.425775][ T6822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.484606][ T6952] team0: Port device team_slave_0 added [ 216.506869][ T6822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.584243][ T6952] team0: Port device team_slave_1 added [ 216.609773][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.617214][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.626384][ T7296] IPVS: ftp: loaded support on port[0] = 21 [ 216.644843][ T6952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.664415][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.673976][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.700234][ T6952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.792996][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.800057][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.809488][ T7085] device bridge_slave_0 entered promiscuous mode [ 216.825802][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.835195][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.844588][ T7085] device bridge_slave_1 entered promiscuous mode [ 216.956245][ T6952] device hsr_slave_0 entered promiscuous mode [ 217.012082][ T6952] device hsr_slave_1 entered promiscuous mode [ 217.070789][ T6952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.078600][ T6952] Cannot create hsr debugfs directory [ 217.088043][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.103126][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.132190][ T7085] team0: Port device team_slave_0 added [ 217.179078][ T7085] team0: Port device team_slave_1 added [ 217.286886][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.298438][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.328134][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.387405][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.394536][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.424713][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.443418][ T7177] chnl_net:caif_netlink_parms(): no params data found [ 217.505071][ T7229] chnl_net:caif_netlink_parms(): no params data found [ 217.625009][ T7085] device hsr_slave_0 entered promiscuous mode [ 217.661125][ T7085] device hsr_slave_1 entered promiscuous mode [ 217.710659][ T7085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.718244][ T7085] Cannot create hsr debugfs directory [ 217.771326][ T7296] chnl_net:caif_netlink_parms(): no params data found [ 217.983835][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.992840][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.002796][ T7229] device bridge_slave_0 entered promiscuous mode [ 218.015601][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.023563][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.031937][ T7229] device bridge_slave_1 entered promiscuous mode [ 218.053953][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.063654][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.072590][ T7177] device bridge_slave_0 entered promiscuous mode [ 218.084260][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.092327][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.101588][ T7177] device bridge_slave_1 entered promiscuous mode [ 218.146718][ T6952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 218.243986][ T7177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.253231][ T6952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 218.315311][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.327368][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.335883][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.344626][ T7296] device bridge_slave_0 entered promiscuous mode [ 218.356349][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.363905][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.372836][ T7296] device bridge_slave_1 entered promiscuous mode [ 218.383050][ T7177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.398494][ T6952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 218.445077][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.478767][ T6952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.531887][ T6822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.560283][ T7177] team0: Port device team_slave_0 added [ 218.607296][ T7296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.630465][ T7296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.646339][ T7177] team0: Port device team_slave_1 added [ 218.685627][ T7229] team0: Port device team_slave_0 added [ 218.715067][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.724208][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.757690][ T7177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.771797][ T7229] team0: Port device team_slave_1 added [ 218.778043][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.787378][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.815656][ T7177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.835132][ T7296] team0: Port device team_slave_0 added [ 218.867657][ T7296] team0: Port device team_slave_1 added [ 218.877674][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.892111][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.924147][ T7085] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.985228][ T6822] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.014824][ T7085] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.064184][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.073444][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.102139][ T7229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.115744][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.124380][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.151452][ T7229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.168392][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.177449][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.205628][ T7296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.274050][ T7177] device hsr_slave_0 entered promiscuous mode [ 219.320717][ T7177] device hsr_slave_1 entered promiscuous mode [ 219.370516][ T7177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.378939][ T7177] Cannot create hsr debugfs directory [ 219.386009][ T7085] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.435095][ T7085] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.513008][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.520060][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.547823][ T7296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.577702][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.586690][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.596949][ T2590] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.604418][ T2590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.615479][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.664122][ T7229] device hsr_slave_0 entered promiscuous mode [ 219.710822][ T7229] device hsr_slave_1 entered promiscuous mode [ 219.753906][ T7229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.761573][ T7229] Cannot create hsr debugfs directory [ 219.785823][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.794520][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.804357][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.811492][ T2590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.884504][ T7296] device hsr_slave_0 entered promiscuous mode [ 219.938851][ T7296] device hsr_slave_1 entered promiscuous mode [ 219.990365][ T7296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.997924][ T7296] Cannot create hsr debugfs directory [ 220.050260][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.131103][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.166373][ T6952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.180348][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.189028][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.231952][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.239887][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.249573][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.258993][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.267322][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.305883][ T6952] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.338648][ T6822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.349661][ T6822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.394932][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.407369][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.416969][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.425811][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.435855][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.524272][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.533569][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.543670][ T3662] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.550918][ T3662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.558928][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.568184][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.577771][ T3662] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.584950][ T3662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.592583][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.602852][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.653066][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.683383][ T7229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.732751][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.742960][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.751652][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.759301][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.778579][ T6822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.789550][ T7085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.797122][ T7229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.842927][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.851311][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.859845][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.890665][ T7229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.923389][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.932830][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.941688][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.950395][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.976971][ T7085] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.990346][ T7229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.047445][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.061706][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.091763][ T6952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.106487][ T7177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.142705][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.155152][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.165258][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.177497][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.186387][ T2590] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.193538][ T2590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.202569][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.211896][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.220490][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.227553][ T2590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.236599][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.265782][ T7177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.303702][ T7177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.363370][ T7177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.422607][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.494775][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.505137][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.515268][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.525314][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.534214][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.543432][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.552683][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.561922][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.570735][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.582944][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.600361][ T7296] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.642965][ T7296] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.694692][ T7296] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.754361][ T6822] device veth0_vlan entered promiscuous mode [ 221.772599][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.784079][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.792818][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.804583][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.824127][ T6952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.831319][ T7296] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.883300][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.893116][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.905927][ T6822] device veth1_vlan entered promiscuous mode [ 221.936539][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.011225][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.019590][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.029085][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.039051][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.101682][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.109302][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.118952][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.128240][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.152413][ T7085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.169554][ T6952] device veth0_vlan entered promiscuous mode [ 222.188983][ T6822] device veth0_macvtap entered promiscuous mode [ 222.202001][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.210802][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.219052][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.228521][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.238201][ T2590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.276955][ T6822] device veth1_macvtap entered promiscuous mode [ 222.304457][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.311423][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.323241][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.350686][ T6952] device veth1_vlan entered promiscuous mode [ 222.396619][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.404106][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.416741][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.424838][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.437021][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.451490][ T7229] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.476537][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.484898][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.495314][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.505853][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.514643][ T2479] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.521777][ T2479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.550376][ T7085] device veth0_vlan entered promiscuous mode [ 222.564427][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.578506][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.587714][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.596995][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.605992][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.613148][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.622093][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.630889][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.656880][ T7085] device veth1_vlan entered promiscuous mode [ 222.677826][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.693673][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.702580][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.715414][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.724348][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.733631][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.781669][ T7177] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.792619][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.802825][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.812045][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.821483][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.830540][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.839147][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.848353][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.857083][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.867040][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.875702][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.884447][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.893352][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.901452][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.909146][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.926783][ T6952] device veth0_macvtap entered promiscuous mode [ 222.956150][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.973800][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.983892][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.994291][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.003802][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.013110][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.022187][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.031520][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.040444][ T3663] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.047539][ T3663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.057104][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.066536][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.091090][ T7085] device veth0_macvtap entered promiscuous mode [ 223.107445][ T7229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.121461][ T7085] device veth1_macvtap entered promiscuous mode [ 223.158693][ T6952] device veth1_macvtap entered promiscuous mode [ 223.167294][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.176802][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.187951][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.197120][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.206345][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.215817][ T2517] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.222982][ T2517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.231622][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.240986][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.249410][ T2517] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.256798][ T2517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.264678][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.276407][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.286102][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.295806][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.305368][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.314603][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.408155][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.416162][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.424840][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.434230][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.443376][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.450536][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.458672][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.547357][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.564778][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.576975][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.588543][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 223.599801][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.612422][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.630517][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.639560][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.648862][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.657901][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.667120][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.676407][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.784623][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.797228][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.813264][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 223.824181][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 22:30:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x40000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x8000000200036bd0, 0x800007b, 0x2, 0x0, 0x0, 0x10000001}, r0, 0xa, r2, 0x0) stat(&(0x7f00000005c0)='./file0\x00', 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 223.851626][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.869275][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.884613][ T7296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.902181][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.913416][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.927619][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.950471][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.970572][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.979275][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.001966][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.019917][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.035372][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.066850][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.084363][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 224.100005][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.113518][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.149264][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.163707][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.176175][ C1] hrtimer: interrupt took 30176 ns [ 224.186008][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 22:30:44 executing program 0: wait4(0x0, 0x0, 0x80000002, 0x0) tkill(0x0, 0x3b) set_mempolicy(0x2, &(0x7f0000000080)=0x9, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000010000000000000070000000107e38b49506de969e642ff5c04e00000020010ebd7555bcbc138bf598c28ee1b39abfcc18e1cbf3cbca95bb39527d6242d391af7f6667a9ffd812939f52d1f476f506a9d065a09afc6dbf63c42ffda46fb89a2cca4a78809c01fa6698f75a5f734eb"], 0x18}}], 0x1, 0x0) [ 224.197258][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.207418][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.219243][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.307111][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.318545][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.343834][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.354038][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.363611][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.373258][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.381705][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:30:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/201, 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) [ 224.419873][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.432282][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0 22:30:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x36}) [ 224.654705][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.671565][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.785080][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.797646][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:30:45 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x347, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x4040, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) creat(&(0x7f0000000040)='./bus\x00', 0x141) 22:30:45 executing program 0: pipe(&(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2000402) fallocate(r3, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4}) [ 224.853481][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.896409][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.929174][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0 22:30:45 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100626f6e6400000000100002800400088008001a"], 0x4c}}, 0x0) [ 224.946736][ T7229] device veth0_vlan entered promiscuous mode [ 224.984068][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.994549][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.065811][ T27] audit: type=1804 audit(1592605845.692:2): pid=8135 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir184931946/syzkaller.rKHWju/1/bus" dev="sda1" ino=15740 res=1 [ 225.102628][ T7229] device veth1_vlan entered promiscuous mode [ 225.143320][ T27] audit: type=1800 audit(1592605845.732:3): pid=8135 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15740 res=0 [ 225.148163][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 225.177629][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.188441][ T27] audit: type=1804 audit(1592605845.812:4): pid=8139 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir184931946/syzkaller.rKHWju/1/bus" dev="sda1" ino=15740 res=1 [ 225.191391][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.264434][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:30:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x40000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x8000000200036bd0, 0x800007b, 0x2, 0x0, 0x0, 0x10000001}, r0, 0xa, r2, 0x0) stat(&(0x7f00000005c0)='./file0\x00', 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 225.443139][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 225.456835][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.490392][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.520848][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.551657][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 22:30:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 225.614727][ T8153] NFS: Device name not specified [ 225.617045][ T7296] device veth0_vlan entered promiscuous mode [ 225.660806][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.668636][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.693917][ T8156] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 225.820994][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.850725][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.881495][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.897517][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.909047][ T7177] device veth0_vlan entered promiscuous mode [ 225.926892][ T7296] device veth1_vlan entered promiscuous mode [ 225.947851][ T7229] device veth0_macvtap entered promiscuous mode [ 225.968615][ T7177] device veth1_vlan entered promiscuous mode [ 225.993174][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.002760][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.011789][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.020602][ T2472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.049336][ T7229] device veth1_macvtap entered promiscuous mode [ 226.163630][ T7296] device veth0_macvtap entered promiscuous mode [ 226.197193][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.213900][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.227608][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.238581][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.248727][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.262755][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.277040][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.298552][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.308261][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.330344][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.352622][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.362652][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.379970][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.393589][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.402699][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.414971][ T7177] device veth0_macvtap entered promiscuous mode [ 226.433381][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.444373][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.454670][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.465234][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.475218][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.486080][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.498000][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.506152][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.515202][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.523593][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.532476][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.551349][ T7296] device veth1_macvtap entered promiscuous mode [ 226.577662][ T7177] device veth1_macvtap entered promiscuous mode [ 226.656957][ T0] NOHZ: local_softirq_pending 08 [ 226.676674][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.687205][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.697178][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.708041][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.718214][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.728908][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.741284][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.751792][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.765044][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.780897][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.790004][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.798016][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.807169][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.865138][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.878521][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.892016][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.903230][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.913785][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.925106][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.935562][ T7177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 226.946238][ T7177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.958746][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.967512][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.982556][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.993011][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.003594][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.013775][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.024481][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.035797][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.046499][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.057679][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.068204][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.080337][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.087819][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.096983][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.106777][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.116572][ T2517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.177131][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.207696][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.228074][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.239792][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.271659][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.286812][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.304970][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.326784][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.338082][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.357687][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.378713][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.406788][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.416331][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:30:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e619652b7fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='team_slave_1\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x103100, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) 22:30:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:48 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:48 executing program 2: socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000) 22:30:48 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x288, 0x330, 0x330, 0x330, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea0d946ff7d8779ed0997956343035eeae3bbfd8ebb39b3617ebaca42be11c170378884b1bccb9b58674dd721cecd8f13ede0c839959fedb032d227bdc5507474816fad31b6ecc4049259941d32ea48bdbb7b46c82f6e2fe1df3da33b53bdaed67c8f4c3bbea0a11537f60d97c85c797ac31cb600bc23db2a49cbe4dafe2d8f8", 0x19}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) accept$inet(r3, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 22:30:48 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x149042, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x0, 0x18}) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) 22:30:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) [ 227.857585][ T8186] kvm: emulating exchange as write [ 227.904569][ T8196] x_tables: duplicate underflow at hook 2 22:30:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:49 executing program 2: socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000) 22:30:49 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) [ 228.580601][ T8186] debugfs: Directory '8186-4' with parent 'kvm' already present! 22:30:49 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000580)="94", 0x1}], 0x1, &(0x7f00000017c0)=ANY=[], 0x10}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r2, &(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) 22:30:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:49 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:49 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x288, 0x330, 0x330, 0x330, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "ea0d946ff7d8779ed0997956343035eeae3bbfd8ebb39b3617ebaca42be11c170378884b1bccb9b58674dd721cecd8f13ede0c839959fedb032d227bdc5507474816fad31b6ecc4049259941d32ea48bdbb7b46c82f6e2fe1df3da33b53bdaed67c8f4c3bbea0a11537f60d97c85c797ac31cb600bc23db2a49cbe4dafe2d8f8", 0x19}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) accept$inet(r3, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 22:30:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) [ 229.088489][ T8245] x_tables: duplicate underflow at hook 2 [ 229.179488][ T27] audit: type=1800 audit(1592605849.802:5): pid=8209 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15777 res=0 22:30:49 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 22:30:49 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:49 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd3, &(0x7f0000000000), 0x3c) 22:30:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:30:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:50 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x80045500, &(0x7f0000000140)) 22:30:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:30:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85513, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}}) 22:30:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x43, 0x0, 0xffff}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:30:50 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x0, "007cca608f712ef4fe49b233bf8ec27b1b34f4693664193b5a3b9453747ac010"}) 22:30:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x800455d1, 0x0) 22:30:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) close(r0) pipe(&(0x7f0000000280)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sysinfo(&(0x7f00000007c0)=""/142) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400000013d39238a6238a2f0962fe38bfd736ba28b7928d55bd07e6b3df034873c739071f013b030261691200bf092f153d5ca4c4f3146be0ea1d1c51a795ae007abe6dd42d079310c841954fceb65b409cee0cb91a12d685b9db7aa8681dfbc2fb010cc9152d562d966c29e6bca88916946e6695ef", @ANYBLOB="080a727800007000fddbdf25110000000800090000000000080006ed00002000433f60a7de98c6a9afc4fadca1f2b4346142e00b9ee567d65d361b02cb48ec0dcfa80fdd1edb7b480212d4f9499c09d0eebcf20000"], 0x24}}, 0x240010c0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') socket$inet_udp(0x2, 0x2, 0x0) 22:30:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:50 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0xffffffffffffffff, r2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:30:50 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b044ad5526c6e898cbb38c310d32b6a3217fa0cb9e9cafe0569942f46cde7188b00", 0x37}, 0x78) 22:30:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)) 22:30:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x49, &(0x7f0000000000), 0x4) 22:30:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000001c80)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:30:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x49, &(0x7f0000000000), 0x4) 22:30:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) close(r0) pipe(&(0x7f0000000280)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sysinfo(&(0x7f00000007c0)=""/142) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400000013d39238a6238a2f0962fe38bfd736ba28b7928d55bd07e6b3df034873c739071f013b030261691200bf092f153d5ca4c4f3146be0ea1d1c51a795ae007abe6dd42d079310c841954fceb65b409cee0cb91a12d685b9db7aa8681dfbc2fb010cc9152d562d966c29e6bca88916946e6695ef", @ANYBLOB="080a727800007000fddbdf25110000000800090000000000080006ed00002000433f60a7de98c6a9afc4fadca1f2b4346142e00b9ee567d65d361b02cb48ec0dcfa80fdd1edb7b480212d4f9499c09d0eebcf20000"], 0x24}}, 0x240010c0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') socket$inet_udp(0x2, 0x2, 0x0) 22:30:53 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x7000060, 0x0, 0x258, 0xc403, 0x340, 0x210, 0x210, 0x340, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'veth0_macvtap\x00', {0x0, 0x1774, 0x0, 0x0, 0x0, 0x2, 0x401}}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 22:30:53 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) [ 232.967273][ T8345] xt_TCPMSS: Only works on TCP SYN packets 22:30:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x80045500, 0x0) 22:30:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x8000) 22:30:53 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, "1501000096200000"}}}}}, 0x0) 22:30:53 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x10, 0x0, &(0x7f0000000740)=[@request_death={0x40046307}], 0x0, 0x0, 0x0}) 22:30:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x3, 0xa, 0x4, 0x3, 0x0, 0x2, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @isdn, @generic={0x0, "a1d63abe32e619652b7fd2bdad77"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='team_slave_1\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:30:53 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x10001) 22:30:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x8000) [ 233.328746][ T8365] binder: 8363:8365 unknown command 0 [ 233.328760][ T8365] binder: 8363:8365 ioctl c0306201 20000500 returned -22 [ 233.339704][ T8369] binder: 8363:8369 unknown command 0 [ 233.355450][ T8369] binder: 8363:8369 ioctl c0306201 20000500 returned -22 22:30:54 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0xa2002, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f0000001280)="be", 0x1}], 0x1, 0x0) 22:30:54 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xcd, &(0x7f0000000000), 0x3c) 22:30:54 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) accept$alg(r0, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc4c85513, &(0x7f0000000140)) 22:30:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc1105511, &(0x7f0000000140)) 22:30:54 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}}}}}, 0x0) 22:30:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) accept$alg(r0, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)) 22:30:54 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:54 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001500)=[{&(0x7f0000000200)="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", 0xe01}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "5dbcc034a0654000", "3bdca16651a24705000059f1de0e021c", "8500", "248cc0ebf6e0a786"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 22:30:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000080)) 22:30:54 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="30dd96866c8619c7522155d10efb2cc5b0a761c91083a81d8483c1db9a56744d590452367251d70f3ce7bbb664fe975a105cadf789618f7a51abddc6ad6564ac6f08b316b1de15f1c2bb3f58722383a5a9c68233a39fba38b43f871fb52eabc279cf67bd8d", 0x65}], 0x1, 0x0) read$usbfs(r0, &(0x7f0000000280)=""/100, 0x64) 22:30:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) accept$alg(r0, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:55 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:55 executing program 2: syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r0 = syz_open_dev$vbi(0x0, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x2, {0x5, @pix_mp={0x0, 0x0, 0x36314d4e, 0x0, 0x0, [{0x0, 0x1}]}}}) 22:30:55 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}}}}}, 0x0) 22:30:55 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x0, @multicast2}], 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0), 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000fffffffffbffffffffffffff86dd64b80000000000005e08c187120287ff88f66785bb65cc5e271e62ce5b2278dd000000de48a82d6367b3"], 0x7a) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x18100, 0x0) 22:30:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:55 executing program 2: syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r0 = syz_open_dev$vbi(0x0, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x2, {0x5, @pix_mp={0x0, 0x0, 0x36314d4e, 0x0, 0x0, [{0x0, 0x1}]}}}) 22:30:55 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001500)=[{&(0x7f0000000200)="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", 0xe01}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "5dbcc034a0654000", "3bdca16651a24705000059f1de0e021c", "8500", "248cc0ebf6e0a786"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 22:30:55 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:55 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5001, 0x0) 22:30:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:55 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:55 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5001, 0x0) 22:30:55 executing program 4: syz_open_dev$swradio(&(0x7f0000001180)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) poll(&(0x7f0000000100)=[{r0, 0x3419}], 0x1, 0x0) 22:30:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc4c85512, &(0x7f0000000140)) 22:30:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:56 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5001, 0x0) 22:30:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:56 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') preadv(r0, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/192, 0xc0}], 0x1, 0x3cffa15e) 22:30:56 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc0505510, &(0x7f0000000140)) 22:30:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:56 executing program 0: ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:56 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc1105511, 0x0) 22:30:56 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:56 executing program 0: ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:56 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2, 0x0, 0x1, 0x0, @rand_addr, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}}}}}, 0x0) 22:30:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:57 executing program 0: ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:57 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 22:30:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:57 executing program 0: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:57 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) time(&(0x7f00000000c0)) 22:30:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:57 executing program 0: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:57 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 22:30:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:57 executing program 0: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:57 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) [ 236.987698][ T8580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 22:30:57 executing program 4: 22:30:57 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:57 executing program 0: syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:57 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:57 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000000)) 22:30:57 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:58 executing program 4: 22:30:58 executing program 0: syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:58 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000000)) 22:30:58 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:58 executing program 4: 22:30:58 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000000)) 22:30:58 executing program 0: syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr={0x38305543}}) 22:30:58 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:58 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:58 executing program 4: 22:30:58 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 22:30:58 executing program 3: r0 = syz_open_dev$media(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:58 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:58 executing program 4: 22:30:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:58 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 22:30:58 executing program 3: r0 = syz_open_dev$media(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x0, @empty}, @isdn={0x22, 0x0, 0x2}, @generic={0x0, "196530ef78a7297700"}, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='hsr0\x00', 0x0, 0x16}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:30:58 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:58 executing program 3: r0 = syz_open_dev$media(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:58 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 22:30:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:58 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:58 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:58 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x0, @sdr={0x38305543}}) 22:30:59 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:59 executing program 4: 22:30:59 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x0, @sdr={0x38305543}}) 22:30:59 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:59 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:59 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:30:59 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:59 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x0, @sdr={0x38305543}}) 22:30:59 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:30:59 executing program 4: 22:30:59 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:30:59 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:30:59 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr}) 22:30:59 executing program 4: 22:31:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:00 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:00 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:31:00 executing program 4: 22:31:00 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:00 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr}) 22:31:00 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:00 executing program 4: 22:31:00 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:00 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:00 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xb, @sdr}) 22:31:00 executing program 4: 22:31:00 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x10, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:31:00 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:00 executing program 0: 22:31:00 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:00 executing program 4: 22:31:01 executing program 0: 22:31:01 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:01 executing program 4: 22:31:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:01 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:01 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x10, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:31:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:01 executing program 4: 22:31:01 executing program 0: 22:31:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:01 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:01 executing program 4: 22:31:01 executing program 0: 22:31:01 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:01 executing program 4: 22:31:02 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x10, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:31:02 executing program 0: 22:31:02 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:02 executing program 4: 22:31:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:02 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:02 executing program 0: 22:31:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:02 executing program 4: 22:31:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:02 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:31:02 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80", 0xb}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:02 executing program 0: 22:31:02 executing program 4: 22:31:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced", 0x18) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced", 0x18) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:03 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80", 0xb}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) [ 242.393623][ T8851] binder: 8847:8851 ioctl c0306201 0 returned -14 22:31:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:03 executing program 0: 22:31:03 executing program 4: 22:31:03 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80", 0xb}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) [ 242.562142][ T8861] binder: 8857:8861 ioctl c0306201 0 returned -14 22:31:03 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:31:03 executing program 4: 22:31:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced", 0x18) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:03 executing program 0: 22:31:03 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904", 0x10}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:03 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904", 0x10}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:03 executing program 4: 22:31:03 executing program 0: [ 243.035823][ T8878] binder: 8873:8878 ioctl c0306201 0 returned -14 22:31:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62", 0x24) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:03 executing program 0: [ 243.248796][ T8888] binder: 8887:8888 ioctl c0306201 20000200 returned -14 22:31:04 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5001, 0x0) 22:31:04 executing program 4: 22:31:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62", 0x24) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:04 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904", 0x10}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:04 executing program 0: 22:31:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) [ 243.694034][ T8902] binder: 8901:8902 ioctl c0306201 20000200 returned -14 22:31:04 executing program 4: 22:31:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62", 0x24) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:04 executing program 0: 22:31:04 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865", 0x13}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000", 0x2a) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) [ 243.970913][ T8915] binder: 8913:8915 ioctl c0306201 20000200 returned -14 22:31:04 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5001, 0x0) 22:31:04 executing program 4: 22:31:04 executing program 0: 22:31:04 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865", 0x13}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000", 0x2a) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:05 executing program 4: 22:31:05 executing program 0: [ 244.364997][ T8929] binder: 8924:8929 unknown command 0 [ 244.384943][ T8929] binder: 8924:8929 ioctl c0306201 20000200 returned -22 22:31:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000", 0x2a) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:05 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865", 0x13}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:05 executing program 4: [ 244.626343][ T8941] binder: 8940:8941 unknown command 0 [ 244.656542][ T8941] binder: 8940:8941 ioctl c0306201 20000200 returned -22 22:31:05 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5001, 0x0) 22:31:05 executing program 0: 22:31:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000", 0x2d) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:05 executing program 4: 22:31:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:05 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb90406486516", 0x14}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:05 executing program 0: [ 245.071368][ T8956] binder: 8953:8956 unknown command 0 [ 245.091121][ T8956] binder: 8953:8956 ioctl c0306201 20000200 returned -22 22:31:05 executing program 4: 22:31:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000", 0x2d) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:05 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb90406486516", 0x14}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:05 executing program 0: [ 245.299803][ T8967] binder: 8966:8967 unknown command 0 [ 245.317122][ T8967] binder: 8966:8967 ioctl c0306201 20000200 returned -22 22:31:06 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5001, 0x0) 22:31:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000", 0x2d) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:06 executing program 4: 22:31:06 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb90406486516", 0x14}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 22:31:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:06 executing program 0: 22:31:06 executing program 0: 22:31:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e600", 0x2f) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:06 executing program 4: [ 245.801279][ T8984] binder: 8980:8984 unknown command 0 [ 245.824023][ T8984] binder: 8980:8984 ioctl c0306201 20000200 returned -22 22:31:06 executing program 3: syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000000)) 22:31:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:06 executing program 0: [ 246.045484][ T8997] binder: 8994:8997 unknown command 0 [ 246.061619][ T8997] binder: 8994:8997 ioctl c0306201 20000200 returned -22 22:31:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e600", 0x2f) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:07 executing program 5: 22:31:07 executing program 3: syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000000)) 22:31:07 executing program 4: 22:31:07 executing program 0: 22:31:07 executing program 3: syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000000)) [ 246.502652][ T9017] binder: 9013:9017 unknown command 25348 [ 246.530536][ T9017] binder: 9013:9017 ioctl c0306201 20000200 returned -22 22:31:07 executing program 4: 22:31:07 executing program 0: 22:31:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e600", 0x2f) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:07 executing program 5: 22:31:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:07 executing program 4: 22:31:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:07 executing program 5: 22:31:07 executing program 0: [ 246.759463][ T9029] binder: 9027:9029 unknown command 25348 [ 246.773177][ T9029] binder: 9027:9029 ioctl c0306201 20000200 returned -22 22:31:07 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, 0x0) 22:31:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:07 executing program 4: 22:31:07 executing program 0: 22:31:07 executing program 5: 22:31:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:07 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, 0x0) 22:31:07 executing program 0: [ 246.980051][ T9041] binder: 9037:9041 unknown command 25348 [ 247.000635][ T9041] binder: 9037:9041 ioctl c0306201 20000200 returned -22 22:31:07 executing program 4: 22:31:07 executing program 5: 22:31:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:07 executing program 0: 22:31:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:07 executing program 4: 22:31:07 executing program 3: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008153e00f80ecdb4cb904064865160b", 0x15}], 0x1}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, 0x0) [ 247.206582][ T9054] binder: 9052:9054 unknown command 287492 22:31:07 executing program 5: 22:31:07 executing program 0: [ 247.254118][ T9054] binder: 9052:9054 ioctl c0306201 20000200 returned -22 22:31:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:08 executing program 0: 22:31:08 executing program 5: 22:31:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) accept$alg(r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:08 executing program 3: 22:31:08 executing program 4: [ 247.474506][ T9067] binder: 9064:9067 unknown command 287492 [ 247.491914][ T9067] binder: 9064:9067 ioctl c0306201 20000200 returned -22 22:31:08 executing program 5: 22:31:08 executing program 0: 22:31:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) accept$alg(r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:08 executing program 3: 22:31:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:08 executing program 4: 22:31:08 executing program 5: 22:31:08 executing program 3: 22:31:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) accept$alg(r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:08 executing program 4: 22:31:08 executing program 0: [ 247.732740][ T9081] binder: 9078:9081 unknown command 287492 [ 247.766562][ T9081] binder: 9078:9081 ioctl c0306201 20000200 returned -22 22:31:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:08 executing program 4: 22:31:08 executing program 5: 22:31:08 executing program 3: 22:31:08 executing program 0: 22:31:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:08 executing program 4: 22:31:08 executing program 3: 22:31:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:31:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 22:31:08 executing program 0: 22:31:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfff2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 22:31:08 executing program 4: 22:31:08 executing program 3: 22:31:08 executing program 0: 22:31:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) [ 248.287131][ T9103] ------------[ cut here ]------------ [ 248.292787][ T9103] WARNING: CPU: 0 PID: 9103 at arch/x86/kvm/x86.c:618 kvm_inject_emulated_page_fault+0x210/0x290 [ 248.303297][ T9103] Kernel panic - not syncing: panic_on_warn set ... [ 248.309907][ T9103] CPU: 0 PID: 9103 Comm: syz-executor.5 Not tainted 5.7.0-syzkaller #0 [ 248.318498][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.328650][ T9103] Call Trace: [ 248.332124][ T9103] dump_stack+0x188/0x20d [ 248.336478][ T9103] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 248.342911][ T9103] panic+0x2e3/0x75c [ 248.346834][ T9103] ? add_taint.cold+0x16/0x16 [ 248.351593][ T9103] ? printk+0xba/0xed [ 248.355592][ T9103] ? log_store.cold+0x16/0x16 [ 248.361756][ T9103] ? __warn.cold+0x14/0x35 [ 248.366191][ T9103] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 248.373071][ T9103] __warn.cold+0x2f/0x35 [ 248.377512][ T9103] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 248.383887][ T9103] report_bug+0x27b/0x2f0 [ 248.388312][ T9103] do_error_trap+0x12b/0x220 [ 248.392920][ T9103] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 248.399177][ T9103] do_invalid_op+0x32/0x40 [ 248.403640][ T9103] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 248.410542][ T9103] invalid_op+0x23/0x30 [ 248.414896][ T9103] RIP: 0010:kvm_inject_emulated_page_fault+0x210/0x290 22:31:09 executing program 0: [ 248.421798][ T9103] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 79 48 8b 53 08 4c 89 f6 48 89 ef e8 da 0f 0c 00 e9 10 ff ff ff e8 c0 ad 68 00 <0f> 0b e9 3a fe ff ff 4c 89 e7 e8 e1 c2 a7 00 e9 5d fe ff ff 48 89 [ 248.441682][ T9103] RSP: 0018:ffffc90005d77968 EFLAGS: 00010212 [ 248.447757][ T9103] RAX: 0000000000040000 RBX: ffffc90005d779e0 RCX: ffffc90013a4d000 [ 248.455778][ T9103] RDX: 000000000000d3a3 RSI: ffffffff810b2100 RDI: 0000000000000001 [ 248.463775][ T9103] RBP: ffff888052124180 R08: ffff88809e162340 R09: ffffed100a431482 [ 248.471873][ T9103] R10: ffff88805218a40b R11: ffffed100a431481 R12: 0000000000000000 [ 248.479858][ T9103] R13: 0000000000000001 R14: ffffc90005d77ab8 R15: ffff8880521244c0 [ 248.487871][ T9103] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 248.494151][ T9103] ? kvm_inject_emulated_page_fault+0x210/0x290 [ 248.500512][ T9103] nested_vmx_get_vmptr+0x1f9/0x2a0 [ 248.505732][ T9103] ? handle_invept+0x820/0x820 [ 248.510582][ T9103] ? vmx_segment_cache_test_set+0xc2/0x170 [ 248.516407][ T9103] ? nested_vmx_get_vmptr+0x2a0/0x2a0 [ 248.521796][ T9103] ? nested_vmx_get_vmptr+0x2a0/0x2a0 [ 248.527267][ T9103] handle_vmon+0x168/0x3a0 [ 248.531783][ T9103] ? nested_vmx_get_vmptr+0x2a0/0x2a0 22:31:09 executing program 0: [ 248.537291][ T9103] ? lock_release+0x800/0x800 [ 248.541981][ T9103] ? mark_held_locks+0x9f/0xe0 [ 248.546761][ T9103] ? nested_vmx_get_vmptr+0x2a0/0x2a0 [ 248.552139][ T9103] vmx_handle_exit+0x29c/0x1260 [ 248.557124][ T9103] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 248.563188][ T9103] kvm_arch_vcpu_ioctl_run+0x3023/0x69f0 [ 248.568895][ T9103] ? kvm_arch_vcpu_runnable+0x6c0/0x6c0 [ 248.574952][ T9103] ? debug_smp_processor_id+0x2f/0x185 [ 248.580426][ T9103] ? lock_downgrade+0x840/0x840 [ 248.585386][ T9103] ? rcu_read_lock_held_common+0xa0/0xa0 [ 248.591383][ T9103] ? kvm_vcpu_ioctl+0x46a/0xe20 [ 248.596421][ T9103] kvm_vcpu_ioctl+0x46a/0xe20 [ 248.601549][ T9103] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 248.608352][ T9103] ? ioctl_file_clone+0x180/0x180 [ 248.613392][ T9103] ? __fget_files+0x32f/0x500 [ 248.618083][ T9103] ? ksys_dup3+0x3c0/0x3c0 [ 248.622589][ T9103] ? __x64_sys_futex+0x380/0x4f0 [ 248.627555][ T9103] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 248.633997][ T9103] ksys_ioctl+0x11a/0x180 [ 248.638350][ T9103] __x64_sys_ioctl+0x6f/0xb0 [ 248.642978][ T9103] do_syscall_64+0xf6/0x7d0 [ 248.647532][ T9103] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 248.653434][ T9103] RIP: 0033:0x45ca59 [ 248.657425][ T9103] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 248.678105][ T9103] RSP: 002b:00007f6f2ba42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.686825][ T9103] RAX: ffffffffffffffda RBX: 00000000004e85a0 RCX: 000000000045ca59 [ 248.694939][ T9103] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 248.703047][ T9103] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 248.711789][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 248.719785][ T9103] R13: 00000000000003cc R14: 00000000004c6799 R15: 00007f6f2ba436d4 [ 248.729154][ T9103] Kernel Offset: disabled [ 248.733639][ T9103] Rebooting in 86400 seconds..