7f0000000200)=[{r1, 0x40}, {r0, 0x1012}, {r0, 0xe1b6}], 0x1fb, 0x0, 0x0, 0x0) [ 352.245213] binder: 17453:17457 unknown command 1661403136 [ 352.271399] binder: 17453:17457 ioctl c0306201 20000000 returned -22 14:29:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x6c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000076304400000000001634040000000000000000000000000000000000000000010000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="8500009e2237e9fe", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="400000000000000001000000000000003500000000000000852a62733cf4355e000000000000000000000000000000008561646600000000020000000000000002000000000000002000000000000000"], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="03630840", @ANYRES64=0x0], 0x0, 0x0, 0x0}) pkey_alloc(0x0, 0x1) 14:29:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'erspan0\x00', 0x1}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)) fallocate(r1, 0x9cf3f4cee98ecae5, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x4000) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa5) lseek(0xffffffffffffffff, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000140)=0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) [ 352.436239] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 1, id = 0 14:29:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000d80)=""/142) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000c40)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e24, 0x123f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x87, @empty, 0x6}], 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x200, 0x6}}, 0x20) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0xe56, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x40) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x80) r4 = dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) recvfrom$rose(r4, &(0x7f0000000400)=""/228, 0xe4, 0x100, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 14:29:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) 14:29:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x6, 0x10000203) 14:29:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)='\x00'/11) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="e648bc76578a3b282da1da46dc0b570e15d27dcd779173cb5447a9bcb6ba739ae570fa91124a17a58639961b034f31aeedcad1487391956ff25fc9a7cbe896e4b88552730e2acded57246b4c9dbe286a53f320a7198d8e486dced92637fb5175b73c3f72154cf5aaaf41085521b3c2653e7d9bc39986e62cf044b942c3b625e5baafa7d11c332e38da65c7194ac2002dabeabd269b59f646303dd5f3c670cbce7bad051d0bfb2991e94d8dede0e2301427431bb2c0b5bb8f797f609daa644db8a6d8cb00a5e5ac4e1f68da636b076b36", 0xd0, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f00000001c0)=""/37, 0x25) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) 14:29:31 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200800, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/12, 0xc}], 0x1, &(0x7f0000000300)=""/122, 0x7a}}], 0x1, 0x2, &(0x7f00000003c0)={0x77359400}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000040)="7eac1463cc58809476d3d4d0741b9d28924c0a71e4b1eb1f62a05283f0548c311e57786339c498f94c2cc5c8777da0ee044864bad080167a8df5c5686f4a6ace9d1b9c7cf1ce2b153596c8023f797a2a1a426dcfc0fe5490adbc96f0477d16c4f6eb4836fd84e2ac7eb4a585306957e8b437f1691c67") ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r4}, {r1}, {r1, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0xc364b1f958080934, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08630000000750aeedb900000006630440000000000f630c40000000001000000000000000000008000000002100000000000000"], 0x0, 0x0, 0x0}) [ 352.752896] binder: 17495:17497 unknown command 25352 14:29:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) 14:29:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) [ 352.779772] binder: 17495:17497 ioctl c0306201 20000000 returned -22 14:29:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$ax25_int(r5, 0x101, 0x1, &(0x7f0000000140)=0x20, 0x4) r6 = fcntl$dupfd(r1, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffde4, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 14:29:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3813, 0x8140) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r3}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f00000000c0)='/dev/binder#\x00', r3}, 0x30) write$cgroup_pid(r1, &(0x7f0000000140)=r4, 0x12) 14:29:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x2, 0x4000) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000380)={0x401, 0x9, [0x1, 0x101, 0x5, 0xfe7a, 0x4], 0xf2}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)="8b8ea33abe7130", 0x7}, {&(0x7f0000000080)="0475e7bf9c08d2024aa0c5acbaa699ee8b418bd330094af4c0f448390b341f24d8b49dfbf8586dffc5383b1c0ffd45d130eef44687298696eb6111f06abcefb49116b413c52b04c2d7b4ecbe1cea3bab0a9c57d26b9a1944645555183a301d9f4663b0cdc14371700612779ae7f70aa9de572356357271b04793cee477ea4501b3ddd037914d086dbd8044288b9e946e7a2ce1447a626e6b1f9d53c2af78b0727f45255cff2ae90c1e85d36cee9884038b15f7d7992aae0299ee7fc3cee6673ad17abec081c6f09f6f1575f94c46", 0xce}, {&(0x7f0000000240)="923a87fe3a5e3540f650044edccbf04834c8f9910c9bcca272ceb9b42475274afb68a3a8aab6c2c345ef24d2fcb60877938ca5cc1fb9707a73c131e7752cfe50cb86b2319c28c384b7ca7e2188ee2a347ebfbeaf177e88a34341e81ed7effd1af38e5e06e1fab59c17ab38841f35e30936cba9d94d91874df462947a5dc3efe1c28efc291f3429317edfe6ef7a53f608eab21322f46b96cc185a6ce5c53f5f5dcb9445356f6b2ef2b1aacf2040b7fcd8e280efa014d11ab152a58abaa1918cb650eb431e0fb863c2bc5acdeb566987cc1a0b1bfefae963ba393485a374665006dca7", 0xe2}], 0x3, 0x32) r4 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0x311100, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r4}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) 14:29:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) connect$caif(0xffffffffffffffff, &(0x7f0000000040)=@dgm={0x25, 0x7ff, 0x9}, 0x18) 14:29:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2004, &(0x7f0000000100)="1136c237198725d9ffbbae8a") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000240)={"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"}) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000080)="ef7638d23161f55cc3c18b1b80e0b05dd165d4", 0x13, 0x0) 14:29:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)) 14:29:32 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000240)={'stack ', '\x00'}, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) chroot(&(0x7f0000000280)='./file0\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) fallocate(r3, 0x10, 0x0, 0xfffffffffffffffc) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfff, 0x20000) recvfrom$rose(r4, &(0x7f00000000c0)=""/219, 0xdb, 0x80030041, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 14:29:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0xfff, 0xffff, 0xbb70, 0x6}, 'syz1\x00', 0x47}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000045e6aecb620a8ae300000711048dcfc9d2684a1cbe0e030d7b0c400000000006630440000000000f630c"], 0x0, 0x0, 0x0}) 14:29:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xff, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) [ 353.430630] binder: 17548:17552 unknown command -1929113337 [ 353.456080] binder: 17548:17552 ioctl c0306201 20000000 returned -22 14:29:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@can, &(0x7f0000000240)=0x80) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={r5}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r5}, 0x8) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r6, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0120ff03", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000300)={r9}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000180)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)={r9, 0x21}, &(0x7f00000002c0)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000140)=[@increfs, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x0, 0x16}, @flat=@weak_binder={0x77622a85, 0x1000}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 14:29:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r2) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x10acf8f9aaf94527) dup(r3) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0x101) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) 14:29:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000400500010000e4e6fc4be790f80a00000000b7871001000000002300002560b700eff0ffff0403ff03000001000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0x38d}]}) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) 14:29:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs={0x40046304, 0x3}, @clear_death], 0x0, 0x0, 0x0}) 14:29:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000010000000000000001000000030000000100000000000000060000000000000090080000000000000000000045a1a5dec7c02b1d41946f00000000000000000000000000000000000000000200"/99]) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x20, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x48120) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r4, 0x10, 0x0, 0x10000200) r5 = accept4$inet(r2, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10, 0x80800) setsockopt$inet_opts(r5, 0x0, 0x16, &(0x7f0000000280)="38af7cd6454f7bcf1ef70f1bed8de0", 0xf) 14:29:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630f630c4000"/18], 0x0, 0x0, 0x0}) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x4, 0x80000) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000100)={0x1000, 0x6, 0x100, 0x5, 0xff, 0x4}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) lseek(r5, 0x0, 0x761d0ff25a5bc94a) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r4, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000280)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x58ab437c0945088a, 0xfffffffffffffffe, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="788c731c680c62eccf48152bff0e6e5f6008a3ab6e57f8a4fe79554c973d9bde4cae38ff97b70690d0e5062aca81a74b136d57dead8db5160dc3765719870061495e6ffc7b02000000000000e13cbded0bfd605a151d4a40a3bf3795e83e992f0bb4bbfcb710a4edbd9939db9b3744b0b952d3788dbd61cf70f8c7a9c05fd595481638340ca5586611ffb0f074", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000300)={r8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180)={r8}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r8, 0xfc}, &(0x7f0000000180)=0x8) [ 354.042702] binder: 17583:17584 unknown command 1661952772 [ 354.058901] binder: 17583:17584 ioctl c0306201 20000000 returned -22 14:29:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x801) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="046304400000008249000000005f426977cdab2b7e70a1cb875a7feb07d8dace5544e4aecd0e1218d7599ac13269f41fc18dcb61d89b0ae329ff7f0000c05c7752180dac7427c77071416086e8b5111217f7faae918cf4c2f2293bcd323d33e0ae653771bffd9a370ff0bfdf54e6ee3e21738531c4f22af86275370df6f6220a031867913acfd0e0fe3a9d5a8774096072fb8c29baac80bd51ebbee4f89204ed331666bdaeae5d6c03cc54e746f4d5e99506aa9f8c02d38680c71adc"], 0x0, 0x0, 0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x43cd274fb2a8afee, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x1, 0x2, {0x0, 0x0, 0xc8a, 0x964967efd7f5e82e, 0x8000}}) 14:29:33 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x42, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x13, r3, 0x0) ioctl(r3, 0x81, &(0x7f0000000080)="96b010f000700d3564df3bd0c10294e7ac9cdac9d17ebe26add77e80a40bf90392e6d3370522980c6f5239dc6a10680c1704164b3df32b8361d259") r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r4, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r9, 0x0) ioctl$KVM_GET_XSAVE(r9, 0x9000aea4, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f00000000c0)="b027de89a98016f96bd034a6120c63dd21a8736724549786f9c4e0ca81bd4ea8dd5dc565c7562d6b832e53239b09016474297f7323558726e9f11e40e4affbfcf600175e9606a1926564113e99e506897608335ea68fdcf4a63a522db259f2b6512574735f3ac9ea823b75989d5d4975efcbf939b81a75b26f1148e388762be7c3ae052383de268528f1001a3c8df56c03616254c2e61987c70ad6c139b60015efddae581394ac6ffdaeecf3107c2c369b6ca55bf9ce4d4e442614f00bd0c5bf702fd6d77d458216c6dcfceda642b45626cf026039e10c47a4") [ 354.261277] binder: 17589:17591 unknown command 73 [ 354.300722] binder: 17589:17591 ioctl c0306201 20000000 returned -22 [ 354.339839] binder: 17589:17595 unknown command 73 [ 354.345063] binder: 17589:17595 ioctl c0306201 20000000 returned -22 14:29:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={{0xff, 0x1f, 0x0, 0x61, 0x80, 0x9}, 0xffff, 0xcc, 0x6, 0xfa, 0x5, "da33a1231e5c0745f86ff64ef1697ba331e999e811567779750c54e4b5225cd620f4f17eb22213ac0a73f0563fab76f37607a0e0ae9c9b4089f9cb926df9be9afc04ae6380bc5b3a1c089daea00ef65788e4dcb36b3e85af0263702d5200f23238a6b93d715536816e129501b5526fc6c26dc0fc47d139c4d4815a1ca82fed37"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) 14:29:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r1, 0x55}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000001c0)={0x1, 0x6, [{0xfffff801, 0x0, 0x8}]}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630440000000050f630c40de000000ed32739046f03502"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x43, 0x2) sendto$isdn(r4, &(0x7f0000001340)=ANY=[@ANYBLOB="070000001f2b000083eb3aa4e4077bf56d9617521bea1f35e4b1a3f923ca68193f7f16aa8f3563289c208a3d78c13108bff9a49822f718fca9b2f2e945eb2aeacab972427cf22b5ba291a683897f607422b245c40f8bc89be776dbf5fa64560a4e073da9c386b06f5a18f30afbbee08f713a18308419524217ae151218707a3a38d6ec5e6df26197849e916633df390ac8bd1c8be751ed3c02e739faca1c7bced8736aa831cadfb8bc3533149e23601142285b2a1134d1d3e982814651ea78347cd10d668994e43bc10218a4f4dbccdcab8bce84918edf0d1c477fbeacba2cc9ccc8c1b4708366dd9b947adc63d149af5efdfe4a41f8cb7c29a582216a2bc963960b5f6a2a4b5b7d3ebee606f72f81c552cbe7f7c0eda411c665d8684e179f6dcf5299f459c589ac0859a05e1809147ca7a0717d2bdd9c8fdd8967e1094e2fa9490ef255d727555091ea26d8b866ef74bd12f585d5fdef122bb4a7ea2925128f3a1223e7f153a80c2bd0e09e81e152321157366a429de076f129e4bf7c642987cb274019e94e29a750890139e492a2012fabeafee7b304ac44ee023c9c878a6538fd6e65ea0b6ab7ec7872fc854d1004207a8e0caad316e493efd65733fa2ba50ab11fa91b7bb07505d21c6958a862f2aa8826f21bacf0bb5bb6f4965716ee79e61f7b25c33c04d28323e85f6c48556d53c59453216a4101daa042de5c202d83cc679badea50ee22050e81358ca9b17866f97c8cbc2b3d8db5e47824784c6503336560e8ac125d6bd33426d5af1f50634150adb59c88b3c1bbe1ef1ec081733c915cdf96c1263f2634f06cec4354f260e895688c467ea8a5c1e443361da5dfff0f706bd6acfdd973fe65598cf2a51a7f2651653fd111888dbececa0469eafb91b12801c5a0aac67c967b665d80ad6ce88070bf6211014ad259427247240e7c6cbaa2ed66f1120fa63eeb718bbcfcfbad187ec27df1b2a6512dc86d6d60db585f0b5e2351935b4371fc87f9d115138a9cdf22e1a4c36dbdc7231ae434dad3e29ac896e794e47d437559ed1c28759021b73703aa6376b17806b9bc1db37ce8172de0be6ec61e0123fe360db4e102bc3170ac2891ade1bc23d7a58655d31f05de2d4a73600521a166ff90ce886cff4528118f01e9f1768b1f79b353f2d28fdce81c2b02041e3903654e5536bd53f00930d1398fa7218e8ca269ccb712d7180cb7886c47ff93d7a1fbe664a7eb3b659f6a31b7ed682cc4510fa0d9d7cda7a39112ead2bf46be055bbe91e65e2de20e7d66a23123a52da33d39a306fe5d70acb057b6f772c5978a6651dcbd7f1b2aad13833a7faf28c364e0253a5be6d59bb0cf8c36bf3b65b3d099bed2220e66ef4eb20e6ab642c966ef74d1349ae14776363f9a55c31f3ccbf2ed150d502554c9c67cd41245b295cf47e82a87635b2ab9af00f65ab4a568956ee169657e2cb8a2018cec38a86fca199934e5b7ed0c65e8db2d613b21cbd1ac28913229aac1f0ad7b81f788b571657cb1115cc2b68565e083eebe0f300a27ad2e7a5da39d9cb35f1ae4493ce2c05626887b043fef98141a731d8cfd38d53c92717dafa7784eec9e80c9841e82e8d4bcbe152fb1caddcb6488cba39e9618d5153f21bde2d5ffac7dc6f4f4533b7f75e246b81c7972d67cee6481baf8ff11b96753e3646e9472eba0c49e103f4c5ffe0b16320c13c001b539d08d0088abea86d4c03e54239fb472c840ca4eb288257a37c559277ca1ec12d0d94944bf92b8086a10b6f168b0013fc824a3271ac583824dcc3dc06e50c36d78d842e88fb5331986e2578f6872d4e6e7b5abae0ed876225a471433972dec99197e59ebf896cbc15e74dca6e23ee7de7bfb65c9415d036f951ae65956438ef6ca805e1cc01e9d0549f9f587b5afd2addb70a4a5f512db6d9d5fa781175fbb4f2f4832122afa50867427ab793b4da47917d6a58e3825c9831e4f9555552ecd220ca45ef7cf91e3eef55d2514bf80534acba9b1dc329f800a4ca05e9a7136c7d13b59af1120553f9eaee6ac0772af302a6cf79552f488a73248f4f64d3025a64903ac7b277c874bf3d6ad121870baac3d1ad83bbeb77513174a26cfde2dfa6d5c165953b52171cfe37f9283eb0ddbcecf214d40ec75e338e5aba74a59f7660d71eb787c591f8d8b1b0cb31e197eee6ced1a8c5b7d683eddf67e670791ea4e487097b641e16d4a3d2af3f406e655a594dbe8cc8cc3a13a6032b1d3461141c3855d14ba96bb8d6199ce62822ff3aa7c9758bc4655716273b36c4d32237cea11da8b5cdb67fe5a9b7b70dc7fc80cff44185e50bb356aba9ac56920a90d626647b38c554538e0b004f776abaf81beff171e7a9e8e9be6ad40f75fa007bae7ca44e533cdb968c00d3dc62e38c7fe02370de927ec20a2ebf3e0ac662629ebecf60ac44a9d8a84928bc9c439a3c6a49dc57e1145c9cd3199a9655c08b1ebdcc3e34e8610c5e67cd955d04b28566be4b2b32ca7ea230a4ea6f0a0e6b22a38affc5de358bd33a20838ec869da0388e0bb8ee6952ad368989bba57e8c97313ec031da7fa3a5bea78ce32853c5b2b7bcbb2b319fc111b06204f46a92c474ef4d1b828742b864b432114c565a43cb4367c4aec142024e82b7e2b18011e3e79b9f429e446de91030ff2fe427968c3a4ea4c18cefbff8c141078975d6d1bdd5b7f0b25f39ebde32dcaaa72d01865b23defd4ff0a14d262e87ba0f793eb3748c919208d8028e0de9fbfcab5b044a464159958e70979df1c0a4725f5ed3e8aa648ddf481662f35d186f1e33cde54467218ed2a3263a9b84db214318bdb8554ce389391bf9cc93a01ee928c5012b8c545266d7009b44379852ba76c2ae79d6da97c9b50555e87bfde344d21c6efc303f9598d73f21ac8e0dc4b5c9f5fcc093b9e5942edc3cdd95b3555ab2b00643f1726344435731ec86bdbe7df96644593b6a0fd8879ae8259efcd76a04172565397644077338285d5612d9b2f51f86308e3fee728dc1bc15cfb4edc6fe10013e0b2cf09bb9b8c08cb05b049c8b7c9723048d0aa15636abda382f8f7783e9f7bf14fcb1c9bdd70804cdc7c6ff696d496861b80df7240e91b327ab3ae81e759cdad882d60fc085b35499e6c92f506e0dceb8b793737c12788171294d9c0b70baf94f5987e455ec485b7b51aed4a488ed67aaae87ca9c35096dee27d9215923c8c2afcbf8920af71b10ea0e3fac850e724123ecf55920becbe0296b650b2237d0eb4005135fc8b73d62d2a3ea03e7be0f4fa99766bf83c3362c70d9ab4f395b80c685cd5dac38cca1bbefda7d238c4b596ba0fa244e20063b7f739782a4fad3bc15a464c07abd3a4e15cd891fe2b9aa07c64ceba07db670960cb614467cba2e0b0dcd2f787d7e45af26677cea774fbab680cba35d2f5beb9240305519ac296fa4eae8b644c75d81674b9b49e0f27c77538a8489ecffe4405f4bbd327cf910b6c3a3ab2cfb74bbd3d0d3b6752df1cbcff6adbebf1e75525fca203ea917c95f3495a35bf206383408023879336b552581478bb725107897b5253439ad2e587bd28973c3ce8c851a8cd657931caf9430d2627c363c5c8a9be3f9a91dd4093b57e013bd8764458ae8905569d1e90fd86b810bb896a592f3a7df1930bfea130836b4a354b6ca253862a9fed1b04cfaee68f714d512695696c73198345c0ec4a5e88d77e6c0f260fb4fbc4b7317c551f967a84c93f03c2d75801222ca13b0cdf2fe27a73805e28477bdd81c241a7bc90f71b6ef9fc7b3c3a759bb2345d9bdd79c2755fda8f22ee7a0878cd719feeed313136ec9e054f78fcc6146a7054773b4e409a1dd8d00c9905f370d9eb65d96e4711897e652e29a9f893678e89f88a43b2b02cc0e02d9ae5ad82e13eb7a7b4246a345f6589a3166945c6ee0e33a6709aaee3e1d405c8869eece4fa0b9f3fb00ad97c6c43beb2cd0c5b193ab40fe03ce05cd0accad3aff0d4b1d104e379390e70359aa65afcc741bd7c19d6112c7921f851b48257a5a121d89e8dfef3a94826ebfb790241b4e023e94c16e6c17ecf98a6d531230b9c3a10bfb618ee24283429bba49b35bcf9ad2b54c81b91a9c74de7dd1743038948c98039cf62cbe75f56efdb3b4b00e7750cf6ca1073bf3058dfdc5ca036bf27c756d245ffc73fa76132056e064e881c19da2167d08a7c20c4ab08093cde6cf836e4414724c06b05c748f66556d8f11682a79a14647cfcd1a54caa3129e9f24a5b3825a171ecfe69e4f1c731c8be5b94dd9a536deb6c3c1541bd095ee7012eae04050762df2ddd52b7f8447fb266692a7c5e57468d30fafeb772677fabd4e8a67e61828458184637ff77331bfd09c007a6cfa1d839e7cdb6f753da8b0628e40090bbe7a530cca9f998cfafd74ab9c90b1317f2295209d05247442b0c63a8a1a98df1d8fc3af4e45c4ab09a91e9d2674adf000fd969744888c5f584cd7122ac71856ff174034120f836e5eed563cf53bf12b312bf643d546ef35e08106ea6954632d1af4a504b13ac5b6d9f7b432fa7fc78fdec3ba272e0c2fd221e4fcc9f1606782900311ccc4f236240f027afb76326373aa7289f25f297b6f245c595495364a6e0cfd190320ecf234cf93b384548ec36c67450170d9f22b780cf31043e1e3613f088cd765439adb520aa4a902dedcca3538e0428f3885db73f2392c05c8431fa88e76d39fe1ad66490e0ae8125434dd4a81b7b17bf96c03089caf5cc29daa02531b55f6b1b16856ebb8834bf659e6da3a7253d6c1ecaeda0096a5ecb2c9ddec399b6ef1e5c057f91f75ef488cffc505c4afe240575b8e43c7790e76286ad4afacfe4c1ba7e57c1b1d475ba68178da938d71d7d9dd9524d7158ee4099f6170960348ba14d63310da71a39f38960e84a2656cafb61370c826bf40474bc663b443689bd925480a7090726ddc2eaf25c0fb3a38dc84cbe6616614a2e077aa330abffb774769b6b1d41ee96dd81109620c8719daae0555f72579f0fa9a971e76d1033090c642756b4f054bcfed57f9c4a281045685957e284fe48cd29e728fd1624a0f49aa2c494095f96ad947a6bb17306e994ad5bda36dfb0231ed20a88837fae85fa498d6806198bc1f7bb83a427cea84a88af90bb97305842680a7f45ee03a272bb09f46b497182d5e4892cc524471a2d2ad03420095acce1f966fad961767ac1decf564c5bbdb85b6f839df1329e440aaca81ea988254f258c5f7be34c182e65208c5e3a47c2eb1d1130390a52f12a21525dedbb1db57851d2169dac3b1a664bff52f5f055834732f685fe5713b11a5436631706ad096d0e8be44ef59773d17fa52781097da6ad0c502f81d6ce62436f0276e8a3efca009fe6a73c37a5dc53aa10e7fb2b78fbddc53e8aecd919d3e60e2f44bed71829b212730cbb749592c24110868525a715e73f48e4d9ae8c235d6f582d39c8b73bc041ec7329b3cf1629f7b9764d8de8f602fd1c5a0a5fd17fb664fa5a609af738d10c8128bfb1b26dd298c34625e4e534e588fcb29a9d23aab6f5f0bf32f7f39738b1f9775979596641a304881a223aefcf5dc297f8202cbf4b12dd59e715e31bee3216655fc7cbe2c385cffc0339c00d83fabdc11ed181b9cbd58a5de87d053572f4777ffb559821c4c3d8317c49c09d477fa0d69f6d988b76b13a23687ba939bfced3edf884f46ebbea38f81d856e7ecb4174464c667330acb89d12c55a6bcb2805ea90b977fdd7c273e30afc504fd7eab3b44be4fd711ac9ea30ad2ff002ba651c592237fb67c1d9a33753146e1a6fcbb1a101fb02de3fdd208b9fcb35356c6ab1fd3f6eddd5fd9a198786642d4c3550b79a6a285ffc052d06fce5242c76df7eb931ee880b578d94452faca24eff940c5175948d8f40e6aba000d4034d4580907fb42951952f4261df2b234879688247a195babd9457a0f039988ea195cd34eb4d1d2d56d84936139b0c6927f914d5d87ec1f16d4f433167866bb7963c021d6b0caeb57f3e6e47c80a5b142eb240d2d2c84648eb2fbccd3"], 0x1008, 0x0, &(0x7f00000000c0)={0x22, 0x80, 0x40, 0xf}, 0x2a7) 14:29:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008d12, &(0x7f0000000080)="4ff7102f2de9256c49000002000000000026902a899df2536cc4c2db5c9a5a56b9da354afe546a8b9f737174b020d5de027ffe11c39fe8c290e80fcee0e37343e81c8857979ff922919de33e39c0602f17e1c6f1558fbda6af0f4f69de6139ec410c859fd990240000000000008b") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='\x01\x00\x00\x80/nrllb0\x00', 0x404622, 0x0) fcntl$setstatus(r1, 0x4, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:33 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getflags(r0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r3}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0xc) r4 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) ppoll(&(0x7f0000000200)=[{r4}, {r1}, {r1, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) fallocate(r2, 0x4, 0x1000, 0x10000200) 14:29:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x1, 0x1, 0xb}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @fda={0x66646185, 0x3, 0x0, 0x8}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) 14:29:33 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x400000) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) 14:29:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x44}, {0xffffffffffffffff, 0x1462}], 0x2, 0x3) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x810000) ppoll(&(0x7f0000000200)=[{r1}, {r0, 0x4}, {r0, 0x200}], 0x3, 0x0, 0x0, 0x14e) 14:29:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000040)) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x7}}, 0x20) 14:29:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x210000, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x6, 0x2, 0x0, 0x8, 0x3}, &(0x7f00000000c0)=0x20) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400203) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x8, 0x8001}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = dup2(r1, 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="4c14be0a7a02317f277ce2ab179659918f2c99b09dc80ca5c4aa345c2f9c801a12f7b4fec544bcbca7026f6a222fab741c85db6fe5af81c2e4df7ce3c95cbf7168722dfd6122dd068ad4b9c0ed0cc9229f958ed263ebb82e5ffb314c86c60e889d7a835bffbe05a742783542a956ab701feb1d62f6307d99f0f173d2bf73fc1148831815b7c9f655f8ba6087e7b396728abd4ef7aa532f1d7c8b89c16d220b229814cff045958cf1d4bb7ab590e1df305d7482f04119b26bcae9e2756f44cad9f2bc7633a7", 0xc5) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000280)=""/223) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r7) r8 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r9) getsockopt$IP_VS_SO_GET_INFO(r9, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) r11 = getgid() fchown(r7, r10, r11) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x7ff) 14:29:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x10100, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x869, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$int_out(r2, 0x5463, &(0x7f00000000c0)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/d\xd9\x04/n\x00\xff\x00', 0x64a2, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x321000) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x10) fallocate(r3, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r5) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x25001b38e4dcbcf8, r6}) 14:29:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x7553ab29e89d0e90, 0x0) dup(r1) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630440345fa3279268ae9400"/24], 0x0, 0x0, 0x0}) r1 = socket(0x11, 0x4, 0x9) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 14:29:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)='nr0\x00', 0x0, 0xffffffff, 0x5}) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca50d5e0bcfe47bf07090fdb6a750b49d27664b8203751200f0e9d799ca9470db87ccf873fb3a656e4e2683ba22254de51ba0f8ae729bc32bad1f8887b314914af5182c22047712ba66") r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000100)={0xb0, 0x0, [0x0, 0x3, 0x9, 0x5233]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000180)=0x20434060) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="eade29077a8844fba5e28e1b0cd961ecc1636cd9cc7f7df31048b9a2fc867c67b8a4812bbc1b74c7f16366e19a6dbbbb324d05f7209c4a2cf75b50b84f422d379ff61cf8b99c6e6f5e2852d99d", 0x4d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BLKBSZSET(r10, 0x40081271, &(0x7f00000001c0)=0x8) fallocate(r3, 0x10, 0x0, 0x10000200) [ 355.323171] binder: 17655:17658 unknown command -1800509294 [ 355.339025] binder: 17655:17658 ioctl c0306201 20000000 returned -22 14:29:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000080)=""/175) [ 355.388203] binder: 17655:17662 unknown command -1800509294 [ 355.418019] binder: 17655:17662 ioctl c0306201 20000000 returned -22 14:29:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) 14:29:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x37ad04fb9144b18, 0x0) 14:29:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000200)=[{r1, 0x2008}, {r3, 0x4000}, {r0, 0x44}], 0x200000000000022b, 0x0, 0x0, 0x1c3) socket$nl_route(0x10, 0x3, 0x0) 14:29:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x41cb906e8efa60c0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 14:29:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x1}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @empty}], 0x5c) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x5002, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'veth1_to_bridge\x00'}, 0x18) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:34 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4d56cf4961d61333, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000300)={r4}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r5}, 0xffffffffffffffa8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r4, 0x3, 0x8}, 0x8) r6 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) 14:29:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000001c0)={{0x2, 0x0, @identifier="305427daecfb366eaac9be7a8896b442"}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r5 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0xf30, 0x101902) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) syz_mount_image$hfsplus(&(0x7f0000000580)='hfsplus\x00', &(0x7f00000005c0)='./file0\x00', 0x5, 0x4, &(0x7f00000008c0)=[{&(0x7f0000000600)="6e083e89e9dff9fc45a6683776a730ec6bcce9c01738791205e0938195bc67a98ad15b406f1df74b9234b7087ccb3e8c818d09494746779c9cb0adc04ff0e223afc4dee2b4edca6b8c2875a4d5ad2f8f4fce9a57b40a2f2c8483c23e1cca1f4f6aa81b3f98976475adf51762d3d2bc18b42c205ac24bfbf95503d418eb44ba38f505305172fedc3f432f8777fc12724395cc3e4b7bbaa9651387002a46e7cc2fe86f398ca639a96970c885304953b0d8c1e069c343fb05c33d4c0dda07763ea8e122ba4182de32f40f22f0", 0xcb, 0x8}, {&(0x7f0000000700)="0adfc2f79f05ead8e4c26c70feee28b638386113fae61bb8caba5a1ee472544b6d66fecc6a2aa203170c2fc770a081bdd7f7b106b5cca0c39cc404b672d94165fee8", 0x42, 0x9}, {&(0x7f0000000780)="faeb24db76cc03bfa02ee48216fafdb6b8d4a30dafe65163509b48e6d574b7757013d9080dd79c578bf085fc07bd5ce1e57f4edc1cd703c36b756f1edabcac845e6691622cde5456ae63af613fcd263563b6", 0x52, 0x6}, {&(0x7f0000000800)="ffc656c6d093025a5faaadff93ae6b06ad0e728bf286c73b936cff33e31ef783027af6964bf3e34c943b3bdd98871efbcc3b18c018977dbcfd048e497251c34e14ccd485b4b63cce58e45b64c4002a0e5a20a38f671c4e6cc5c8f206a1f788495bf4ab4c282f09e5493b7a6a94ee723743e0c655c20c26a1e4b30096e0344ca8171c57cd7b10f2ba182580cbaaf8a17afef71cef9f8802982ac1db31e9a2fe37dfc42a3474e96f6f02c141ac93aa", 0xae, 0xdc9}], 0x40080, &(0x7f0000000940)={[{@type={'type', 0x3d, "b885706c"}}, {@part={'part', 0x3d, 0x2}}], [{@hash='hash'}, {@euid_eq={'euid', 0x3d, r9}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/nullb0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x21a}}, {@dont_measure='dont_measure'}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000480)=""/228) r10 = getgid() write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78, 0x0, 0x1, {0x9, 0x1f8, 0x0, {0x1, 0x81, 0x1, 0x41d1, 0x12, 0xc, 0x35, 0x10, 0xfffffffe, 0xfffffffe, 0x9, r7, r10, 0x80000001, 0xd0e}}}, 0x78) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x41}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44011}, 0x20) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x8000, 0xaa) getdents64(r11, &(0x7f0000000380)=""/221, 0xdd) 14:29:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000040)) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xffffffffffffffad, 0x0, &(0x7f0000000000)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) [ 355.825180] audit: type=1400 audit(1569853774.729:89): avc: denied { ioctl } for pid=17698 comm="syz-executor.4" path="socket:[83946]" dev="sockfs" ino=83946 ioctlcmd=0x661a scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 14:29:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") fallocate(0xffffffffffffffff, 0x3dc18776a03019cd, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$selinux_user(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="d479737465a05d667bf9ba5330623c6d5f743a6d626a6563745f00105f743a7330dc85880bf104757800e7f0f23cae97c9816b9e74f289106ab8c7af511f873ab95df0b68bae73f4f37c889724a3a8ce32e33b1b7c8e54c4f6812bbd3260e47352740e5210635d27338c152f2834300dd56d01efba3cec49416c4ccbb8e10008b0173d880ebc67358b0e4a7ab8b338d5669bceeadad789b0e3e8cabb8afddce09f7391e53e54fa44a2e41143dcaa0c693364c3d9cbb01668eb66587056ac8f103fff3f93daa59f3902c07f6b5ad186a3322d87f88d4f7452d15cc4aa257e8153e3156d40fefd469f9edd646b975448f9102942552e11a201b09a6945f405a12310fceda7d94a771045b12487b1d93a1a5a3b10354627d688f7b967a37926ee775e99342c1c3feeafacda9042e197c1431a32551bb4bf4b362e7917b3fc673360b8fe4b4e7d9f684a871c3641ea345a5d60eae9f9cd"], 0x26) 14:29:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) setfsgid(0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1200000000000, 0x88280) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r11) ppoll(&(0x7f00000000c0)=[{r3, 0x10}, {r4, 0x10f0}, {r2, 0x100}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x480}, {r7, 0x5}, {0xffffffffffffffff, 0x400}, {r10, 0x8000}, {r11, 0x2000}], 0x2000000000000313, 0x0, 0x0, 0x0) 14:29:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x8) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x24) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000180)={0x14, "f704af235a80e211912e83f8f0962e99ed338533eaffe6c19567135ca5e75cb8ef2551a6b1f2ee9d5c94dfad4b76a0e4f090235e5d58edc861a940f029696a63f317b1981b14c4322733d53270a480377ecc9c1b4573813af19c63fb2bbca8445e972959c4b3d5d7bd699edb0ab645ba3145787dc30f8208a8c3e2d0afb9b10c"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04630440000000000f630c400000000000000000000000003d6253921e8e3bdb833378148c865dbf73b32c960df32dd305f47ca3bdaeee2799d58238643562c8d618c5783d47f6c1d5e086a7dd731c20a305000000fb2362fac0d8ca65f1b8000637ed2f9eae3230a283b86704391c5a226c3eda9ff6c72997e5b9be695a61603726afad96274168cc781558725c930c095ecabfb7f199ae9e1205bdae5d93bd8b9a877932a253725c"], 0x0, 0x0, 0x0}) 14:29:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x40, 0x44040) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="35000000060000000000000000000000020000000000000002000000000000000c0000efffffffff2e6465762f6e756c6c62320000"], 0x35) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) 14:29:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) getuid() ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 14:29:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f00000000c0)={0x5, 0x8, 0x1}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 14:29:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000100)) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46000000000000000053b3835c0000000000000000ff010000000000004000000000000000000000000001800000000000d7d61289e884de1d0fc1b8aac4e9258bcf8ebdc8830800000000000000000000000000e51411a9ba0000000000ae5bb1e32a000000170000000000000000000000000000000000000000a58befe1b051ca61c669"], 0x7a) dup3(0xffffffffffffffff, r2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000013c0)={0x10, 0x30, 0xfa00, {&(0x7f0000001380), 0x1, {0xa, 0x0, 0x401, @mcast2, 0x4}}}, 0x38) r4 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='cpu\t\t&6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r5 = open(0x0, 0x0, 0x0) finit_module(r5, 0x0, 0x0) ioctl$TIOCLINUX3(r5, 0x541c, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) 14:29:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x1, 0x0, 0x10000200) 14:29:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r4) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffffc, 0x400) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = accept4(r8, &(0x7f00000000c0)=@rc, &(0x7f0000000140)=0x80, 0x64111facb0e56e3f) r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) tkill(r10, 0x1e) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$VT_DISALLOCATE(r16, 0x5608) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) r19 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r20 = ioctl$KVM_CREATE_VM(r19, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x3) ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0) r21 = ioctl$KVM_CREATE_VCPU(r18, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r21, 0x0) sendmsg$unix(r9, &(0x7f0000000600)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000280)="3dd8c9de8e480fcef02c3ac0ec88eca2dee949b0265c07bc61c5187708dc1395996c8dfd810dae0367a63e23e4c0059fdef46d60a3ad5e9809e8999bac81ebd44dc32f10dbc3b71d1c59c1b7cd726805b0102918e4bfd75e217af9d146ae6f5421557f0761410c3074eb27e6eaa8167c4e7e198f94dd43e37a81d478891b5f6c8a97540292dd0a044c39d690c1fb0cecdb9f6a84", 0x94}, {&(0x7f0000000340)="e9c0203c647963a44a3d5dc7fd5f0c32ca8d3fc966c39cd583904173d19d57eb485740e628d5f74f2f1fea787d550284937afd7717d792b7e54ead8847e9e01888eea352c478153098946d7cd6e27028759a2589d41232f00a11ad91c6c1c060a1eda3f231ec506844d3033567a9a88db62b31fd529a0ca8ecbc19d2124965ba0cb257cbe6004ff35d04aaaa958448d9d790", 0x92}, {&(0x7f0000000400)="f02ccb7741c4dbdbcc594313352dac60f73a2df996b30993e12bdd27616b46f8aefdac7b18a16a7b549cf13389580a72dff750a003a9ade217e2d47141c36c66107bd0dbba6428ba46050f1e37ca2b015c614f06af9dad18a889b16f225ee4fa63", 0x61}], 0x3, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, r11}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r13, r0, 0xffffffffffffffff, r1]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r14, r5, r5, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r21]}}], 0x90, 0x7a607eae9a1ec538}, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="04630440000000005bfa00000000009075ad65e704c3bda1d7c93596d45b3e0aff000003000000b2e0c3642183bb7a58150946e40d6e491f10393ff95549b1bbe0600fbd0437b1092d71883bce381282d629d74007248842aee1502f86ff0deb3959d3c3f117b1cd6e21538045a03e06af4e9541b1480a7ee2c6299ffc87d0668e704411e2b30089cc9b80081feeb13e3ea43f8c914034bf4fc9b11869d08d8ec5837febfb1ffe9288729d4b7c6e04ec91c28e4fed459fc1f24e500cc6381d5c1b062d6911d0338f"], 0x0, 0x0, 0x0}) 14:29:35 executing program 2: clock_getres(0x3, &(0x7f0000000100)) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f00000000c0)={0x1, 0x6}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r9, 0xab0a, 0x6) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r10, 0x10, 0x0, 0x10000200) 14:29:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001580)={0xd0, 0x0, &(0x7f0000001380)=[@enter_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3293113db1d0cfb8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/4096, 0x1000, 0x1, 0x23}, @fda={0x66646185, 0x2, 0x0, 0x7}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}, @register_looper, @decrefs={0x40046307, 0x2}, @dead_binder_done, @release, @decrefs={0x40046307, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000012c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x0, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000001280)=""/3, 0x3, 0x0, 0x4}}, &(0x7f0000001340)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x1}], 0xe2, 0x0, &(0x7f0000001480)="c88e661e567233af3bfb12fb2389dbce3f6506e41ced83424da2abdad2b40b936b657632abcc442900b9e2cad5a794ab257e10fdf18fbb9515844d6142c2ab077f3f32c13104c417b7524f3276da56dfc30b033e21532547c89dc13d71ab70e8614ea1b3dbf7bbf89c39ec0c1caa1aafe1932161036bf98b004578792a125d579f87c270d4990805313023120b25581950f726dbd92c47cf13c490beb926a3a9a8094dc8d9396f5a416fd3e08487f524ca16210fed4b81df9bf75c7e3dd1884750d4bb9b305194d304d24939f74bc713ae03bfc1e625b0cc26356e1c68ea2a718baa"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x30, 0x0, &(0x7f00000000c0)=[@acquire_done={0x40106309, 0x1}, @acquire_done={0x40106309, 0x3}, @release], 0x35, 0x0, &(0x7f0000000100)="acec0764ee1eb816f052a5c5b0cdf071c93b604d64459ed24bfda22a40b8a2cd66b78e548c17f5010a125ed36399ae9f8ecdf6c97a"}) 14:29:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="03dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x80900, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x8, 0x68d, 0xe, 0x6}, 0x8) 14:29:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630440000000000f630c40000000000000006400000000"], 0x0, 0x0, 0x0}) 14:29:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0, 0x8}, {r0, 0x44}], 0x20000000000001b3, 0x0, 0x0, 0xfffffffffffffc3e) 14:29:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x7, 0x6610, 0x1, 0x0, 0xffffffffffff0000, 0x8, 0xfffff801, 0x3, 0x3, 0x4, 0x2, 0x2, 0x6751e333, 0x2, 0x0, 0x8}}) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, [], [{0xfffff800, 0x3ff, 0x3, 0x20, 0x100000000, 0x7}, {0xffffffff, 0x2f, 0x1, 0x4, 0x5, 0xffffffffffffffff}], [[]]}) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) accept4$inet(r13, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x800) r14 = dup2(0xffffffffffffffff, r11) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000000"], 0x0, 0x0, 0x0}) 14:29:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x134, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="11634840010000000000000000000000000000000000000013000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="8561646600000000010000000000000002000000000000001b00000000000000852a646600000000", @ANYRES32=r5, @ANYBLOB="0000000000000000000000008561646600000000000000080000000000000000000000000200000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000b63000000634040020000000000000000000000000000000000000011000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r6, @ANYBLOB="00000004000000000000000085616466000000000500000000000000020000000000000002000000000000008561646600000000070000000000000000000000000000002f000000000000009e2bc20277aed90e97a5cac434ec0559d34c7c6c61c7d7c3b54ae5695893b7e4800723d74157616a66da080a7016434fe57af62fd3311563ff36ab53601788737ebd387b7fcb27b681acd8783a1f066a9582afc9c1"], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], @ANYBLOB="05630440020000000f630c40020000000000000000000000046304400300000009631040030000000000000000000000000000000e630c4081000000000000000000000011634840030000000000000000000000000000000000000001000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="0000000000000000000000008561646600000000000000000000000000000000000000001f00000000000000"], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="00108f3b0000378500fe0c40030000000000000000000000c6fa0ed627d26b79ff7826d7682a653b1a9b61b504"], 0x13, 0x0, &(0x7f0000000500)="042f7ca03e2ec7d01016b9ddbfae196454c3b9"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580)='/dev/uhid\x00', 0x802, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000005c0)={0x0, r4, 0x98, 0x6, 0x4, 0x9}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000040)={0x4, 0x1, 0x8001, 0x3, '\x00', 0x73}) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x8480, 0x0) dup3(r3, r2, 0x80000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r17, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffea2) openat$vfio(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vfio/vfio\x00', 0x800000, 0x0) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) r19 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r20 = ioctl$KVM_CREATE_VM(r19, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x3) r21 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r22 = ioctl$KVM_CREATE_VM(r21, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r22, 0xae41, 0x0) r23 = ioctl$KVM_CREATE_VCPU(r22, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r23, 0x0) poll(&(0x7f00000006c0), 0x0, 0x957) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup3(r2, r5, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb06da4067c0dd86}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x3, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x805) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0401010000000071d93a112d7e1e53ad95d41a4648f2cecfea71ca62829d5600ad5fe34eb78457473fbdb91ad39140625c561bc2e22ba81da98a75ea8c6bcd22d105f211315d7509f03aa4e6c39b71690804293dcf623df58bb51cf2f4829560f4c62a9df55e0b8553a3960dce5cd70455d2a97cc3c9295bbd37b2c56ca8d5218262e6e9c8de1866631b6faaa4e9763f1a89c6e82e40aa8de2f02440ae6cf6e8474106e40cfe743499dae4e3ca89a1db93bb597f3e5609d6ba5c48fb8a"], 0x0, 0x0, 0x0}) 14:29:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x40000) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) [ 357.468758] binder: 17788:17791 unknown command 65796 [ 357.483127] binder: 17788:17791 ioctl c0306201 20000000 returned -22 14:29:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/\xf4Rnder#\x00', 0x0, 0x1001) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r3, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002500)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000002600)=0xe8) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000026c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x24, r3, 0x614, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) 14:29:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) r1 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4820000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002c0000032cbd7000fbdbdf2500000000005f28d51683236ee3e66909718f8a094df08cfdbc43292e46578b9dd91e31b9c4c295cc23249adf00"/72, @ANYRES32, @ANYBLOB="d4f10100000204"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) recvfrom$packet(r0, &(0x7f0000000140)=""/15, 0xf, 0x10001, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x202, 0x0) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f00000000c0)) fallocate(r3, 0x10, 0x0, 0xffff) 14:29:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x60e223, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) 14:29:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffff24, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) 14:29:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r2) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) [ 357.958101] binder: 17818:17821 unknown command 0 [ 357.982046] binder: 17818:17821 ioctl c0306201 20000000 returned -22 [ 358.009111] binder: 17818:17823 unknown command 0 [ 358.026732] binder: 17818:17823 ioctl c0306201 20000000 returned -22 14:29:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000040)=0x1ff) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='lo\x00', 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0463044000"/24], 0x0, 0x0, 0x0}) 14:29:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x1, 0x4}, @fda={0x66646185, 0x9, 0x2, 0x39}}, &(0x7f0000000040)={0x0, 0x18, 0x38}}}, @clear_death], 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmmsg$sock(r1, &(0x7f0000001780)=[{{&(0x7f0000000280)=@hci={0x1f, r2, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="e22a0a0c1527c0f56594f7139a157efdf44b54c48709f076eab5b13042c9abd81c5ccab87e87d73772fb1748737186d362f844d85419d803463b38ae4bc6ce9d760ad35822a08428762354a837e3ca5040a27422d3323681e8c0c5cf7dc79109a231b7ea772eff442fc0997c236ae48376d071211df7091f6ce9b45e113a72ea1f23979e0fdb4265c8f730d6f90d1cf33ee1e8680d787c287fdec653f579d38106793934eca62f70b7d58ca8b815dda2019776e09a", 0xb5}], 0x1, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xa8}}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000540)="3854a1208ef2f194f6455fd0d0b824233eb0dc6994a42483c056b3778d3f63230f00b6dfae2365c9bfeb4f6835dc68e8c11450a4700d3b33bfdb07cb1da2fadf6f347c0c1b8b15584afdb26d62a6", 0x4e}, {&(0x7f00000005c0)="9189d3fb1b88879c726e041e2dcf0a370c2e8e840ffe1aaca4c7a1c95603494d6b65d137e6d8e86935e9b315f31016c34c776f769810c3", 0x37}, {&(0x7f0000000600)="8179c8e4be692a6ac12b4f81ed82fbb3b826a1768068a68b8283737f2a37357983e6fc89e28fb838b1f5c2295c9eb40197997cc49ae88a9451ff2b4f2341e512848f01d151ca8f3f2f3fc36e3c574d5e11a104a89fba7353cb04300e3506581f5be398ef551c6464608ecefcf0a3f2faa1c8b22b75f1dadc6899f82d9634f52ab21b9d8c8abe5c9f9f9c443a176a88c860f24afc84471ca769abd5a765b5eab28e45457d7bc0e8ae1f8e7aa73c14f0c3ae90b67ab57fc55ff05d14a861dcfde8f20df90772a0ebaa5dd99292aee3644940ffe79347fdaa01b4fd230ca61907d93f8f1b3d3729abc211b8", 0xea}, {&(0x7f0000000700)="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", 0x1000}], 0x4, &(0x7f0000001740)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}], 0x2, 0x4000000) 14:29:37 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r3, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={r6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r6}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r6, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r7, 0x7fff, 0x20, 0x1}, &(0x7f0000000100)=0x18) 14:29:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f00000002c0)={0x20, 0x0, 0xd36, 0x9, 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r9, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0, 0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r12, 0xc010640b, &(0x7f0000000200)={0x0, 0x0, 0x953d}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)={r10, r13}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0, r14}) r15 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0963104000000000000000000000000000000000000000000000000000000000000000ff00"/76], 0x0, 0x0, 0x0}) [ 358.561023] binder: 17842:17844 unknown command 0 14:29:37 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x2000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r2) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r2}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x10000000}, 0x200990d1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r6 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r9, 0xc0505350, &(0x7f0000000080)={{0x1}, {0x6, 0x1f}, 0x2f01, 0x0, 0x8}) ppoll(&(0x7f0000000200)=[{r6}, {r5}, {r5, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0x8}, 0x0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 358.584263] binder: 17842:17844 ioctl c0306201 20000000 returned -22 14:29:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$packet(r2, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001340)=0x14, 0x7b349b1dea8923e8) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000001380)={@remote, 0x6a, r5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0963104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00"/76], 0x0, 0x0, 0x0}) 14:29:37 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000680)={&(0x7f0000000240)=[0x1000], 0x1, 0x8000, 0xfffffffc, 0x1, 0x2, 0x7fff, {0x1f, 0x135, 0x4, 0x1f, 0x1, 0x7, 0x0, 0x2f17, 0x20, 0xfb52, 0x3, 0x547, 0x80000001, 0x3, "7ca2ddc1e1fd2b5181408683ce6200bdd860b638b064e46632ffd55cad582103"}}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c0045005, &(0x7f0000000000)=0x7b) r5 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x400) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f00000004c0)) r6 = mmap$binder(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r7) mknodat(r8, &(0x7f0000000140)='./file0\x00', 0x400, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_S_PRIORITY(r9, 0x40045644, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x90, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/221, 0xdd, 0x2, 0x29}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/175, 0xaf, 0x1, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/27, 0x1b, 0x0, 0x1a}}, &(0x7f0000000480)={0x0, 0x28, 0x50}}}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x3}, @clear_death, @free_buffer={0x40086303, r6}, @dead_binder_done], 0x6e, 0x0, &(0x7f00000005c0)="1c50d33c6bf92621ea727b99b0555a5577a1257a6dcc39aa6db5052f0c1c1141f4fba688920d7b75e1d9ef98fd025afee2de7566b32fe69a7a1e1e93ada50964044eaa7f8649709144bf7168bc179955ef634de18d4d57c3a9e721e920bdf36d040e4581669063b7380788d8a6fd"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffda4, 0x0, &(0x7f0000000040)=[@increfs_done, @decrefs, @free_buffer={0x40086303, r6}, @clear_death], 0x0, 0x0, 0x0}) [ 358.654419] binder: 17848:17850 unknown command 1074160388 [ 358.669801] binder: 17848:17850 ioctl c0306201 20000000 returned -22 [ 358.776032] binder: 17853:17858 unknown command 0 [ 358.814877] binder: 17853:17858 ioctl c0306201 20000000 returned -22 14:29:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdc8) r5 = fcntl$dupfd(r1, 0x203, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) 14:29:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept$ax25(r1, &(0x7f00000000c0)={{0x3, @null}, [@default, @remote, @remote, @default, @bcast, @remote, @bcast]}, &(0x7f0000000040)=0x48) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x101000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000280)={0xfb, 0x5, 0x14, "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"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200, 0x0) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r12, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r14 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x126) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000300)={r15}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000180)={r15}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000200)={r15, 0x20, 0x2, [0x7f, 0x3]}, 0xc) 14:29:37 executing program 0: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x3}], 0xffffffffffffffe9, 0x0, 0x0}) 14:29:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000002, 0x12, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) fallocate(r1, 0x31, 0xfc, 0x200) signalfd4(r6, &(0x7f0000000040)={0x5}, 0x8, 0x0) 14:29:37 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) ioctl(r0, 0x1001000008912, &(0x7f0000000240)="11dc030d5e0b85738a65a87fdab60c1b8ae911cfe47bf070") getpgid(0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x400000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000480)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000380)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x77}) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@nfc_llcp, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, @empty, @loopback}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) fchmod(r2, 0x29) ftruncate(0xffffffffffffffff, 0xa48204) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(r4) bind$inet6(r3, 0x0, 0x0) memfd_create(&(0x7f0000001600)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4c9622eafaac2444, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000100)=0x1000) fallocate(r5, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 358.922288] QAT: Invalid ioctl 14:29:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000240)={0x800, 0x1, 0x5, 0xfffffff9, 0x70208d7f, 0xd14, 0x14b0}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2e141) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r4, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="65acc8f3a8feb52a31a1d90ba9dac9a444a70ab5bf8e2d7aff0f0000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000300)={r7}, &(0x7f0000000340)=0x8) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r8, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="c777a6e709e5b1ccf21c3a0447ef3d2b0ea3a29cc6be86613d6cbbbcc2280833a3d7c285d963787a38b202cd26ca47d819e8eefc211f468f048dad0eeb7635b6d6ee85964afb836b8d35cc49cfe1decccde25180fd76f6494561fd30da8902ae1c46475d3e998c0c4e9bf3f8ce98b4e48dd3f6d0fb18681b5ea335588ea9e0478ef17221d345692011817666711c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000300)={r11}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000180)={r11}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180)={r11}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000000c0)={r7, 0x8000}, &(0x7f0000000100)=0x8) r12 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) r13 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) dup2(r0, r13) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) setsockopt$netrom_NETROM_T1(r15, 0x103, 0x1, &(0x7f0000000380)=0x5, 0x4) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r12}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x3) fsetxattr$trusted_overlay_opaque(r17, &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x5) [ 358.969191] QAT: Invalid ioctl [ 358.981882] binder: 17868:17875 ioctl c0306201 20000140 returned -14 14:29:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x8e5039814de44e30) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000040)=0x1) 14:29:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000000c0)=@profile={'changeprofile ', 'mime_type-^lo[-.\x00'}, 0x1f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="066304400000e500000000000000"], 0x0, 0x0, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x440001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) r4 = semget(0x0, 0x4, 0x480) semctl$GETNCNT(r4, 0x0, 0xe, &(0x7f00000002c0)=""/114) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000280)={0x401, 0x40, 0x8001}) r5 = accept4$alg(r1, 0x0, 0x0, 0x80000) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet6_dccp_buf(r6, 0x21, 0xf, &(0x7f0000000100)="ee03621bf73ed42a94508ac9f349e55747303c4258bce29bea38c68953589024dd7eb07a7b862fc0659ef95f8b9ef49e361b7c17d6224add4be756cc8a8c923b18d13f2c41e93b7bf05a2a8997fa8b4f0fa5c9ae142413ba6b202bad5f6fb19254031eb47772a00cdf3900d36dd4ad4753f2ace7fc8b3f53316ccda00aae5140a167117c8ebb6d191c4ed7b7657b8c9430084dd1a47eab53927f9758bf51fc88dac942c6d04c318c66a7dc35d2bd85898532852757973bbbbc07e29c9d1e09196855515e854126bbd2bc7382216f17067af2801f96c3238bfd1dc3a94c3df00691dc080144cb60", 0xe7) 14:29:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0x250c) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000100)={0x9, 0xd1, "8770aa17139e3884ef2d560eb731f0cc1d5e2d25cd89860d5d7cab7d0baa83d821f6547865fc5a516f7cbf859ff873b7f43ffc618698a0a6397b66b4aea94add48a27c590d0329f9fd26e85e3b74a466ebc575868f5ffa9c0eae7ab412c9462fb038b4e6f7f151185658fdb20e944ed45db39a16cfe2ca7313736ba78c9a066dde75c863b5c17d2b85ff524e1b5ae3d2ffc537bc92840b6daaf80fe824cf88662894ad574731b862e405dc6f3f593089244e3ff3f77844d725eb56532f1ef1c5f9f6b5028659b991f155d05d6b79ecf708"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 359.083789] binder: 17883:17885 unknown command 0 [ 359.088880] binder: 17883:17885 ioctl c0306201 20000000 returned -22 [ 359.115810] binder: 17883:17885 ioctl 8912 400200 returned -22 14:29:38 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80080, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getpeername$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) 14:29:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x9, 0x4000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="2e65319d743ea252c23b651b4921da1b", 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4220, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x3, @vbi={0xd30, 0x3, 0x1, 0x49433553, [0x8000, 0x7], [0x0, 0x8], 0x1}}) 14:29:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0xa7cc032896e14dc1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x4000, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'veth0_to_bridge\x00', 0x2}, 0x18) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r7 = dup3(r1, r6, 0x80000) sendmsg$nl_generic(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x17, 0x10, 0x70bd28, 0x25dfdbfd, {0x11}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 14:29:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x2, 0x101000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000540)=0x1) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f0000000040)={{0x81, 0xd1, 0x1, 0x7, 0x40, 0x8}, 0x9}) fsync(r2) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r5, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000300)={r8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000180)={r8}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000580)=@assoc_value={r8, 0x1}, 0x8) r9 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$PPPIOCDISCONN(r11, 0x7439) r12 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$IOC_PR_CLEAR(r12, 0x401070cd, &(0x7f0000000080)={0x80000001}) dup(0xffffffffffffffff) recvmsg(r10, &(0x7f0000000480)={&(0x7f00000000c0)=@tipc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/67, 0x43}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/198, 0xc6}, {&(0x7f00000003c0)=""/52, 0x34}], 0x4, &(0x7f0000000440)=""/50, 0x32}, 0x0) ppoll(&(0x7f0000000200)=[{r9}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) [ 359.269144] QAT: Invalid ioctl 14:29:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2006, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:29:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7ff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000100)=r5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$tipc(r2, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r6, 0x10, 0x0, 0x10000200) 14:29:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x80000000, 0x494080) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000080)={0x40, 0x7}) unshare(0x10000000) fallocate(r1, 0x10, 0x0, 0x10000200) dup3(r2, r2, 0x80000) [ 359.323324] QAT: Invalid ioctl 14:29:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0xcf00, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000280)={0x0, 0x7f}, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x31, 0x0, 0x2, "941cbb30240f7d7a61dbc4e425cbaee1", "a639caa6a6a095d878d76c0673c144efad9c8a397d2c6a371d085e43"}, 0x31, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r5 = dup(r4) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f00000001c0)={0xfffffffa, 0x40000000, 0x2, 0x6}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x9) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r6, 0xffffff01, 0xf4520ddaad81f244}, 0xc) 14:29:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xc98f, 0x800000) dup(r7) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) [ 359.403401] binder: 17912:17919 unknown command 0 [ 359.422580] binder: 17912:17919 ioctl c0306201 20000000 returned -22 14:29:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdcb, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:29:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000580)='ip6_vti0\x00') [ 359.553396] binder: 17930:17932 unknown command 0 [ 359.558387] binder: 17930:17932 ioctl c0306201 20000000 returned -22 14:29:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x1, 0x79, 0x1f, 0x40, 0x0, 0x200, 0x800, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040)}, 0x800, 0x9, 0xffff0675, 0x9, 0x6a7, 0x2, 0x1}, r3, 0xf, r5, 0x8) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) dup3(r0, r6, 0x0) 14:29:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000076304400000000006630440060000000f630c401000"/52], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_dccp(0xa, 0x6, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x5c771f2f50ca59d4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(0xffffffffffffffff) r4 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) sendto$inet(r4, &(0x7f0000000140)="523af15c149c944bb650df4c6feb31b82cb707098ba358", 0x17, 0x20000000, &(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x6) 14:29:38 executing program 0: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/83) 14:29:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f630440000000000000000000000001dbde900f3365c20000000000000000"], 0x0, 0x0, 0x0}) 14:29:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r1, 0x1}}, 0x18) [ 359.766520] binder: 17942:17946 unknown command 1074029327 [ 359.781589] binder: 17942:17946 ioctl c0306201 20000000 returned -22 14:29:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x80, 0x0, &(0x7f0000000100)=[@enter_looper, @increfs_done={0x40106308, 0x2}, @acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x2}, @request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x4}, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x2}], 0x81, 0x0, &(0x7f00000001c0)="dc37aa5736cdc95d51866995ab0b8f635356c7e67f3f1fdb20aae4c5864ad3f48f5378885ea72611fc406a76329cc1952a08c39905f6f31341b2d8ea010afcf1204035a4d6cf8ee04ac0e6254cd5fcad7cd535d10e4fb097a8beb0ba2939d833ab0a88e2b443629796f1665f825db2672b809a918e08f47e7981fde2b98778f55b"}) [ 359.817214] binder: 17942:17952 unknown command 1074029327 [ 359.852215] binder: 17942:17952 ioctl c0306201 20000000 returned -22 14:29:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x10000) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) 14:29:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x24100, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x29, "755ac6344e59b5a06c492a0d0d827b9af2c55f6d8efa0ecae716b307b81bc1c13e4ff916e30b80c503"}, &(0x7f0000000400)=0x4d) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xb7}, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_ASSIGN_PCI_DEVICE(r6, 0x8040ae69, &(0x7f0000000300)={0x5, 0x100, 0x8, 0x1, 0x80000001}) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r4, &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000200)=""/235) r8 = fcntl$dupfd(r7, 0x406, r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$RTC_PLL_GET(r10, 0x80207011, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 14:29:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x9, 0x800}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1e, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04630440000000bb30ce4de827000f630c400000000000085749376130e6"], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 14:29:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/\x00\x8b_\x00\b\x00\x00\x00io\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x4, 0x800000) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000540)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) 14:29:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x100}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="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") getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000080)=0x80, &(0x7f00000000c0)=0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r3, 0xe2, 0xfffffffffffffffc, 0x3) [ 360.073929] binder: 17971:17977 ioctl 401070ca 20000040 returned -22 [ 360.109136] binder: 17971:17977 unknown command -397554128 14:29:39 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x19G\xde\x97_\t?\xf3Y\x12\"p^\xc1\x0fR\xa4q\x8c\xaf\x80\xae\xce\xbdHm\xc5\r>\xfa\xb3\x06\xd8h\ta\xf4\xcb/k\x9a\x9e\x91\xde\'\x167x\x92!\x04\xa1\xd3\x92\xeb\x11\xf6\xb67\xa1\xc1/Y\xbf\x04', 0x6) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x3) sendfile(r0, r0, 0x0, 0xfec) 14:29:39 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@sha1={0x1, "23a20148733b3a6a6912a3b174948f1bb3a175f9"}, 0x15, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08631040000000100000044000000000066304a070ffe140000000000f630c400000000000000000000000000300000078b00000f9065570"], 0x0, 0x0, 0x0}) 14:29:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000080)=0x1f, 0x4) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x88281, 0x0) accept4$bt_l2cap(r3, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) 14:29:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/\x00\b\x00\x00\x00\x00\x00\x00b0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000000c0)=""/176) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x4080) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000180)) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000080)=0x2) [ 360.127517] binder: 17971:17977 ioctl c0306201 20000000 returned -22 [ 360.138797] binder: 17971:17985 ioctl 401070ca 20000040 returned -22 [ 360.167170] binder: 17971:17977 unknown command -397554128 [ 360.175966] binder: 17971:17977 ioctl c0306201 20000000 returned -22 14:29:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002a40)={0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', r0}, 0x10) r2 = gettid() r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x161) perf_event_open(&(0x7f0000000400)={0x4, 0x70, 0x0, 0x7, 0x0, 0x7, 0x0, 0x400, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfda800, 0x0, @perf_config_ext={0x4, 0x1f}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffc}, r2, 0x0, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000000)='&@[\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0xca6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8) 14:29:39 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x24000, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r4, 0x0) ioctl(r4, 0x7e, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r5, 0x10, 0x0, 0x10000200) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x4e20, 0x200, @remote, 0x10000}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="3858dcafd5b9f43c7122749cc6a5351316b3c1fd81d4dd6764062aa0f5adbff0bf88d2b9bc9ee754d9acfb62cffbe9df3687b08906df066a2cba9d75a32458ff267c93b2291c7d059213d6b16327933e6038f5a68dd6ea0ac7d4f7eb3eab2dc87bb93094aaeff3ab5ba376c063f8330666fc1bed1b72283d52a2bb5469c63ade89c007a78c65885d32ae2d8abbd49e38065de8bfeb2fcc155040dfa0154853fb2dde8a9b70999d266475249ee587bcd80ec828c05d1a12db84e86af348bb1fd0e3b75fc093572a0de93ffaa0fee61f7f1bfeced146", 0xd5}, {&(0x7f0000000040)}, {&(0x7f00000001c0)="5bec2e252c35e862b079f9bafb98bc56e18481e838d5949a5ec68e133901de6b858d53599c45956854fd8528cb23e4f8f5aad8cf232bde65ca3fb1d4951ca62a877d380422f0281f", 0x48}], 0x3, &(0x7f0000000280)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x1, 0x1, [], [@enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x787}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x33, 0xc, 0x1, 0x2, 0x0, [@dev={0xfe, 0x80, [], 0x16}, @loopback, @local, @dev={0xfe, 0x80, [], 0xd}, @empty, @loopback]}}}], 0xb8}, 0x40) 14:29:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8, &(0x7f0000000240)="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") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) [ 360.204686] audit: type=1326 audit(1569853779.109:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=17989 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c86a code=0x0 14:29:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x125322, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getpeername$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r5, 0x1, 0x6, @remote}, 0x10) fallocate(r1, 0x10, 0x0, 0x10000200) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x105000) accept4(0xffffffffffffffff, &(0x7f0000000200)=@can, &(0x7f0000000280)=0x80, 0x80c00) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000080)) r9 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SIOCGIFMTU(r9, 0x8921, &(0x7f00000002c0)) 14:29:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@md5={0x1, "5a8450711636b0c555d35a5424c7420d"}, 0x11, 0x2) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 14:29:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x80205, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) 14:29:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x3}) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x12}, 0x10) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:39 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0xffff]) 14:29:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="086310400074ea00000000000000000000000000076304400000000006630440000000f93e82e5e65ba61f9a706308427f000f63"], 0x0, 0x0, 0x0}) 14:29:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xb8, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xc8d0c262632f3035}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r4}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:39 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 14:29:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f00000003c0)={0x2, 0xa75e9bb283453454, @raw_data=[0x4, 0xffffffff, 0x1, 0xffffffff, 0x3f, 0x0, 0x7fffffff, 0x6be, 0x7, 0x8, 0x81, 0x9, 0x2, 0x9538, 0x2, 0x2d71]}) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, 0xf, 0xb, 0x100, 0x70bd2c, 0x25dfdbfc, {0x1, 0x0, 0x8}, [@generic="7dc965418cd1b3ba5b7fc1d6384b7e4107b12af9e29732aaf9b5b3d66b3bea4d045db1036b3068f60185763eb8056752a8534c4a866101b17b3ee26a9f2a0982828789a2783ca424e2b984e8e98f714d2be34af4ca5d8f9d942bea8906cf3ede56e52e6d4b4151e88277d3bc399963444ac7fe87fffacce30c56d338436aeaa9e4d5e6e14531a69f748d117f65412e8aaf4272120fd49320cd09891dbd3c9406747bce5b614bf938a972ce258d56c426fe32acacfe9a0cd1934e14d3a36a958c72b38f", @generic="e16f40b425647b5901e90e3935790719fd5640e9738fa2dfc3ba6c594044e137ad310c", @typed={0x4, 0x74}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) io_setup(0x30dbd45d, &(0x7f0000000440)=0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x400000, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000780)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) r18 = syz_open_dev$dmmidi(&(0x7f0000000a00)='/dev/dmmidi#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r20 = dup(r19) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r22 = dup(r21) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/vga_arbiter\x00', 0x202000, 0x0) r24 = socket$isdn_base(0x22, 0x3, 0x0) r25 = syz_open_dev$vcsn(&(0x7f0000000e40)='/dev/vcs#\x00', 0xff, 0x2000) io_submit(r4, 0xa, &(0x7f0000000ec0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x2, r7, &(0x7f0000000480)="69537cb9cb60d11d4e5aede4a9a3a0507ab3c7acd0bd5745", 0x18, 0x6, 0x0, 0x2, r8}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x2, r11, &(0x7f0000000540)="86c901af29ebc34dd7e8c7e6a53f3ebd6a55794942ad50e0f7bff7be37bf4472d507fc52712a3146ab1a25d940f4ab83d981416830a5451e0bf75f8af62a80e814cbc9e2d83e4f673acd9a86afb9df0820857d67446a14ef313cdd5a2a9cf959bcf6704f25c9a6d8b96f4aa872ef4f922bb16d88c0278c3ab6b815b5be87b1c85fcc64a1576a6e9ccf0ce16331d32bd4bfb5e29f3114e5eecaeff1c15924fefe5a27aec73aeee77922180fdfbea3e04108a00ae3223280d8e63895d8a9dd70794b92838dcd5bca9b550cfb6839331a874e08595923b806253254a2b92a98e64b358a28c7fa", 0xe5, 0x100, 0x0, 0x6}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x3, r13, &(0x7f0000000680)="91e484f083493738a419914b673fde22bc232c8ba2cc5dc819584f14380af31c5eeaa3bac09a6085ff6ccc1b5581b2d13ca10ce5970c655eb1b62af6f5799b5fe49a24a5743d9a7cad03a7f290ca2fca0c1945bfe1e3681e61f94b434aa3f1ba8ee9c1d871118f0863bdca534c77972d88638844ef0b8b2eb48d0b1694612dfa772c3abd1dcf37cff2ed18c31aba", 0x8e, 0x3ff, 0x0, 0xe16f57644f03cb15}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x8001, r14, &(0x7f00000007c0)="5e42dd68dc1d6fa42f3c393eac3bf2e60cb59bac8a7c6917d9493d3e1f6140478c2cf5a5883c82591026c7f75a5208c775432d6ab0df91e4ac899d47697a56fdf8dde0fb56e02b0133a21cce20f053c58d58f7112ca7e6f7c07da2116d2f353cf04cbc45269c82a081e972373a7642b471c14f8d66cd9c4fa56d02cf8cbf680ab7ec82c425389cae7c42ace697296eb4fa73a75681aacf678ebd9ae0b561d60fc847873fb4140e98ebf37b6b1f75dc834cedd0948880993c96817afd33309aa3edba8adbf6a1605b58d7c9f62a62d25d95c57447829c1bd59fe0f62f4c311751849cb2d095ba51be02", 0xe9, 0x17f600ef, 0x0, 0x1, r3}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x8, 0x800, r3, &(0x7f0000000900)="dc46fd476e4ffc13c8f24c5c765063fa31717ddab7cae939301d76aced86d13610b9295195967efc96bcccaf500428466b1d551cac574fb76ce0a314cd56de9e1e1a2eaa9bc0812fdac0159bd8fb1a34745c49", 0x53, 0x6, 0x0, 0x0, r16}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x8, 0x3, r17, &(0x7f00000009c0)="d357ba1945", 0x5, 0x9, 0x0, 0x2, r18}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x5, 0x3f, r2, &(0x7f0000000a80)="3382fe003951fee6e9dc0814c814c53ec0b55e8d288ef98201bf684a511f28501488bad77f81b12004ee09a1a92ddfb7daf1ddac4d2d55fe4eadeb57a7616ba06f44a80e40fe8f18d73ea7246d25e3dc96468e1c461cd3451f8f8c067c8fbf87033082266abd4e544af6f33c9e0a1d149554cbe258b3f04b85892ab5b9f10bf646f5d394ef27ac309ac434ee5fd840b3ee3b02751c898b05df5867ac92a1827cd9c44da0f0635e1e4d2f7b770a9326ab9637de846dc56ff5ec0419562a2b672a0c435f7d43e0a1b7863ede", 0xcb, 0x0, 0x0, 0x0, r20}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x5, 0x2, r22, &(0x7f0000000bc0)="367924e828ca92d7d6ab0055fa963ad18cf9c4fe7977045d09dfb8f3b4b6440b7e22552821fff6f1a6cafd45bef9d0cf0a4e7704f3291c9515006f7c540c895158d464f08eb4fba4b1a69cca2a50997297b1695ee43685695ada60f6bf65efe85a0d4e8f18da6eebb5e84649ea926fccd63e7c2009c4f237e75e81104ac82037e6e74198afa0b1f5901c6b7129e60a9de4e7f580fb7951a6", 0x98, 0x2, 0x0, 0x6}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x7, 0x3, r23, &(0x7f0000000d00)="7bc7ebc5db36850705e0eeb1eb8bc77975c03dcb4916777dc360820fa35d1c36f6fb580ff0b21f1dfefadf05ed63bd1d9dbec451303283252beaf627cb0d1700e6015d2229f291a669def41050aea618d31fe8ec5fb99e46390ae200a99e571981d4a309f81d19cab02fa2454588a1d4540570a6ba1585374009095267", 0x7d, 0x2, 0x0, 0x1, r3}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x2e359380399689f1, 0x40, r24, &(0x7f0000000dc0)="2b47be8639575293c25c4a698e596857a8badd40e0e2313a7b61d2b6fa1b552efa839614193b9923958eb37d77af2655eb43d57de1017b6b3a84b26788989ccfe71ea6084a45ec58022ebfa9f199da1de0f7585aa3e05e590c77c6ffc37814a5ea3c15466533f14451bc5cff38a5a2619ab6649dd185b2bb35e561fc756413", 0x7f, 0xffffffff, 0x0, 0x3, r25}]) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x2, 0x7, 0x80}}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in6}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 14:29:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x4b0100, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @cred={{0x1c}}], 0x80}, 0x6010) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c}}], 0x80}, 0x6010) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c}}], 0x80}, 0x6010) getgroups(0x3, &(0x7f00000001c0)=[r5, r6, r7]) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev}}, {{@in=@loopback}}}, &(0x7f0000000180)=0xe8) 14:29:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) unlink(&(0x7f0000000040)='./file0\x00') ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x280000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) [ 360.988351] audit: type=1326 audit(1569853779.889:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=17989 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c86a code=0x0 14:29:40 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) [ 361.114653] binder: 18046:18051 unknown command -421166530 [ 361.140859] binder: 18046:18051 ioctl c0306201 20000000 returned -22 14:29:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000080)={0x80000000, 0x1000}) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) [ 361.166140] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 14:29:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000076304400000000006630440000f630c4000000000000000008f8cb06c00000092ceeb13e196ecb06e9fa1f8152adc768c03a023ec264517a469d291ecf8f4964b9d3fa30bf7ff803d593da6b590e9be45ef1dcef9f40eade79e1688a868338288dcabd0da0507ca713d2f837af0d954919fbe0fc300bd201ad169399b084a6a214d93cfa309bedf2c5ac51a5cdd60199eea769497f3b542a7b212f55daf9dee4f0aa913e423a2e0437246bb6edc2510371ccec68effb6a1f5a6a15c343e719bc38eacf623c5f5bef6073d8a3e7929bb8e5b71ec400f53f66a2718f9d181bad10bb40a1e9b1dde5a2679c1d4a18f13d74696fec29f34648604144930cf0efe79c90920f5c11553bfd16f20731d2d4ae9add420e6e6c751aa21be1819d02efa53ba94cca21a257b4a9ee4b9ad62e80773a4876bdb435905aeaa3a7e252ab7025a335a8e4ea9a93a8305163f05db89fa7e210771af69749472f467dd5538429defa944564a5771979e21c8dc0ba200b9595cec933bfa8ace65810afec23ae6b28152a0612241ddaa25af70697cea3365afd32a89b02e4debbe02b9ebc4bc4b855a932eddf2063b7cfd429ca688b523651601a6bb35cd1d2b75e43f8c5ef0502c00"], 0x0, 0x0, 0x0}) 14:29:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r3}, {r2}, {r2, 0x44}], 0x3, 0x0, 0x0, 0x0) [ 361.271853] binder: 18062:18065 unknown command 64 [ 361.306571] binder: 18062:18065 ioctl c0306201 20000000 returned -22 14:29:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4f, 0x0) shutdown(r0, 0x1) 14:29:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="086310400000000000000000000000000000fe92bd7b04400000000000000440000000000f6300000000000000000000000000008fd7d9248a5183bf800c1f0e0e8b378b6459c04f37"], 0x0, 0x0, 0x0}) 14:29:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) [ 361.411087] binder: 18073:18075 unknown command 1074035645 [ 361.447767] binder: 18073:18075 ioctl c0306201 20000000 returned -22 14:29:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000040)=0x7f, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) 14:29:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) dup3(r0, r1, 0x0) 14:29:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)=0x9) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x10000000004001fc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r8) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f0000000100)={'tunl0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1000000000000007) fallocate(r7, 0x0, 0x0, 0x7fff) 14:29:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xb43) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) 14:29:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() mkdir(&(0x7f0000000040)='./file0\x00', 0x185) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10000003b) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x111100, 0x0) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) fstat(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r13) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r14}}}, @cred={{0x1c}}], 0x80}, 0x6010) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r15}}}, @cred={{0x1c}}], 0x80}, 0x6010) lstat(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r16}}}, @cred={{0x1c}}], 0x80}, 0x6010) getgroups(0xa, &(0x7f0000000280)=[r14, 0xee00, 0xee00, 0xffffffffffffffff, r15, 0xee01, 0x0, r16, 0x0, 0xffffffffffffffff]) r18 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r19}}}, @cred={{0x1c}}], 0x80}, 0x6010) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r20}}}, @cred={{0x1c}}], 0x80}, 0x6010) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010000000000000002000100", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB="02000700", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="020007ab", @ANYRES32=r9, @ANYBLOB="02000200", @ANYRES32=r11, @ANYBLOB="02000700", @ANYRES32=r13, @ANYBLOB="02020100c5e1aabe31bf258c8f829bee27bd712bce324acc8aae99a1516e13e51f4367f5fe9a", @ANYRES32, @ANYBLOB="04003d7b0000000008000100", @ANYRES32=r17, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r18, @ANYBLOB="08000500", @ANYRES32=r19, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r20, @ANYBLOB="10000400000000002000010000000000"], 0x84, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x13, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) 14:29:40 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492565, 0x0) chdir(&(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, &(0x7f0000000340)=@rc={0x1f, {0xf2, 0x6, 0x0, 0x8, 0x1, 0x35}}, 0x80) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x3, 0x3) creat(&(0x7f00000002c0)='./file0\x00', 0x1c1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffffffffffff69}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5807000000000000100000000000000000fffdccd2b4f87628167ee88966a3b6000000", @ANYRES32, @ANYBLOB="0000e8ffffff0000282bf17235e30474685a0012000c0001007665740300000000000000de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffff0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0400002400070500"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000800010063627100c105020004040600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800010025030000000000000000000000000000000000001000050022000000000000007f000000"], 0x45c}}, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x3, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) r8 = dup2(r5, r7) dup3(r8, r6, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r9, 0x4, 0x2000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffcbe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x7, 0x8, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x81}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r10}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r8, 0x0, 0x8, &(0x7f0000000440)='&md5sum\x00', r10}, 0x30) 14:29:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000080)={0x4, 0x64, @value=0x2}) 14:29:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000080)='/dev/nullb0\x00') openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$unix(r5, &(0x7f0000000540)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000140)="c457180e0a633543de912656de98a8d5578b64f5f3cf585acd010938be4f95390418cb7250f34bd4e0fd0ee422bdbdb0cd2bafad22cb130312ff67ea90190bdc61d3591b6531962b564a4b02a09f945ade910579d4729398222a05d4da20", 0x5e}, {&(0x7f00000001c0)="95b828c1c1e55aa3", 0x8}, {&(0x7f0000000200)="acfe9b578714a2fa138fdf07fc91b3ea3d5fb8b5aa4711d122ef90d763996176636896ee9a396d1595547e264b07157b19192d4abb11f734987749b4d0ad083099041d4bba1e0c76fc", 0x49}, {&(0x7f0000000280)="46fb35f6181cbedc4597874d172b5c75a4fdc248802060f3c3983e91f7a9cd0680debcea661ca482330e3d1e559464b182f722cdbf3e8a57e6909c128d879387d76625f8177b9bea670c5910b19a7d0e52e8bd78afcb7a1517f6a1d62fa09095789861ff17fa9401019a247b2b7e52234486f4", 0x73}, {&(0x7f0000000380)="91bea77cb51be518c15f99213efea4538ea15a95b1245f4c89640bb34f74e7e263fc1c0269dd311a8fce70a2f1c83c366bac9cb35c83e3682f1720b460b6635a8ea3efbb036fd84e516a66586be6090d4db4b9070db65c00a37fd55d79716cc10e3cf2c2e9da3f7afc06beaf41febd1824cc140113c237973981e66032c0d2afcd128ff0d35bb514db0cc812cb23b165d4581d3deab8c034f832374f64dd83a9b20d11da628b7c23509eb753eaabf3358503a66ba1ed31e9f93cc1fd2cbb54791c48a49f54d05debe48d7db82a471e8d7ec9a7b7bfcd184613326ab5fa12eeda59dadd7a2241e4dd23aa283bad7bd9c6", 0xf0}, {&(0x7f0000000300)}, {&(0x7f0000000480)="79cced6e4ff43bb1f4f0c3ee83e30e", 0xf}], 0x7, 0x0, 0x0, 0x44810}], 0x1, 0x4414) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fe) ioctl$NBD_SET_SOCK(r1, 0xab00, r7) 14:29:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x280, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000040)={0x1, 0x0, 0x3007, 0x3ff, 0xe0, {0x80000001, 0x9}}) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) [ 361.886403] devpts: called with bogus options 14:29:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08b78e13ff76dbb08b5f6310400000000000d1d1c4be00000000000000000000003d3b75dc00000000066304"], 0x0, 0x0, 0x0}) 14:29:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40200, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0x8, "525bf64c0bb473ee9818e577bff9a5b42bbe582a1b27969b7ae42660da193ef9", 0x2, 0x10, 0x200, 0x3ff, 0x10, 0x0, 0x5, 0x27a}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x80, 0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) ioctl$FICLONE(r2, 0x40049409, r3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r4, 0x10, 0x0, 0x10000200) 14:29:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/24], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4, 0x7, @loopback, 0x7}, {0xa, 0x4e23, 0x6, @ipv4={[], [], @rand_addr=0x1}, 0x6}, r5, 0x1}}, 0x48) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x1d) 14:29:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(r0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, {0x9, 0x8, 0x2, 0x3}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000000)={'teql0\x00', 0x4000000000001, 0x8}) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @reserved}, 0x10) [ 362.034546] binder: 18134:18139 unknown command 328120072 [ 362.073234] binder: 18134:18139 ioctl c0306201 20000000 returned -22 14:29:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f0000000040)}, 0x2, &(0x7f0000000140)}, 0x18) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000076304400000000347630440000000000f6398820000e9ffffff000000000000"], 0x0, 0x0, 0x0}) [ 362.140597] binder: 18144:18147 unknown command 0 [ 362.167651] binder: 18144:18147 ioctl c0306201 20000000 returned -22 [ 362.200671] binder: 18150:18151 unknown command 1074029383 14:29:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) write$selinux_access(r1, &(0x7f0000000100)={'system_u:object_r:hald_keymap_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x100000001}, 0x6b) delete_module(&(0x7f0000000180)='#\x00', 0x200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) ustat(0x9, &(0x7f0000000040)) [ 362.226753] binder: 18150:18151 ioctl c0306201 20000000 returned -22 14:29:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000000000000076304400000e0ff05630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:29:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) set_tid_address(&(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) [ 362.606354] devpts: called with bogus options 14:29:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socket$can_raw(0x1d, 0x3, 0x1) 14:29:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x228000, 0x0) getsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$KVM_GET_MP_STATE(r13, 0x8004ae98, &(0x7f0000000240)) dup(r12) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x31, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYBLOB="2687990e3d50f8566a6bda586dad0972b958fbcff6d7c5f76a942c65e7fbea4235917326a3", @ANYRES32=r10, @ANYPTR64=&(0x7f0000001400)=ANY=[@ANYRESHEX=r7, @ANYPTR64, @ANYBLOB="ac8e803f91252665ec2b9788fa48dcc0a4150548931d52b3ea38bd914c8d2f1a6eef43a6fc3c4a1ecc32d46c3cef5e7693e1904f37235913242bb20c5ff69c560af7809ee75c6b3415e4a202764e17a04a1a0c4193b8fc856bf7dff1d9bb3ec427fc5359b483e23d9bca5bddc3d360cdde6985ade9f49357fe3e7149b56489c3cf4a1c8d39cc179e58eae80c31cb614efd9be10244a43b6c98f68ba6f99fa2fc605e202324b12f84adad79ffb08350e24b22ec81952d3fb1f4cdcf2f0d9aa832be644a456bde9abda7ebd9005fae43736c5a716c0f5f42d498c8db1e872e709f07315ef92a4ce6d0a947194140b6d0ba", @ANYRES16=r11, @ANYRES32=r12, @ANYRES16=r2, @ANYBLOB]], @ANYRESOCT=r6], 0x0, 0x0, 0x0}) 14:29:41 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492565, 0x0) chdir(&(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, &(0x7f0000000340)=@rc={0x1f, {0xf2, 0x6, 0x0, 0x8, 0x1, 0x35}}, 0x80) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x3, 0x3) creat(&(0x7f00000002c0)='./file0\x00', 0x1c1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffffffffffff69}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5807000000000000100000000000000000fffdccd2b4f87628167ee88966a3b6000000", @ANYRES32, @ANYBLOB="0000e8ffffff0000282bf17235e30474685a0012000c0001007665740300000000000000de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffff0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0400002400070500"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000800010063627100c105020004040600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800010025030000000000000000000000000000000000001000050022000000000000007f000000"], 0x45c}}, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x3, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) r8 = dup2(r5, r7) dup3(r8, r6, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r9, 0x4, 0x2000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffcbe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x7, 0x8, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x81}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r10}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r8, 0x0, 0x8, &(0x7f0000000440)='&md5sum\x00', r10}, 0x30) 14:29:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) getpeername$unix(r2, &(0x7f0000000100), &(0x7f0000000040)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x19c, 0x0, &(0x7f00000007c0)=[@request_death={0x400c630e, 0x1}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/95, 0x5f, 0x2, 0x28}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/147, 0x93, 0x0, 0x40}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}, 0x1200}, @increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000980)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/53, 0x35, 0x1, 0x34}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1f1141a26d1644, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/100, 0x64, 0x0, 0x15}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x0, 0x2, 0x35}}, &(0x7f00000005c0)={0x0, 0x28, 0x40}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @flat=@handle={0x73682a85, 0x14, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/26, 0x1a, 0x1, 0xb}, @fda={0x66646185, 0x2, 0x2, 0x6}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f0000000780)={0x0, 0x28, 0x3f}}, 0x400}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockname$tipc(r8, &(0x7f0000000180)=@name, &(0x7f0000000400)=0x10) sched_yield() 14:29:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xffff0001, 0x10}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x6}, 0x8) 14:29:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release={0x40046306, 0x1}, @clear_death], 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x9deef13d7cf5304c) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x0, 0x4, 0x100000001}}, 0x28) [ 362.744550] devpts: called with bogus options [ 362.764794] binder: 18179:18182 unknown command 1717991472 [ 362.776722] binder: 18179:18182 ioctl c0306201 20000000 returned -22 14:29:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x800, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000d80)=""/142) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000c40)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e24, 0x123f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x87, @empty, 0x6}], 0x94) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x200, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x3, "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", 0xb9, 0x4, 0xffc0000000000000, 0x2, 0x100000000, 0x1, 0x3}, r4}}, 0x128) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 14:29:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3ff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1b00, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 14:29:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x4100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffb1, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @clear_death], 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xd5, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$UHID_CREATE2(r4, &(0x7f0000000580)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x47, 0x3, 0x0, 0x3, 0x4, 0x6, "cac9af20d93609d68267fb3f5e9ea637f3e8146b3eab102a3972fe9cac27fde3aeee65d0443f34262cc1e6633105ee2cc4fbf6a6c2f4af6b314d8d41bea13f86bc9f8c4f37df21"}, 0x15f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r9, 0x80404508, &(0x7f0000000d80)=""/142) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000c40)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e24, 0x123f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x87, @empty, 0x6}], 0x94) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x200, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r10, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x3, "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", 0xb9, 0x4, 0xffc0000000000000, 0x2, 0x100000000, 0x1, 0x3}, r11}}, 0x128) write$RDMA_USER_CM_CMD_DISCONNECT(r8, &(0x7f0000000280)={0xa, 0x4, 0xfa00, {r11}}, 0xc) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000200)={0x6, 0x2, [{0x3ff, 0x0, 0x7}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x6}, {0x80000001, 0x0, 0x9}, {0x18, 0x0, 0x9}, {0x1, 0x0, 0x100}]}) 14:29:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r4, 0x0) close(r4) 14:29:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) 14:29:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x101000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630440000000000f630c000100"/24], 0x0, 0x0, 0x0}) 14:29:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x100000001, 0x1) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x0, 0xc133, [], &(0x7f0000000080)=0x9}) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x10000200) 14:29:42 executing program 3: 14:29:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:29:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe46bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1, 0x4200}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r1, 0xffffffffffffffff) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f00000002c0)) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_init_net_socket$llc(0x1a, 0x6fa7035ae428ecc7, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x4001fc) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) sendfile(r4, r6, 0x0, 0xbd98) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r12, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r13, 0x0, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r15, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0x4, 0x8004, 0x7fffffff, 0x3, 0x2, 0x8, 0x101, 0x0}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000380)={r16, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000240)=0x84) 14:29:42 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492565, 0x0) chdir(&(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, &(0x7f0000000340)=@rc={0x1f, {0xf2, 0x6, 0x0, 0x8, 0x1, 0x35}}, 0x80) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x3, 0x3) creat(&(0x7f00000002c0)='./file0\x00', 0x1c1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffffffffffff69}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5807000000000000100000000000000000fffdccd2b4f87628167ee88966a3b6000000", @ANYRES32, @ANYBLOB="0000e8ffffff0000282bf17235e30474685a0012000c0001007665740300000000000000de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffff0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0400002400070500"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000800010063627100c105020004040600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800010025030000000000000000000000000000000000001000050022000000000000007f000000"], 0x45c}}, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x3, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) r8 = dup2(r5, r7) dup3(r8, r6, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r9, 0x4, 0x2000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffcbe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x7, 0x8, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x81}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r10}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r8, 0x0, 0x8, &(0x7f0000000440)='&md5sum\x00', r10}, 0x30) 14:29:42 executing program 3: 14:29:42 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492565, 0x0) chdir(&(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind(0xffffffffffffffff, &(0x7f0000000340)=@rc={0x1f, {0xf2, 0x6, 0x0, 0x8, 0x1, 0x35}}, 0x80) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x3, 0x3) creat(&(0x7f00000002c0)='./file0\x00', 0x1c1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffffffffffff69}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5807000000000000100000000000000000fffdccd2b4f87628167ee88966a3b6000000", @ANYRES32, @ANYBLOB="0000e8ffffff0000282bf17235e30474685a0012000c0001007665740300000000000000de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffff0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0400002400070500"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000800010063627100c105020004040600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800010025030000000000000000000000000000000000001000050022000000000000007f000000"], 0x45c}}, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x3, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) r8 = dup2(r5, r7) dup3(r8, r6, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r9, 0x4, 0x2000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffcbe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x7, 0x8, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x81}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r10}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r8, 0x0, 0x8, &(0x7f0000000440)='&md5sum\x00', r10}, 0x30) [ 363.547352] devpts: called with bogus options 14:29:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x2, 0xfffc, 0x8, 0x2, 0x2, 0x8, 0x1000, 0x80, 0x0}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x40, 0x80000001, 0x5, 0x20, 0x3}, &(0x7f0000000440)=0x98) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="04b02f58255577ceb4e9d09a31", @ANYRES16=r3, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x24000004}, 0x180) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r5, 0x10, 0x10000, 0x10000200) 14:29:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) r3 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x802) splice(r2, &(0x7f0000000040), r3, &(0x7f00000000c0), 0x7, 0xd) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xc8, 0x2d, 0x100, 0x70bd2d, 0x25dfdbff, {0x20}, [@typed={0x64, 0x4c, @binary="abb3ab2966bb884d724c3b610e2d0d8ebda7d52995b5e30fdafacd789cd5fbd666ab592ab6289e221b78262e1c8619c9ab94acbfdfd9da72e042dca90759c726d22087b21fe1688a4bcf68fefd2648a7b69b3b43e0cf5b8a65b1b462c7"}, @nested={0x48, 0x10, [@generic="05588fe57e75c6cf5becdcec3948a6bba99041f1cde07a030c3104f4dbed9b42dd79cadd9835813b7f4da40b3dd7de", @typed={0x8, 0x4d, @u32=0x57}, @typed={0x4, 0x56}, @typed={0x8, 0x72, @fd=r4}]}, @typed={0x8, 0x2f, @u32=0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000002}, 0x40) 14:29:42 executing program 3: [ 363.639698] devpts: called with bogus options 14:29:42 executing program 3: 14:29:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x0, &(0x7f0000000140), 0x20000, &(0x7f00000002c0)=ANY=[@ANYBLOB="756e695f786c614cf4fb798e18e636f674653d312c696f6168637209d8880ef4fd8d54e87365743d63705f36362c757466383d312c73576c1fe0352d4e290929fd642247a588b55e2a14b51ddcfb698cee316811800d9df30d257e5e91791bbfc150d33befce196a1a38141f3c3440dc"]) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x94c01, 0x0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)=0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0xd958) 14:29:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) symlinkat(&(0x7f00000002c0)='./file0\x00', r7, &(0x7f0000000380)='./file0\x00') r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, r8, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, '\nip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r8, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @empty}}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="8a9e5c40e3aeed3249aa0a495541f292"}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xde}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 14:29:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x67, 0x40, 0x80, 0x1, 0x0, 0x5, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x100, 0xc, @perf_config_ext={0x9}, 0x4, 0x7ff, 0xffffffff, 0x7, 0x88, 0x1, 0x8000}, r1, 0xf, r2, 0x2) [ 363.879391] IPVS: persistence engine module ip_vs_pe_ [ 363.879391] ip not found 14:29:43 executing program 3: 14:29:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0x20, 0x0, 0xff, 0x100}, {0x0, 0x3, 0x0, 0x80000000}, {0x8, 0x4, 0x8, 0x6}, {0x20, 0x4, 0x7}, {0x59a7, 0x39, 0x6, 0x9}, {0xffe0, 0x28, 0x1f, 0x20}, {0x1f, 0xff, 0x4, 0xffc00000}]}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) 14:29:43 executing program 3: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xb102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000240), &(0x7f0000000400)=0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000340)={0x3, {{0x2, 0x4e24, @remote}}}, 0x88) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0), 0xfd65) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7fffffff}], 0x1, 0x0) 14:29:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) dup2(r1, r3) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ppoll(&(0x7f0000000200)=[{r6}, {r0, 0xa20e}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="046304400000000002630c4000f58b5574630c9b484833daec3f08fb5b5cca98c2a0f19f383d9742d20700"/56], 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x204001, 0x20) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x9211, "5b2f89344c4170ed917bc91d3994d2ca38498eb4cd731b60ec3e0de2027c433a", 0x800, 0x8, 0x10001, 0x0, 0x490b8ed09360b16a}) 14:29:43 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80, 0x80000) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000100)={@default, @default, 0x2, 0x56}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x96022, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x48000) fallocate(r2, 0x10, 0x0, 0x10000200) 14:29:43 executing program 0: 14:29:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x100, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "9dfc0c503fdde7f5cc59c13e0f"}, 0xe, 0xd8c56ff163fed9fa) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) [ 364.485143] binder: 18295:18300 unknown command 1074553602 [ 364.491558] binder: 18295:18300 ioctl c0306201 20000000 returned -22 [ 364.503775] binder: 18295:18304 unknown command 1074553602 [ 364.524533] binder: 18295:18304 ioctl c0306201 20000000 returned -22 14:29:43 executing program 1: 14:29:43 executing program 0: 14:29:43 executing program 0: 14:29:43 executing program 1: 14:29:43 executing program 0: 14:29:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000400)={0xd9ed, 0x3ff}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x100000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x111, 0xa}}, 0x20) get_robust_list(0xffffffffffffffff, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000240)=0x18) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000000c0)="b0d035bb31ec476ab325c309e83d06c10e6f471d6cd9e50183d98bb1ce5c4df3ed91027650fbbab554d1a9e82c1474c8af0c649fe07b4e1af6c93bda87c1131418041a41ee05e0eef040e30a8e124ebf8baa238d0e8ff242ef3859bde9f760bc046b342dd5f6642f9e9c57d9b0") setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000300)=0x6, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = dup(r8) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) setsockopt$inet_icmp_ICMP_FILTER(r12, 0x1, 0x1, &(0x7f0000000480)={0x2}, 0x4) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r13) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000380)) ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000080)) 14:29:44 executing program 3: 14:29:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000080)={0x9, 0xff, 0xfffffffc, 0xc00}) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:44 executing program 1: 14:29:44 executing program 0: 14:29:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_map={0x0, 0x8, 0x9, 0x5, 0x3f, 0x6}}) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:44 executing program 3: 14:29:44 executing program 1: 14:29:44 executing program 0: 14:29:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='/dev/kvm\x00', r3}, 0x10) pread64(r6, &(0x7f0000000040)=""/87, 0x57, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r7, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_GET_PACK_ID(r7, 0x227d, 0x0) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mq_getsetattr(r8, &(0x7f0000000180)={0x3, 0x1, 0xfffffffffffffffd, 0x1, 0x8, 0x6ff, 0x7b3}, &(0x7f0000000240)) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$P9_RLERROR(r10, &(0x7f0000000280)={0x12, 0x7, 0x2, {0x9, '/dev/kvm\x00'}}, 0x12) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:44 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) 14:29:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socket(0x0, 0x0, 0x0) 14:29:44 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x0) 14:29:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0xa0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x2000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_GROUP={0x8}]}, 0xa0}}, 0x0) [ 365.524153] audit: type=1400 audit(1569853784.429:92): avc: denied { map } for pid=18361 comm="syz-executor.3" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=976 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file permissive=1 [ 365.546148] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. 14:29:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0x100, 0x100, 0x0, 0x0, 0x248, 0x248, 0x248, 0x248, 0x248, 0x3, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'gre0\x00', 'dummy0\x00'}, 0x0, 0x98, 0x100}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0x100}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 14:29:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/354]) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) [ 365.572647] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.679106] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.707951] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.738429] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.757931] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.774150] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.787431] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.801937] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.814251] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.825491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:29:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000080)=0x20) 14:29:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socket(0x0, 0x0, 0x0) 14:29:44 executing program 3: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x201}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x1d, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 14:29:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) alarm(0x9) 14:29:44 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x320f) 14:29:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c}}], 0x80}, 0x6010) write$P9_RGETATTR(r3, &(0x7f0000000240)={0xa0, 0x19, 0x1, {0x4, {0x0, 0x3, 0x4}, 0x10, r5, r6, 0x2, 0x0, 0x7, 0xe2, 0x8000, 0x8000000000, 0x3, 0x8001, 0x9, 0x75, 0x8, 0x9, 0x800, 0x7, 0x2}}, 0xa0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bind$isdn(r9, &(0x7f0000000040)={0x22, 0x80, 0xa1, 0x81, 0x81}, 0x6) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xc1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={r10, 0x47ad}, 0x8) 14:29:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x1dc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)='\a'}, 0x20) 14:29:44 executing program 5: syz_read_part_table(0x10000, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000040)="b9cc770e748550fdf92a4fd315ded0e787b64df5c0e7718e5458a5ea44079c6397b5d19a557e5d8e11030a6850968341742fc3fe06e03e8152a89335fdc4314154ee3df0972847d5bc0b4a154866c7725dae00e5a73852371259d47f16e788c7d9dabdeefa519708000ec7bd7e8eab68b1196ef1276e1e777c991749dcaa10ecbf1f2c1f28e24368e8780daad458a22c512eb5b39d48c91f2fec4c52d6006ab35fda32e8c4f1c286e720987593d1ae8044c2677ac39ea9a630b37a6dc67507a134eaa153535039be0594965535ad52183b2df47ac79a3dd72b56c438027bff", 0xdf, 0x3f}, {&(0x7f0000000240)="b2f1c7b46dc03a88dd75410222d2de404d73a71fd0f1ee8d8d0356ff6a9ad5274648dd2fc60b7678872d5b57ddfe2cac1a10fe6b75fa3bc20bde5fda9e438b5c49c71d4e78f975fdcd67c2dd0b3db5d926cf84608a8f3a7a18f7352d5abfe31c75a434e711838eb6a46173950a0cc505c1a72cf09a846793530c0eaa216b66758787c289da6b895c2b80b98fc11644f3ba0b096c68fc6f33684e", 0x9a, 0x101}, {&(0x7f0000000300)="a381f8092c44a0e69e3a1a2315635577f3d8043b0a8115294590446a5f1ad22e2941b9386b05c68a0684683ef1525c933f47d1ceea647db54829989f56bd18f4f718257d5a2cfbf25e36971f8850695c1cd7d257c136e063e37434ba9f75a571b8b0b4e98f587702ae677ba70c4969134f31a39d3f0c4bc8991dc2f5bd27c62effee5e5b0915524c25d391dd665ee355cda2feff16a98f6c7c551ba38cd0e1fbf5d8b83638aafdca0f1dc7c5b9e5875f6f6a1e6318b48733a81c9d06f9b30b8ac7f4", 0xc2, 0x7ff}, {&(0x7f0000000400)="712993268f7d43566248831c70e71b5b09be2f117b42ce6a6bef49a101cf9293f9bbce2c71069176cf2112fd1a0f0e1fa455f6c5745902eb3de3632b4c9c8f4f56e57150bcbf67b3395d1b82907dc681efdf21ad6bbf5aa07698b882fad17ee37c7cb8ee524410ca801246c3b484581c713eff191a12cef33a7f03d26edcb7480f1befd562d0a129113d79581a1b4179ff07015e13317579ffa9f0eb94012b3d54e98bc2f747b81b67496a8b60c6a029018e2de2dea721df23e20273c68b38c7682570a234f575f6ff8ff3b6a69f760d50e2fbf4388a", 0xd6, 0x2e}, {&(0x7f0000000140)="92f2cfe2941afd71d74b94a61e58640b406178aaac3bcc", 0x17, 0x8}, {&(0x7f0000000500)="557afade546d5b2b5ab8e218ea62b384bfd87cfdb77271565588b9cfea75de734ee6470724cf2e7df03d0a2c77cda97ca0131df04282eb7be9ff06749c88d4da254cc4f9cb257a26fee93c6656db9958a75c726ccb8aa638cd42f669debf8e179b898c87b1864e9d0543c133caa5c72c1c3de45803037b782cb09926ac92ff52769a9c0f2c4a098682", 0x89, 0x7ff}]) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}, {r0}, {r0, 0x44}], 0x3, 0x0, 0x0, 0x0) 14:29:44 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1e, 0x0, &(0x7f00000000c0)="b9ff0300000200b89e40f008001fffffff00004000633377fbac141414e9", 0x0, 0x100, 0x0, 0xffffffde, 0x0, &(0x7f0000000100)="12aa1a5d5352189f2a1dc7136cfcc6e8be02021d5a6803cd6cb128cb3f5d74356d0acac07b41c4b5b9b49bb048685765a371d3fd94b9ac2fad3f6056c0a6b294d6bbc04a5bd9fc2bc0d21b24e37a5b79cb285e003121a1dacfca3103e4eda347c08e43b01382501e327df279fa27d277e99a35bdc56ee37558ee4440927feeb4854acf8216b1602bcffe62fabd17558ea4ca8c047fdb1541d87187c12445ef8219f5c56ce4e2b550e11fb9a7fa786d09186f3b203e78efadf447c839b0b35c7992c52ac20cf7faa0d153"}, 0x26) 14:29:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac71082300000fffffffffcffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 14:29:45 executing program 1: clock_adjtime(0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uhid\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r4 = dup2(r3, r2) write$P9_RLINK(r4, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = gettid() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r5, 0x0, 0x0) 14:29:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 366.240162] protocol 88fb is buggy, dev hsr_slave_0 [ 366.245337] protocol 88fb is buggy, dev hsr_slave_1 14:29:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) 14:29:45 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0xffffffff, 0x4) 14:29:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x1dc) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 14:29:45 executing program 1: r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000018007f1dfd0000b2a4a28093020000000f284308910000000e00160008000c00060000001940a30700000000000000001338d52f4400009bfb83de448daa7227c43ac9220000010cec4fab91d400000000", 0x55}], 0x1}, 0x0) 14:29:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) setfsgid(r1) 14:29:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) 14:29:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x84) ioctl(r0, 0x7, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mknodat(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0xffff) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000140)='ns/pid\x00') fallocate(r1, 0x10, 0x1002, 0x800000000000000) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f00000000c0)={{0x5, 0x0, @identifier="0c1eb298590d8918d47587abf5b50921"}}) 14:29:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x1dc) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) 14:29:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x1dc) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:29:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b47888318b04ae", 0x3c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 14:29:45 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x400, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000240)=0xffffffaf) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0), 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000400)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {@in=@remote}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) bind$inet6(r3, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000300)={r7}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r7, 0x3}, &(0x7f0000000100)=0x8) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r8, 0x10, 0x0, 0x10000200) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xc0400, 0x0) 14:29:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) 14:29:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f00000002c0)={0x0, 0x0, [0x7fffffff]}) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0xba8e}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:29:46 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x7b) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/255, 0xff}], 0x1) 14:29:46 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x201}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 14:29:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockname$inet(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r3) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x1e) write$P9_RGETLOCK(r4, &(0x7f0000000140)={0x2a, 0x37, 0x2, {0x0, 0x9425, 0x80, r6, 0xc, '/dev/nullb0\x00'}}, 0x2a) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f00000001c0)={0x1f, "9e479217bef33c0d74df4224336db999fe0a40fe9d7c98d5df183f1f97280b06", 0x2, 0x14, 0x8, 0x5, 0x1, 0x7, 0x6, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mkdirat(r5, &(0x7f0000000100)='./file0\x00', 0xcbb504134e134237) [ 367.197208] kvm: pic: non byte write [ 367.209781] kvm: pic: non byte write 14:29:46 executing program 3: r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) write$P9_RSTATu(r0, &(0x7f0000000040)=ANY=[], 0x445144e9) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) truncate(&(0x7f0000000000)='./file1\x00', 0x0) [ 367.280134] protocol 88fb is buggy, dev hsr_slave_0 [ 367.280144] protocol 88fb is buggy, dev hsr_slave_0 [ 367.285245] protocol 88fb is buggy, dev hsr_slave_1 [ 367.295393] protocol 88fb is buggy, dev hsr_slave_1 14:29:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x4) 14:29:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0xa0d00, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000d80)=""/142) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000c40)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e24, 0x123f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x87, @empty, 0x6}], 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x200, 0x6}}, 0x20) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0xe56, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x32e3b64d7eaf5f53}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x40) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84010080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000827bd7000fcdbdf25010000000000000008410000007074764e0000816962000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000400000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r4, 0x10, 0x0, 0x10000200) 14:29:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x10002002}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:46 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffc) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f00000000c0)) [ 367.840181] protocol 88fb is buggy, dev hsr_slave_0 [ 367.845308] protocol 88fb is buggy, dev hsr_slave_1 [ 368.000140] protocol 88fb is buggy, dev hsr_slave_0 [ 368.005366] protocol 88fb is buggy, dev hsr_slave_1 14:29:48 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x0, 0x4, 0x1295c186, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000005080)={0x10, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0xf3, &(0x7f0000001340)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x201}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x1d, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) close(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) 14:29:48 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/255, 0xff}, {&(0x7f0000000040)=""/84, 0x54}], 0x2) 14:29:48 executing program 2: ioctl(0xffffffffffffffff, 0x4001000008912, &(0x7f0000000140)="06e30f0000010070000200c58c4d4dbfa71d4c5431b27a654424048d29d595f340b8f318b83a42aa1a27b780514521329d11f940e4fe254ef1c623196171ca3abd3dc4756c1ac058520d9377e3d87a13dc3c43362199818d690175740f9015ac243f51a34a50a60bb1f32ac35dce50000db37a90990692820010cd48d497af94656d8676e7e347050018a3c6efa5cb91b237b9469c4efd02") r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r0, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r3, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={r6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r6}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r6, 0x6}, 0x8) 14:29:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(r1, 0x2081ff) 14:29:48 executing program 3: r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) write$P9_RSTATu(r0, &(0x7f0000000040)=ANY=[], 0x445144e9) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) truncate(&(0x7f0000000000)='./file1\x00', 0x0) 14:29:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='\x00\x00\xa0j\xb4\x12\xff\x01\x00\x00\xb7\x00', 0x544281, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execveat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)='_@-.em0%mime_type\x00', &(0x7f0000000100)='/dev/nullb0\x00', &(0x7f0000000140)='/dev/nullb0\x00', &(0x7f0000000180)='/dev/nullb0\x00', &(0x7f00000001c0)='/dev/nullb0\x00', &(0x7f0000000200)='(\x00'], &(0x7f0000000300)=[&(0x7f0000000280)=':\x00', &(0x7f00000002c0)='/dev/nullb0\x00'], 0x1600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept$nfc_llcp(r5, &(0x7f0000000380), &(0x7f0000000400)=0x60) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r7, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000300)={r10}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000180)={r10, 0x12}, 0x8) r11 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r11, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="6f3bfd107a8d8b7c988d1bbbcdb5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000000300)={r14}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000180)={r14}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={r10, 0x7fffffff, 0x3, 0xe44, 0x5, 0x7ff, 0x200, 0x0, {r14, @in={{0x2, 0x4e20, @rand_addr=0x1}}, 0x8, 0x7, 0x9, 0x3f, 0xffffffff}}, &(0x7f0000000500)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000540)={r15, 0x8, 0x10}, &(0x7f0000000580)=0xc) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x2000002, 0x10000200) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x8000) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:29:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000040)=""/249, &(0x7f0000000140)=0xf9) [ 370.134456] audit: type=1804 audit(1569853789.019:93): pid=18559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir788718010/syzkaller.cwt0vi/613/file0/file0" dev="loop5" ino=8 res=1 14:29:49 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x220101, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r1, 0x2081ff) 14:29:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffff65b8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r2) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000040)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r3, 0x10, 0x0, 0x10000200) 14:29:49 executing program 0: bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x220101, 0x0) fchdir(r0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) stat(0x0, &(0x7f00000003c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast2, @in6=@dev}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) r2 = socket(0x10, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x8}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x800, 0x0, 0x0, 0x100, 0x68}, &(0x7f00000007c0)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ftruncate(r1, 0x2081ff) 14:29:49 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x20}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x1, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe0002250700", 0x24) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = syz_open_dev$vcsa(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8) r7 = openat$cgroup_ro(r6, 0x0, 0x275a, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x2000002) fallocate(r7, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8, 0x0, 0x8, 0x20}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r10, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r13, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r13, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r14 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r16 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r16, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r15, 0xc028660f, &(0x7f0000000040)={0x0, r16, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r8, 0x40}, {r9, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r16}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240)={0x3}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x2080) clone(0x0, 0x0, 0x0, 0x0, 0x0) 14:29:49 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5f4be9", 0x34e}], 0x1}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) 14:29:49 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x220101, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r1, 0x2081ff) 14:29:49 executing program 3: r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) write$P9_RSTATu(r0, &(0x7f0000000040)=ANY=[], 0x445144e9) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) truncate(&(0x7f0000000000)='./file1\x00', 0x0) [ 370.996847] bond0: Releasing backup interface bond_slave_1 [ 371.096645] audit: type=1804 audit(1569853789.999:94): pid=18598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir501098449/syzkaller.4tuLXh/423/file0" dev="sda1" ino=17387 res=1 [ 371.347378] audit: type=1804 audit(1569853790.049:95): pid=18604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir501098449/syzkaller.4tuLXh/423/file0" dev="sda1" ino=17387 res=1 14:29:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000300)={&(0x7f0000000080)=@rc={0x1f, {0x7, 0x3, 0xb4, 0x1, 0xcd, 0x85}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="f8064542bbb3eceb10b983b25059b8408cdf94499a25a29eacd28d2ed3848d331e5da4a3b786a7dd4ebb2ef0fcd5ca489e86d945f4005394635f6bd1e44414bc6849468f761cc3874a53eb62c1ef950b458777c156c3c4f890c3814d75520ed84e9ec5e6fdc7b7104790801a4655d2ea48f59c5483c4bb45caecbce34cc662dfcdfd3a900dc80f64d072cc73c0d8da6d89725969dfdbedbaf5e54cb66e5bdae04942b50356ba2eac38a81e816a7097ee4deb340774a4038a7a0a57dbaf283f234c6c345bcc6e3617ec06213969508261efc4dc62a41cca177aeddf5b6bd5066c66a348ec48f45da1fb944584f90a16348d1e80f5c7eb3a34", 0xf8}, {&(0x7f0000000200)="6da8aeeb7a5c27009f767c45910cecc069d54e639d7387959ed62f9b2f533b7a22853a0980234084977d4c1a459216f31afdaa3fa3ba95ab90f01328afb67cb6d81a1ebdc2eeb6b16fa6aaf72fd2e1226b46b8a8e7f626cdb542123e816385164d26031cd3c3c19f311caa1f9772577a4f0de7f61743b6736056e535948335f1d14385a7d77f5426f8200d", 0x8b}], 0x2, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0x1f}}, @timestamping={{0x14, 0x1, 0x25, 0x7daa}}, @mark={{0x14, 0x1, 0x24, 0x20}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}], 0x60}, 0x84) [ 371.412464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 371.570261] audit: type=1804 audit(1569853790.459:96): pid=18594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir501098449/syzkaller.4tuLXh/423/file0" dev="sda1" ino=17387 res=1 14:29:50 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5f4be9", 0x34e}], 0x1}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) [ 371.669595] bond0: Releasing backup interface bond_slave_1 [ 371.724891] bond0: Enslaving bond_slave_1 as an active interface with an up link 14:29:50 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5f4be9", 0x34e}], 0x1}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) 14:29:50 executing program 1: ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) [ 371.760825] audit: type=1804 audit(1569853790.669:97): pid=18604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir501098449/syzkaller.4tuLXh/423/file0" dev="sda1" ino=17387 res=1 14:29:50 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x20}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x1, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe0002250700", 0x24) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = syz_open_dev$vcsa(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8) r7 = openat$cgroup_ro(r6, 0x0, 0x275a, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x2000002) fallocate(r7, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8, 0x0, 0x8, 0x20}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r10, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r13, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r13, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r14 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r16 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r16, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r15, 0xc028660f, &(0x7f0000000040)={0x0, r16, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r8, 0x40}, {r9, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r16}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240)={0x3}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x2080) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 371.815475] audit: type=1804 audit(1569853790.699:98): pid=18618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir501098449/syzkaller.4tuLXh/423/file0" dev="sda1" ino=17387 res=1 14:29:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$netrom(r2, &(0x7f0000000040)={{0x3, @null}, [@netrom, @rose, @remote, @netrom, @bcast, @null, @null, @default]}, &(0x7f00000000c0)=0x1e, 0x140000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x3aa4afe400e1f2ca, 0x0) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000140)=""/85) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x2) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000240)={0x0, 0xffffff80, 0x1f, &(0x7f0000000200)=0x9}) fallocate(r3, 0x10, 0x0, 0x10000200) [ 371.996778] audit: type=1804 audit(1569853790.699:99): pid=18631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir501098449/syzkaller.4tuLXh/423/file0" dev="sda1" ino=17387 res=1 14:29:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000040)={{0x0, 0x0, @descriptor="940d48d8a079bc35"}}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) 14:29:51 executing program 1: ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) [ 372.328759] audit: type=1804 audit(1569853790.699:100): pid=18598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir501098449/syzkaller.4tuLXh/423/file0" dev="sda1" ino=17387 res=1 14:29:51 executing program 3: r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)) write$P9_RSTATu(r0, &(0x7f0000000040)=ANY=[], 0x445144e9) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) truncate(&(0x7f0000000000)='./file1\x00', 0x0) [ 372.386228] bond0: Releasing backup interface bond_slave_1 14:29:51 executing program 1: ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) 14:29:51 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x20}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x1, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe0002250700", 0x24) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = syz_open_dev$vcsa(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8) r7 = openat$cgroup_ro(r6, 0x0, 0x275a, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x2000002) fallocate(r7, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8, 0x0, 0x8, 0x20}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r10, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r13, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r13, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r14 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r16 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r16, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r15, 0xc028660f, &(0x7f0000000040)={0x0, r16, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r8, 0x40}, {r9, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r16}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240)={0x3}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x2080) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 372.495817] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 372.583254] audit: type=1804 audit(1569853791.409:101): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir501098449/syzkaller.4tuLXh/424/file0" dev="sda1" ino=17377 res=1 14:29:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x3, r4}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$x25(r3, &(0x7f0000000040)={0x9, @remote={[], 0x2}}, 0x12) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x2, 0x0}) [ 372.784000] binder: 18679:18684 ioctl c0306201 20000000 returned -14 [ 372.817939] audit: type=1804 audit(1569853791.459:102): pid=18647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir501098449/syzkaller.4tuLXh/424/file0" dev="sda1" ino=17377 res=1 14:29:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x2, 0x0}) [ 373.057900] binder: 18687:18689 ioctl c0306201 20000000 returned -14 14:29:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x2, 0x0}) [ 373.277349] bond0: Releasing backup interface bond_slave_1 [ 373.405512] binder: 18696:18699 ioctl c0306201 20000000 returned -14 14:29:52 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x320f) 14:29:53 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x320f) 14:29:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast2}], 0x10) 14:29:53 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8, 0x20}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x1, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe0002250700", 0x24) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = syz_open_dev$vcsa(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8) r7 = openat$cgroup_ro(r6, 0x0, 0x275a, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x2000002) fallocate(r7, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8, 0x0, 0x8, 0x20}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r10, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r13, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r13, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r14 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r16 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r16, 0x0, 0x0, 0x2000002) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r15, 0xc028660f, &(0x7f0000000040)={0x0, r16, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r8, 0x40}, {r9, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r16}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240)={0x3}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x2080) clone(0x0, 0x0, 0x0, 0x0, 0x0) 14:29:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="fcffffffffffffff"]}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r3 = add_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)="d91f60b7c8cdbedf360203e8ac72c81a72eafe28d6b0a9b0729182fb3a9a25ed212cd1759a676d61b08d58b883508f1459f0a8a2a6e52dbe834180b05e7a2bbf569bcc4e76bffc001bc07e216ad8f993e34f417a3e944df965e4715fd0c9688e9face623ff9b9345ee9fe4fed796a35c817ea6a8f9695580677c56c300f37bdfa7da57f452f9989c20b148996d653d6716e50f0c67b532275e5b4d454d8f39efcb468ac5e60bd2e2d9c950d6cac0ab0f6edb7df1f5816e47bfd5ab00bfa5457ea1cfb5377006", 0xc6, 0xfffffffffffffff8) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$llc(r6, &(0x7f0000000580)="2eb4c0ff22820d16bd8505c956393288e08c6ab5e60e06cc6b97f2963b248e7deed77dd420961bd6186844c1b5bf7e69bed33e31feb87c59290e2fe989d8a66d5fa53e793b6e787b4194b9056ca55d614cde821a8aa0ab87c11ce4c5b01ee3ecf1a18f702d4cfab5394649344c2e2928055936e7d2ec24acb58619211bce246ed35df2677a9042b2fd4fdf403e94c828896f6dca5304073799a0610e17fbe828e57aed23d6114a295a415c908640d5cbba10b02bd5661ab5bfa5eb2a6da0ba7a0cbe5f10fdfb144bd4783e00f3e21f1ddb0e3827ad927f103e", 0xfffffffffffffda9, 0x2000000, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) r8 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r8) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r9) r10 = add_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000380)="19607fadd43eee3b60bf63453960da742ecc275d5c9ed13ce4b708de0d71db2bd3a9d9460fb01ac1537178993cdf38901f4c0c612c0b4ad7b51f9804fc064ad80ef01afce2c1a361e5cdfedcfd0d", 0x4e, r9) keyctl$unlink(0x9, r3, r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r12 = dup(r11) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r16 = dup3(r15, r2, 0x40000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r16, 0xc0105303, &(0x7f0000000300)={0x5, 0x7, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$P9_ROPEN(r12, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x13, 0x2, 0x8}, 0x6}}, 0x18) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) fallocate(r2, 0x10, 0x0, 0x10000200) 14:29:53 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x320f) [ 374.807065] binder: 18716:18724 unknown command 0 [ 374.821789] binder: 18716:18724 ioctl c0306201 20000000 returned -22 14:29:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) [ 374.987838] binder: 18731:18732 unknown command 0 14:29:53 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getpid() perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r0, &(0x7f0000000980), 0xffffff4d) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) socket$kcm(0xa, 0x0, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x8602}) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000640)='nr0\x01:\xf2%\xa3\'>\xf8%\x81$?\xfa\x02\x00\x00\x00\x7f\x02\x00\x00\x00\n\xf4D3A}\xe4\xac\xff\x82q\xc7J\xe2J?\x00\x8b\x9c[\xdd\x06\xa4\nl\x97\xe1b\x00\xa1Z\xd0\xb5w\r\xe4\x84\xe6\xa5=\xf4\xcb\xb9\x05\xd4\xab\xaf\xe4q\ro*u\x97j\xe3\xfa\xf9\xc8\xef9I\xe9\xd44\x05L\x8e\x1e]yYp\x9c\x8c\xcf5\xaeD\xf9\x8dN]qH\r\xb4\x99\xab\t\x9c\'-h\x949\x0fR\x87Z\xaa\xdc\xd0\x93~ F\xb0\xce+M\xd8\x15\xaf\x9e{\x82\xecV\"\xd1;\bw\xdf\xc4\xb5\x1f\'\x1c\xe6cUz\xf7{\xd0B$\xd2W\x96_\xcdH2t\xd2*?\xfa`\xbb\x0e{q\x8d$\xbc\xd7\xaaM\x8f\x8d\xe9\xeb\xd7\x82R\vA') [ 375.017566] binder: 18731:18732 ioctl c0306201 20000000 returned -22 14:29:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) [ 375.119807] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 375.181949] binder: 18735:18736 unknown command 0 [ 375.205505] binder: 18735:18736 ioctl c0306201 20000000 returned -22 [ 375.243818] audit: type=1804 audit(1569853794.149:103): pid=18737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir788718010/syzkaller.cwt0vi/618/file0" dev="sda1" ino=17407 res=1 14:29:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) [ 375.400728] binder: 18748:18751 unknown command 0 [ 375.483587] binder: 18748:18751 ioctl c0306201 20000000 returned -22 [ 375.562911] device nr0 entered promiscuous mode 14:29:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) [ 375.650076] audit: type=1804 audit(1569853794.549:104): pid=18742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir788718010/syzkaller.cwt0vi/618/file0" dev="sda1" ino=17407 res=1 [ 375.779771] binder: 18758:18760 unknown command 0 [ 375.802718] binder: 18758:18760 ioctl c0306201 20000000 returned -22 14:29:54 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x0) 14:29:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:54 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x600000) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000100)={0x40000, "e9020000000000000018440fbaec3de9ac1b19fb1c42e9b165905c00", 0x4, 0x4, 0x2, 0x2, 0x5}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x18, 0x0, 0x8) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x2, 0x2) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000001c0)) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000080)=0x5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x21001, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r7, 0xc0585604, &(0x7f0000000240)={0x0, 0x0, {0xffffffb9, 0x80000001, 0x102a, 0x0, 0x5, 0x6, 0x0, 0x4}}) 14:29:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getpid() perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x8602}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)) [ 376.008692] binder: 18766:18769 unknown command 0 [ 376.056654] device nr0 entered promiscuous mode [ 376.057844] binder: 18766:18769 ioctl c0306201 20000000 returned -22 14:29:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 14:29:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) sendfile(r2, r0, &(0x7f0000000040), 0x3d1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x1e) sendmsg$nl_netfilter(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x826002}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x27c, 0xf, 0xa, 0x10, 0x70bd28, 0x25dfdbfb, {0x1}, [@nested={0x28, 0x46, [@generic="7fb1549db2144d4e6a0cc54896f694ba77cc2a475e8c0cbf4987e585c70bd945289aae5a"]}, @generic="ffc1cae0d9e00d9da79af1999e867674e2b603376ce9fc012da598ddd617cca6447570737eef488b010c3aa9e5c8792420e93cf3bd4b769043756f924e36bfdadf1c5d8437f2bc2c350e6c63fc38aa87296ab32d8041af5ff2d1c6d1fa7f2e9faeab430bf0d2b137a01548ebd5d75febc6b8c0c68b45103babf3e07a733b219aec0cb51799983536b5353a502c4c5728c799269deb8f295781e777d6", @typed={0x14, 0x86, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @nested={0xc, 0x47, [@typed={0x8, 0x46, @uid=r7}]}, @typed={0xc, 0x7f, @u64=0x2}, @typed={0x5c, 0x1a, @binary="09fa96f12c7f3874e3cc10396be770eced550d5a7298d18bccca8addeb2c8ce1e150a0acff36b2a03c8e56e5ce4f6df55462a62c6ba3429d43608c7853353f11f32e32093655c9a32578c58a615b9d50aaaf1e23c3d4"}, @typed={0x10, 0x83, @str='ppp1keyring\x00'}, @generic="af3d94d77e38c524b9be724c6734247eb09a4c30510cbf1cef58bb19b07ee74fe0f36403ca6ef9b04ba0ba2183f06be3755c8cf82f0164277b19f293771c844c628c4de766f80bdcb3910cebf2f45ff83175e7e39c67ce3993811f3c091970785dfe8c2bb94f9e20b125eab1a7eb9b75c755e9f2c96daa319badf5ff4d77441259ee6c33170c45c1ba4897f379ae35d57a4f25f977ddf97b8305ef5343134efd014467b0084b802a5a46c35beef605c77af2ec0b29b018b1aa1cd66f12ee7d69a7e08b4d72119f46c0d49552a24c91da4f615f8581", @nested={0x2c, 0x75, [@generic="aa3e065d0132935bd5cc571bf8fe5644fd068cd456c46ce01bbef8182c0c1288", @typed={0x8, 0x3b, @u32=0x5}]}, @typed={0x8, 0x34, @pid=r8}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = dup(r4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000080)=r9) 14:29:55 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getpid() perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r0, &(0x7f0000000980), 0xffffff4d) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) socket$kcm(0xa, 0x0, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x8602}) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000640)='nr0\x01:\xf2%\xa3\'>\xf8%\x81$?\xfa\x02\x00\x00\x00\x7f\x02\x00\x00\x00\n\xf4D3A}\xe4\xac\xff\x82q\xc7J\xe2J?\x00\x8b\x9c[\xdd\x06\xa4\nl\x97\xe1b\x00\xa1Z\xd0\xb5w\r\xe4\x84\xe6\xa5=\xf4\xcb\xb9\x05\xd4\xab\xaf\xe4q\ro*u\x97j\xe3\xfa\xf9\xc8\xef9I\xe9\xd44\x05L\x8e\x1e]yYp\x9c\x8c\xcf5\xaeD\xf9\x8dN]qH\r\xb4\x99\xab\t\x9c\'-h\x949\x0fR\x87Z\xaa\xdc\xd0\x93~ F\xb0\xce+M\xd8\x15\xaf\x9e{\x82\xecV\"\xd1;\bw\xdf\xc4\xb5\x1f\'\x1c\xe6cUz\xf7{\xd0B$\xd2W\x96_\xcdH2t\xd2*?\xfa`\xbb\x0e{q\x8d$\xbc\xd7\xaaM\x8f\x8d\xe9\xeb\xd7\x82R\vA') 14:29:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:55 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getpid() perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r0, &(0x7f0000000980), 0xffffff4d) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) socket$kcm(0xa, 0x0, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x8602}) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000640)='nr0\x01:\xf2%\xa3\'>\xf8%\x81$?\xfa\x02\x00\x00\x00\x7f\x02\x00\x00\x00\n\xf4D3A}\xe4\xac\xff\x82q\xc7J\xe2J?\x00\x8b\x9c[\xdd\x06\xa4\nl\x97\xe1b\x00\xa1Z\xd0\xb5w\r\xe4\x84\xe6\xa5=\xf4\xcb\xb9\x05\xd4\xab\xaf\xe4q\ro*u\x97j\xe3\xfa\xf9\xc8\xef9I\xe9\xd44\x05L\x8e\x1e]yYp\x9c\x8c\xcf5\xaeD\xf9\x8dN]qH\r\xb4\x99\xab\t\x9c\'-h\x949\x0fR\x87Z\xaa\xdc\xd0\x93~ F\xb0\xce+M\xd8\x15\xaf\x9e{\x82\xecV\"\xd1;\bw\xdf\xc4\xb5\x1f\'\x1c\xe6cUz\xf7{\xd0B$\xd2W\x96_\xcdH2t\xd2*?\xfa`\xbb\x0e{q\x8d$\xbc\xd7\xaaM\x8f\x8d\xe9\xeb\xd7\x82R\vA') 14:29:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000040)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r5) splice(r2, &(0x7f00000000c0), r5, &(0x7f0000000100), 0x7f, 0x4) fallocate(r4, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mkdirat$cgroup(r7, &(0x7f0000000140)='syz0\x00', 0x1ff) 14:29:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) [ 376.288183] binder: 18796:18806 unknown command 0 [ 376.325175] binder: 18796:18806 ioctl c0306201 20000000 returned -22 14:29:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:55 executing program 5: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\x00\x00)\x00\xfc\x00', @ifru_flags=0x29}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={'bridge_slave_0\x00', @ifru_mtu}) getsockopt(0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) [ 376.457828] binder: 18820:18825 unknown command 0 [ 376.473375] binder: 18820:18825 ioctl c0306201 20000000 returned -22 14:29:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:55 executing program 5: [ 376.524364] device nr0 entered promiscuous mode [ 376.539698] device nr0 entered promiscuous mode 14:29:55 executing program 5: [ 376.629925] binder: 18833:18834 unknown command 0 14:29:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x1, 0x0, "f89506d7bd9c002c5664e9e018c2d5aca403d5434b2f57d1276b7d828a7f0a9d5818971a653d41703b7700285ccb81806770877e289e3b775bf9b306d83ef9497626300075f10d904212fcb6069d32a7"}, 0xd8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r3, 0x10, 0x0, 0x10000200) 14:29:55 executing program 5: [ 376.653863] binder: 18833:18834 ioctl c0306201 20000000 returned -22 14:29:56 executing program 0: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001440), 0x4) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x10000026f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, 0x0, 0x0) ioctl$KDADDIO(r5, 0x4b34, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getuid() pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$P9_RSTAT(r6, &(0x7f0000000140)={0x7e, 0x7d, 0x2, {0x0, 0x77, 0x0, 0x8000, {0x2, 0x4, 0x6}, 0x10000000, 0xfff, 0x0, 0x1, 0xa, 'wlan1self:', 0x11, '/selinux/enforce\x00', 0x24, 'posix_acl_accesslo{\',vmnet0GPL\'[ppp0', 0x5, ':GPL^'}}, 0x7e) 14:29:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='\x00'/13) getdents(r2, &(0x7f0000001180)=""/4096, 0x1000) 14:29:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x1ff, 0x10000204) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x189401, 0x0) 14:29:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/d\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) 14:29:56 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r1, r0, 0x0, 0x8000ffffeffa) [ 377.177344] binder: 18854:18858 unknown command 0 14:29:56 executing program 5: 14:29:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0776ef750f2907057bf0708e85d5635dda311a81f8bfaf383df8853b2e4aa4674c3119a22529c42f9b0b10da3a77ea37d6b2448deafd0ee070db0a293b") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) [ 377.198106] binder: 18854:18858 ioctl c0306201 20000000 returned -22 14:29:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x0, r3}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r4, 0x10, 0x0, 0x10000200) 14:29:56 executing program 5: 14:29:56 executing program 1: [ 377.414071] binder: 18877:18887 unknown command 0 [ 377.430156] binder: 18877:18887 ioctl c0306201 20000000 returned -22 14:29:56 executing program 0: 14:29:56 executing program 5: 14:29:56 executing program 1: 14:29:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") close(0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:56 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x4102, 0xa0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000200)={0x1, 0x1f, 0xae, 0x7f}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4500000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getnetconf={0x2c, 0x52, 0x1c69e89575cb63df, 0x70bd2b, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x101}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r5, 0x10, 0x0, 0x10000200) 14:29:56 executing program 5: 14:29:56 executing program 1: 14:29:56 executing program 0: [ 378.029691] binder: 18902:18905 unknown command 0 [ 378.036238] binder: 18902:18905 ioctl c0306201 20000000 returned -22 14:29:57 executing program 1: 14:29:57 executing program 5: 14:29:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:57 executing program 0: 14:29:57 executing program 1: 14:29:57 executing program 5: [ 378.198174] binder: 18917:18918 unknown command 0 14:29:57 executing program 0: [ 378.229933] binder: 18917:18918 ioctl c0306201 20000000 returned -22 14:29:57 executing program 5: 14:29:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x980, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:57 executing program 0: 14:29:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000040)=0x6) 14:29:57 executing program 5: 14:29:57 executing program 1: 14:29:57 executing program 5: 14:29:57 executing program 0: 14:29:57 executing program 1: [ 378.671029] binder: 18938:18945 unknown command 0 [ 378.680589] binder: 18938:18945 ioctl c0306201 20000000 returned -22 14:29:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0xa1) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={r5}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x3}}, 0x7ff, 0xfffff499, 0xde67, 0x9, 0x2}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r6, 0x24, "a5c4385a122ae815c9bab3bf9e2a6324696f2dd7a51adb27daefb2aa062e76928fd4eead"}, &(0x7f00000001c0)=0x2c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r7, 0x10, 0x0, 0x10000200) 14:29:57 executing program 1: 14:29:57 executing program 0: 14:29:57 executing program 5: 14:29:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:57 executing program 1: [ 378.867994] binder: 18962:18965 unknown command 0 [ 378.876557] binder: 18962:18965 ioctl c0306201 20000000 returned -22 14:29:58 executing program 5: 14:29:58 executing program 0: 14:29:58 executing program 1: 14:29:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000040)={0x20, 0x5, 0x2, 0x80000001, 0x6}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000080)={0x965, 0x6285, 0x8, 0x4, 0x8, 0x647d}) vmsplice(r1, &(0x7f0000000580), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl(r8, 0x1002008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r9, 0x10, 0x0, 0x10000200) 14:29:58 executing program 0: [ 379.229633] binder: 18978:18980 unknown command 0 [ 379.272552] binder: 18978:18980 ioctl c0306201 20000000 returned -22 14:29:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl(r0, 0x9, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r5, 0x0) fsync(r5) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000100)=[{{r6, r7/1000+10000}, 0x4, 0x2, 0x8}, {{0x0, 0x7530}, 0x1, 0x7, 0x10001}, {{0x77359400}, 0x1, 0x6, 0x1}, {{r8, r9/1000+10000}, 0x1, 0xfff}], 0x60) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) fallocate(r10, 0x10, 0x0, 0x10000200) 14:29:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 14:29:58 executing program 0: 14:29:58 executing program 5: 14:29:58 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:58 executing program 0: 14:29:58 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:58 executing program 5: 14:29:58 executing program 0: [ 379.464345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:29:58 executing program 5: 14:29:58 executing program 0: 14:29:58 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:58 executing program 5: 14:29:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 14:29:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x6c61b9a7, 0x5, 0x7, 0xa584, 0x3}, 0x14) 14:29:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r5, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) dup2(r5, r6) 14:29:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 14:29:58 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:58 executing program 5: [ 379.999080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:29:58 executing program 5: 14:29:59 executing program 5: 14:29:59 executing program 5: [ 380.169063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:29:59 executing program 5: 14:29:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 14:29:59 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:59 executing program 5: [ 380.488783] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:29:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x400e40, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x66, "7109e30270d1197ae6d63bb5a2880c76d174807e052836cfcc38fc1afe18c56a1bcb02022b872bd25851e4ef997de234a759602dfa5575128a8989257dd947d4b49ff7d9b1cf9946f99688ebfec07bb84f9cd4716073f003fd6fcc0fc9d6152fa9c91f0f94b1"}, &(0x7f0000000240)=0x8a) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) fallocate(r3, 0x10, 0x0, 0x10000200) time(&(0x7f0000000080)) [ 380.668553] Unknown ioctl -1073435134 14:29:59 executing program 0: 14:29:59 executing program 5: 14:29:59 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:59 executing program 1: 14:29:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/devDnullb0\x04', 0x200000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r7 = dup3(r1, r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000080)="4785aeeeda32883f3c93004af27a46468853e5", &(0x7f00000000c0)="2aa07371c1f7fa8e7557810bf1c268e8845076a2d4ea7a2d595d9056370b8a98bce53863f30d8ac27dd142d5c0deb53d54f55f3480f39090609b800a44dd30533fcd35eb58659cc7e295b710079c3c88fc41fe5504c8f08f8d388750238aa4df037d5a9c92c18cb1bad9a74cf7a19442f0db227c2cc846616890fa9b6b377f933e829b09f425572c1bf5ea85701ab85ac981ccdcf8411f45e27749068a849738d63c8161efb7", 0x1}, 0x20) fallocate(r1, 0x10, 0x0, 0x10000200) 14:29:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:29:59 executing program 0: 14:29:59 executing program 5: 14:29:59 executing program 1: 14:29:59 executing program 0: 14:29:59 executing program 1: [ 380.898824] binder: 19076:19081 unknown command 0 [ 380.904246] binder: 19076:19081 ioctl c0306201 20000000 returned -22 [ 381.009578] Unknown ioctl -1073435134 14:30:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r2 = geteuid() syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x100000000, 0x9, &(0x7f0000000740)=[{&(0x7f00000000c0)="57fc3c032cea60832bb675d109000907aa2188fd8d3263ab541b391bcb5397f6b9457d1e156b11a9e18ecea93a8576068540c1ff10dfe1ecc84df95c7e639282eb6ce468ac62", 0x46, 0xb79}, {&(0x7f0000000140)="d6929c677993b27cbd1535d1f81450008e66d44d11044e326019d72c2fcbcebc64985388fd1c22e6e33903c70fed5b560e69d4a0f47b29e532f128a1568984eb284055436a1fec1033c9d854495ab52476101bc33352dabeed21e155f551783a6092ef9323d5851374054def4e2abad5987a01591c7103d413875807d1230c75e10a2e6f040e654287038a8a15ba73d2a92223f193a6fc9e685485417520ad2792b6b9e4ebad6f5bc5d66c9f35ce807a05d087c956460880959a10867005b3f79ba8c78f2541daf0c38c1152d2bd9a418c5874c8ae6b77fcfdda7388049b4e01497eb600a7b35487fe6a01cbdd6cac", 0xef, 0x10000}, {&(0x7f0000000240)="e54373d67383b0099893e622b94c809dfa6f1a10eb931e2d6d295e0615663c60853134f57ae61b48dd4bf02867737d0a4991dfa61e8157b2baaa6ce35a765a944bb5c394625fef3d4e367d6ef88fd74d9873d5d1beb6d66ae784f81d3698c7e1e56e0222313f3989dd1f3e9d1421ada9b9f170e57a3d3114da5fe0cbbe611a9ae7463d0da77af974c554abdb734fa565bbecf47708d2f7abdb5314127174e07fbd6edac53fb7437f497b96a36f98ce326d358c815b74387391ad81bce716349b2e1e27508fcf4b62aead2ae7f6509c7e93202499abeedffbcc4f47be69d6117437bd23993ed17d16f9dcf448", 0xec}, {&(0x7f0000000380)="ce726330f348d6103b659e20f1b229f39ac45af622accfbf9e01e7916e30de1354ca0805d497130c1acfac5370402310f59ac84ff526ec397811917cbe4cff4912dcd58e5a690693791d5e98173b1a2c9588dcf27ba97dc33c6222e1451142f8f4e2dba9339e2ad1e631122bb875734c30a6acfc84ec71b0e81585f61a3ffb368140c7efb26c4fa163530ec3911ea0b149f996ad2ee7de", 0x97, 0x5}, {&(0x7f0000000440)="4dfa02d108dd99f49f569d35d8", 0xd, 0x4}, {&(0x7f0000000480), 0x0, 0xfffffffffffffffa}, {&(0x7f00000004c0)="134895c2241ff5dbb990643ecaf64a57bc534f8a81d3d4af98068040a5926d2aa8a07b0d767a49a4e4dcb0064659f924b005eb27f5bcb763c005fabe4bcdce199977c1473954b1a427381dcd88ef36ad47bc853cbf6145f50419ead8348380972b758c91e8f87315c92a7eec0216c71e9681a1f4a0e4c74c66b0cd64bc55e70b923964c3", 0x84, 0x2}, {&(0x7f0000000580)="bed558b0750e6cf047509a97132654455a11bae8011bc999e31987d9374fb521157a4fec284766551b85c5a9fe7a6e9056587651832c8246c961066a5e13d65b8a01d8ed499bb62a0fbae152ca1d12dfdbd4c31e6d9d9fa3373d2208fbb44119124254417594b4987f70ace93f1f3e5b07ed2e2eeace4b2cb54c01d7f7a5a5e44ecd17f93f6a814ab7f464587eb9d8cf0253eba3f410adc43405bf04e989f8e74cff06ac0812efde89b5f074be6939878b7a96ff5fe09df9632fc7b4623e141a0d30bf", 0xc3, 0x6}, {&(0x7f0000000680)="f09731eda2cec13d20be681b7c4807983499b987b19aa7c04bb81bc6499cdd20b743d5c4775566e252b245b2b6a63b9f8ec3c218b5f78bcd93675b42505cfe01e45ec23003150cf7e33719760ab631df1f0dfa441a9c1b6b4d1f86210c7cc3d6b34b342e7161f0d41850d3b9b696342fd990b1034e06a3627346fdd79dc369da56a133ad09fc47", 0x87, 0x8}], 0x200000, &(0x7f0000000840)={[{@dmask={'dmask', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x9081}}, {@umask={'umask', 0x3d, 0xfff}}, {@umask={'umask', 0x3d, 0x800000000000}}], [{@fowner_lt={'fowner<', r2}}, {@pcr={'pcr', 0x3d, 0x26}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/nullb0\x00'}}, {@appraise='appraise'}]}) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:00 executing program 0: 14:30:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:00 executing program 5: 14:30:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") fallocate(0xffffffffffffffff, 0x10, 0x0, 0x10000200) 14:30:00 executing program 1: 14:30:00 executing program 5: 14:30:00 executing program 0: [ 381.177486] binder: 19096:19103 unknown command 0 14:30:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000080)=[0x3, 0x2], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) 14:30:00 executing program 1: [ 381.203932] ntfs: (device loop4): parse_options(): Unrecognized mount option fowner<00000000000000000000. [ 381.234317] binder: 19096:19103 ioctl c0306201 20000000 returned -22 14:30:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:00 executing program 5: [ 381.259530] ntfs: (device loop4): parse_options(): Unrecognized mount option pcr. [ 381.284386] ntfs: (device loop4): parse_options(): Unrecognized mount option smackfsfloor. [ 381.345845] binder: 19118:19119 unknown command 0 [ 381.368634] binder: 19118:19119 ioctl c0306201 20000000 returned -22 [ 381.547496] ntfs: (device loop4): parse_options(): Unrecognized mount option fowner<00000000000000000000. [ 381.561750] ntfs: (device loop4): parse_options(): Unrecognized mount option pcr. [ 381.570502] ntfs: (device loop4): parse_options(): Unrecognized mount option smackfsfloor. 14:30:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x101) 14:30:00 executing program 0: 14:30:00 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socket(0x10, 0x803, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "b142055a5633571b", "466bb8dbec84bfd0a9fa3ab7aa995a12e7d7443f003726a65d726546a8807ad6", "5b2acafc", "29ef4225ac592d05"}, 0x38) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0xc) 14:30:00 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 14:30:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r3, 0xfffffeff}, 0x8) fallocate(r1, 0x54, 0xffffffffffffffff, 0x10000203) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) 14:30:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socket(0x0, 0x803, 0x0) [ 381.721170] binder: 19136:19141 unknown command 0 [ 381.728707] binder: 19136:19141 ioctl c0306201 20000000 returned -22 14:30:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) readlink(0x0, &(0x7f0000000180)=""/244, 0xf4) 14:30:00 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) chroot(&(0x7f0000000000)='./file0\x00') fallocate(r0, 0x10, 0x0, 0x10000200) 14:30:00 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socket(0x10, 0x803, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "b142055a5633571b", "466bb8dbec84bfd0a9fa3ab7aa995a12e7d7443f003726a65d726546a8807ad6", "5b2acafc", "29ef4225ac592d05"}, 0x38) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 381.907053] binder: 19157:19164 unknown command 0 [ 381.935860] binder: 19157:19164 ioctl c0306201 20000000 returned -22 14:30:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) [ 382.076731] binder: 19173:19174 unknown command 0 [ 382.108891] binder: 19173:19174 ioctl c0306201 20000000 returned -22 14:30:01 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socket(0x10, 0x803, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "b142055a5633571b", "466bb8dbec84bfd0a9fa3ab7aa995a12e7d7443f003726a65d726546a8807ad6", "5b2acafc", "29ef4225ac592d05"}, 0x38) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0xc) 14:30:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r2 = geteuid() syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x100000000, 0x9, &(0x7f0000000740)=[{&(0x7f00000000c0)="57fc3c032cea60832bb675d109000907aa2188fd8d3263ab541b391bcb5397f6b9457d1e156b11a9e18ecea93a8576068540c1ff10dfe1ecc84df95c7e639282eb6ce468ac62", 0x46, 0xb79}, {&(0x7f0000000140)="d6929c677993b27cbd1535d1f81450008e66d44d11044e326019d72c2fcbcebc64985388fd1c22e6e33903c70fed5b560e69d4a0f47b29e532f128a1568984eb284055436a1fec1033c9d854495ab52476101bc33352dabeed21e155f551783a6092ef9323d5851374054def4e2abad5987a01591c7103d413875807d1230c75e10a2e6f040e654287038a8a15ba73d2a92223f193a6fc9e685485417520ad2792b6b9e4ebad6f5bc5d66c9f35ce807a05d087c956460880959a10867005b3f79ba8c78f2541daf0c38c1152d2bd9a418c5874c8ae6b77fcfdda7388049b4e01497eb600a7b35487fe6a01cbdd6cac", 0xef, 0x10000}, {&(0x7f0000000240)="e54373d67383b0099893e622b94c809dfa6f1a10eb931e2d6d295e0615663c60853134f57ae61b48dd4bf02867737d0a4991dfa61e8157b2baaa6ce35a765a944bb5c394625fef3d4e367d6ef88fd74d9873d5d1beb6d66ae784f81d3698c7e1e56e0222313f3989dd1f3e9d1421ada9b9f170e57a3d3114da5fe0cbbe611a9ae7463d0da77af974c554abdb734fa565bbecf47708d2f7abdb5314127174e07fbd6edac53fb7437f497b96a36f98ce326d358c815b74387391ad81bce716349b2e1e27508fcf4b62aead2ae7f6509c7e93202499abeedffbcc4f47be69d6117437bd23993ed17d16f9dcf448", 0xec}, {&(0x7f0000000380)="ce726330f348d6103b659e20f1b229f39ac45af622accfbf9e01e7916e30de1354ca0805d497130c1acfac5370402310f59ac84ff526ec397811917cbe4cff4912dcd58e5a690693791d5e98173b1a2c9588dcf27ba97dc33c6222e1451142f8f4e2dba9339e2ad1e631122bb875734c30a6acfc84ec71b0e81585f61a3ffb368140c7efb26c4fa163530ec3911ea0b149f996ad2ee7de", 0x97, 0x5}, {&(0x7f0000000440)="4dfa02d108dd99f49f569d35d8", 0xd, 0x4}, {&(0x7f0000000480), 0x0, 0xfffffffffffffffa}, {&(0x7f00000004c0)="134895c2241ff5dbb990643ecaf64a57bc534f8a81d3d4af98068040a5926d2aa8a07b0d767a49a4e4dcb0064659f924b005eb27f5bcb763c005fabe4bcdce199977c1473954b1a427381dcd88ef36ad47bc853cbf6145f50419ead8348380972b758c91e8f87315c92a7eec0216c71e9681a1f4a0e4c74c66b0cd64bc55e70b923964c3", 0x84, 0x2}, {&(0x7f0000000580)="bed558b0750e6cf047509a97132654455a11bae8011bc999e31987d9374fb521157a4fec284766551b85c5a9fe7a6e9056587651832c8246c961066a5e13d65b8a01d8ed499bb62a0fbae152ca1d12dfdbd4c31e6d9d9fa3373d2208fbb44119124254417594b4987f70ace93f1f3e5b07ed2e2eeace4b2cb54c01d7f7a5a5e44ecd17f93f6a814ab7f464587eb9d8cf0253eba3f410adc43405bf04e989f8e74cff06ac0812efde89b5f074be6939878b7a96ff5fe09df9632fc7b4623e141a0d30bf", 0xc3, 0x6}, {&(0x7f0000000680)="f09731eda2cec13d20be681b7c4807983499b987b19aa7c04bb81bc6499cdd20b743d5c4775566e252b245b2b6a63b9f8ec3c218b5f78bcd93675b42505cfe01e45ec23003150cf7e33719760ab631df1f0dfa441a9c1b6b4d1f86210c7cc3d6b34b342e7161f0d41850d3b9b696342fd990b1034e06a3627346fdd79dc369da56a133ad09fc47", 0x87, 0x8}], 0x200000, &(0x7f0000000840)={[{@dmask={'dmask', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x9081}}, {@umask={'umask', 0x3d, 0xfff}}, {@umask={'umask', 0x3d, 0x800000000000}}], [{@fowner_lt={'fowner<', r2}}, {@pcr={'pcr', 0x3d, 0x26}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/nullb0\x00'}}, {@appraise='appraise'}]}) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xfffffffffffffffb, &(0x7f0000000040)="f3dba50d7c0bcfe47b81dbf5552ce6cf0c282b32a3d4904569f587e50451f60d70a66c95e995b0e26ead76624fa3364af2de230f86c65e0990157f051348301627c27bdbcc6a523afbd3d527b3a6e61621cf5e0604ddb37f42b1c17b47e19788fae9e42748551ad183d9427df0ed679d8c139e63630f685475bcdf1d1ee1080684f4e3cf007e081a386fb193955498923a66651ac3830e1e6277ea475b2698") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x206220, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0xffffd161, 0x2}, &(0x7f00000000c0)=0x10) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r7, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000300)={r10}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000180)={r10}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000100)={r10, @in6={{0xa, 0x4e20, 0x9, @remote, 0x5}}, 0x1, 0x3, 0x4, 0x600, 0x9}, 0x98) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r13, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e24, 0x9, @ipv4={[], [], @multicast1}, 0x80000001}, r14}}, 0x38) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r11, 0x0) fallocate(r11, 0x7, 0x80000000000, 0x7fff) 14:30:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000080)={{0x8}, 'port1\x00', 0x80, 0x40000, 0x10000, 0x1000, 0x5, 0x6, 0x6, 0x0, 0x4, 0x7}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) [ 382.595120] binder: 19184:19194 unknown command 0 [ 382.606602] binder: 19184:19194 ioctl c0306201 20000000 returned -22 14:30:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) readlink(0x0, &(0x7f0000000180)=""/244, 0xf4) [ 382.745219] binder: 19199:19205 unknown command 0 14:30:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/x\x04nullb0\x00', 0x103022, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) [ 382.787607] binder: 19199:19205 ioctl c0306201 20000000 returned -22 14:30:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000040)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x2c222, 0x0) fallocate(r3, 0x10, 0x0, 0x10000200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) 14:30:01 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socket(0x10, 0x803, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "b142055a5633571b", "466bb8dbec84bfd0a9fa3ab7aa995a12e7d7443f003726a65d726546a8807ad6", "5b2acafc", "29ef4225ac592d05"}, 0x38) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 382.948314] binder: 19213:19217 unknown command 0 [ 382.986798] binder: 19213:19217 ioctl c0306201 20000000 returned -22 14:30:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x4100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffb1, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @clear_death], 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00fb00001fd12258d78cdb40a9e2404c42bd453d7b42bc0f457be9595ab107abe0fe0ce76e106f208d0b5330cb2d5540d0119a6ce191ff38d39b8c08a246da969aea4df5633e1665d8b1bed899a8b0b50c407c8715d0ea53314aaee4c762828667350f4d2fd427b4c2b0297c538c001000003ddfb30935fb0318c8af0d60b44a9bfeb7c8c322a4068b6f698a838e12ecdf03ac60b1b9bd01f09a4b6cc7c67fc60a01bf928880da6883a77e533027dbf892b9ad562b29f9727de4e844698c7f7d255c57256f3e94048ee4199babd2117beacb964c17aefa9a9c0d30e6ef9e708beb6f950328cc4b221b8f0933b71806e375b76763b3d805ab25628202e182a294d1e0ff69dadbed7c954a3a06bbf09f781fe95da5fccb91e270"], 0xd5, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$UHID_CREATE2(r4, &(0x7f0000000580)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x47, 0x3, 0x0, 0x3, 0x4, 0x6, "cac9af20d93609d68267fb3f5e9ea637f3e8146b3eab102a3972fe9cac27fde3aeee65d0443f34262cc1e6633105ee2cc4fbf6a6c2f4af6b314d8d41bea13f86bc9f8c4f37df21"}, 0x15f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r9, 0x80404508, &(0x7f0000000d80)=""/142) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000c40)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e24, 0x123f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x87, @empty, 0x6}], 0x94) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x200, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r10, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x3, "a11fd9bb777ed6d2de013aa84c1780812dde64019c3679140f98742d991c188999137e2c0c273c01ce5ee4a98e9a5f9621977495adc63b5e42cfed5f869c9b9c3762653da39cff6f836d3d8c2f820218e7f36d69edfe4f612f003ba171580d5d229a27995ec89a2ae6ea35537a994f882cb14b30ea1e81f4ffce42d406d795b1667439abc3912178aa17fed740c80915b5df43ad2e40db2e0c07023314ebb582148f97bf4b7f329a3f160dfa8dc19707f955096b143bd08da435072e87ba883dfc7fec35c82353166a54e432bd274068adc33e99bed553bae5b0410241e3d969c47980bfb66acc42eae3297dadf62b3f5d48f2bbbae626416b7f89ba77f540b4", 0xb9, 0x4, 0xffc0000000000000, 0x2, 0x100000000, 0x1, 0x3}, r11}}, 0x128) write$RDMA_USER_CM_CMD_DISCONNECT(r8, &(0x7f0000000280)={0xa, 0x4, 0xfa00, {r11}}, 0xc) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000200)={0x6, 0x2, [{0x3ff, 0x0, 0x7}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x6}, {0x80000001, 0x0, 0x9}, {0x18, 0x0, 0x9}, {0x1, 0x0, 0x100}]}) [ 383.153070] binder: 19223:19224 unknown command 0 14:30:02 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socket(0x10, 0x803, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "b142055a5633571b", "466bb8dbec84bfd0a9fa3ab7aa995a12e7d7443f003726a65d726546a8807ad6", "5b2acafc", "29ef4225ac592d05"}, 0x38) [ 383.177133] binder: 19223:19224 ioctl c0306201 20000000 returned -22 14:30:02 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) ioctl(r0, 0x1001000008912, &(0x7f0000000240)="11dc030d5e0b85738a65a87fdab60c1b8ae911cfe47bf070") getpgid(0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x400000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000480)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000380)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x77}) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@nfc_llcp, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, @empty, @loopback}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) fchmod(r2, 0x29) ftruncate(0xffffffffffffffff, 0xa48204) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(r4) bind$inet6(r3, 0x0, 0x0) memfd_create(&(0x7f0000001600)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4c9622eafaac2444, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000100)=0x1000) fallocate(r5, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 14:30:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) [ 383.356808] binder: 19234:19238 unknown command 0 [ 383.392998] binder: 19234:19238 ioctl c0306201 20000000 returned -22 14:30:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) 14:30:02 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) 14:30:02 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) ioctl(r0, 0x1001000008912, &(0x7f0000000240)="11dc030d5e0b85738a65a87fdab60c1b8ae911cfe47bf070") getpgid(0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x400000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000480)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000380)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x77}) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@nfc_llcp, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, @empty, @loopback}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x0, @multicast1=0xe0000014}}}, 0x90) fchmod(r2, 0x29) ftruncate(0xffffffffffffffff, 0xa48204) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(r4) bind$inet6(r3, 0x0, 0x0) memfd_create(&(0x7f0000001600)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4c9622eafaac2444, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000100)=0x1000) fallocate(r5, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 14:30:02 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x929}}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(r2, 0x8, &(0x7f0000000000)="11cfa50d00e47b4070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r7, 0x0, &(0x7f0000000100)) fallocate(r6, 0x4, 0x5dc, 0x10000200) [ 383.655905] binder: 19245:19254 unknown command 0 [ 383.673308] binder: 19245:19254 ioctl c0306201 20000000 returned -22 14:30:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000080)={0x4, 0x24e38ffc, 0x1, 0x1}) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) [ 383.842119] binder: 19264:19266 unknown command 0 [ 383.856926] binder: 19264:19266 ioctl c0306201 20000000 returned -22 14:30:02 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socket(0x10, 0x803, 0x0) 14:30:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000000)='\x00'/11) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSTI(r4, 0x5412, 0x101) 14:30:02 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) [ 383.971762] binder: 19273:19276 unknown command 0 [ 384.026601] binder: 19273:19276 ioctl c0306201 20000000 returned -22 14:30:03 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socket(0x10, 0x803, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{}, "b142055a5633571b", "466bb8dbec84bfd0a9fa3ab7aa995a12e7d7443f003726a65d726546a8807ad6", "5b2acafc", "29ef4225ac592d05"}, 0x38) 14:30:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:03 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) 14:30:03 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) [ 384.217993] binder: 19288:19293 unknown command 0 14:30:03 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socket(0x10, 0x803, 0x0) [ 384.241681] binder: 19288:19293 ioctl c0306201 20000000 returned -22 14:30:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) [ 384.434810] binder: 19300:19303 unknown command 0 [ 384.448509] binder: 19300:19303 ioctl c0306201 20000000 returned -22 14:30:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x26, 0x2b, 0x8, 0x1d, 0x3, 0x9, 0x0, 0x16b, 0xffffffffffffffff}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f00000000c0)={0x0, 0x0, {0x576, 0x101, 0x6, 0x218000}}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r4, 0x10, 0x0, 0x10000200) 14:30:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="0ed4d1535a12272d562f5d8475aebacf9784a713c0cae100cf905819a2ae39231f24d5a90a4f3b14bfb7c72279b2a1e6f124d1477d7d832507e4db4a53f268c8bedcfd", 0x43, 0x0) keyctl$read(0xb, r2, &(0x7f0000000240)=""/126, 0x7e) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=[@increfs_done, @decrefs, @release, @clear_death], 0x0, 0x0, 0x0}) 14:30:03 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) 14:30:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) nanosleep(&(0x7f0000000040), &(0x7f0000000080)) 14:30:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/Uev/binder,\x10', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x836d76a2982aab37, 0x6, 0x8, 0xff, 0x200, 0x1, 0x2, [], r2, r3, 0x5}, 0x3c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000240)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) 14:30:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:03 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 384.811371] binder: 19323:19330 unknown command 0 14:30:03 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) 14:30:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) [ 384.840938] binder: 19323:19330 ioctl c0306201 20000000 returned -22 14:30:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) [ 385.035575] binder: 19342:19344 unknown command 0 [ 385.063057] binder: 19342:19344 ioctl c0306201 20000000 returned -22 14:30:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000380)="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") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) fallocate(r2, 0x10, 0x0, 0x10000200) 14:30:04 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:04 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='\x80\x00\x02 \x00\x00\x00\xe4kb0\x00', 0x24a000, 0x0) 14:30:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r3 = semget$private(0x0, 0x4, 0x104) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) migrate_pages(r4, 0xfffffffffffffff8, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x9) semtimedop(r3, &(0x7f0000000040)=[{0x1, 0x7, 0x3800}, {0x2, 0x7, 0x800}, {0x0, 0x200, 0x800}, {0x3, 0x6, 0x800}, {0x1, 0x40, 0x800}], 0x5, &(0x7f0000000080)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r5, 0x10, 0x0, 0x10000200) 14:30:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:04 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:04 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 385.432456] binder: 19362:19370 unknown command 0 14:30:04 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) [ 385.461149] binder: 19362:19370 ioctl c0306201 20000000 returned -22 14:30:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:04 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:04 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x106}}, 0x20) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r3, 0x10, 0x0, 0x10000200) 14:30:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) [ 385.648057] binder: 19383:19391 unknown command 0 14:30:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) [ 385.671344] binder: 19383:19391 ioctl c0306201 20000000 returned -22 14:30:04 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:04 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0x2}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r0, 0x9c, 0xffffffffffffffff, 0xfe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mq_timedsend(r3, &(0x7f0000000080)="f7c61d122cec6e27a100505e91ed85d21f3679c3966775654d309b2025f1f64f8a3291abc3b3ce841d1317b965d283c8c5c459f83d8f6144a5e3f27888c5ee1fd287c80ef5246c9b24c9ea8411dca8dd9b1c37898fe77511a5e783e54d8b09ce56a823de7710469503ccaeb79452f10812a5000197898a01fd3435c50e61ca96c864bb426924aba2cd704dd8b5424b0c61276fbb0e07f17748a87bcb09c2dee5acaf80c0b2b9a5150be0768b5e25708146ba3fe8674ffa0b097ce00a6ac14e9584addcd0aac232df434b371c53749c2a7aaa93a9436039af12c5514b5db719d209", 0xe1, 0x100, &(0x7f0000000180)={0x77359400}) [ 385.989172] binder: 19406:19412 unknown command 0 14:30:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) [ 386.014271] binder: 19406:19412 ioctl c0306201 20000000 returned -22 14:30:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) getsockname(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:05 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:05 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:05 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:05 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x80000004, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:30:05 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:05 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4001000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") keyctl$negate(0xd, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000b00)="11d8a50d5e0bcfe47bf07040c33ef5f04cb319aeb048524d63d0bd322eaebec59003e2a3509d6ef9d30b890ec84834e623b58d10a048190c6e8ca73cba1a3a7c0d88706b90059ad288f02b4bfbb5b5644d9686f4ff4c7e6be299b09044707212e600000000000000327a1aca68626f2e24399b3e9ebd8211c2a7bff7dd6f3015d423c60b1449aba650a5fcdf8018b087a51bb6db0746b3676535c31db51f2b9985a0f22568daf9aa4e1641a13174c07d919a408889c297d492d234bdc81043f497a08a8abd0716cc2b0dbf29a33d770f7235602888b63e9bca010ede1f1a4da0e34219040eb35f0809a3dfbfd17a8dfc4414f3cbca5f9a15e8cf62cc56bf0af5ec8675c87a9a9ecacd723142836d9ace4397eeed1db20582c96277790c51a1af387be3d285f0b86307ec748f") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000380)={"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"}) fallocate(r2, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x1, 0x2) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ub\xce@\x1d\x99rl\x00', 0x4200, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x0, 0x38}, &(0x7f0000000780)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, 0x0, 0x0) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000008c0)={r7, 0x408, 0x10}, &(0x7f0000000900)=0xfffffffffffffd85) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r9, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000140)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f0000000300)={r10, &(0x7f0000000480)=""/112}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r12, &(0x7f00000007c0)="7a119e24f2287c006e7948d2060880e9e1bb9e1cd908bf91adcc604edcd5af6ccc3af25b73a39275e955709c843ec16d6f90a4c88f51e50145d1b4bff563a90dccefea900bca994d32c0702b27a479fa8fd174f93faa178a5467e58f23a1b8b936489f53732210976921ce9abbe0e434cb0cce61c4319e58a9512e36ecd76c10d01215c50285d1ef4d7ecf346ef66367af9bba001310054740a8d8cfbc9fea7a46a49ab94c9329d4c408951bad54fe820c7f263800e37ed7cf4bb16d508d430665e33333f6e387e9c5648445e3785b6ee1f79aaaf26511b1e7e0ccd821", 0xdd, 0x3, &(0x7f00000002c0)={r13, r14+30000000}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f00000009c0)={r10, &(0x7f0000000900)=""/162}) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f0000000100)={r10, 0x7}) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r18 = dup(r17) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) splice(r18, &(0x7f0000000080), r16, &(0x7f00000000c0), 0x2, 0x8) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000200)='/dev/usbmon0\x00', 0xb0000, 0x0) [ 386.776283] binder: 19464:19474 ioctl c0306201 0 returned -14 14:30:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:30:05 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:05 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:05 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 386.940655] binder: 19480:19484 ioctl c0306201 0 returned -14 [ 387.069214] binder: 19492:19494 ioctl c0306201 0 returned -14 14:30:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r3, 0x10, 0x0, 0x10000200) 14:30:06 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:06 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:30:06 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback, 0x5c}) 14:30:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:30:06 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:06 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:30:06 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:06 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x79ce00b4bc275434, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0x7, 0x81, 0x8, 0x9, 0x6, 0x80, 0xff, 0x7, 0x7f, 0x0, 0xfa, 0x0, 0x6, 0x7e, 0x91, 0x81}}) 14:30:06 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) 14:30:06 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:06 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) 14:30:06 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:06 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) 14:30:06 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) 14:30:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:07 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r0, 0x10, 0x0, 0x10000200) 14:30:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4) ioctl(r0, 0x100000890e, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) getsockopt(r1, 0x5, 0x6, &(0x7f0000000080)=""/71, &(0x7f0000000100)=0x47) fallocate(r2, 0x10, 0x0, 0x10000200) 14:30:07 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:07 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 388.372500] binder: 19581:19592 unknown command 0 [ 388.383648] binder: 19581:19592 ioctl c0306201 20000000 returned -22 14:30:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:30:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:07 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:07 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 388.540193] binder: 19595:19598 unknown command 0 14:30:07 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:07 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 388.585280] binder: 19595:19598 ioctl c0306201 20000000 returned -22 14:30:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bff00daa8f95200cbb75961a3763f06072ac0128a32e1f9d0388bbf8a6988365e8beccaf654cdbc758632aba46cc374469df46203fd7d64507bc34d0d10d22d0e1fd9e34623fdc3ad1eca1a230d0cb1f03036231cc90f73970894eb208dc5b5d23b64e3fd01b580a867f08e444e51303bf39272ebd9c614be67969d1103efb663f3f5d24402f7214252") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x103) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r5, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000300)={r8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000180)={r8}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000040)={0x1f, 0x8, 0x0, 0xc7, r8}, 0x10) close(r1) write(r2, &(0x7f0000000100), 0x14088) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) fallocate(r10, 0x72, 0x10000000000000, 0x87) 14:30:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:30:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:07 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:07 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:07 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 388.999445] binder: 19617:19628 unknown command 0 14:30:07 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 389.039710] binder: 19617:19628 ioctl c0306201 20000000 returned -22 14:30:08 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r0, 0x10, 0x0, 0x10000200) 14:30:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:08 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000040)={0xa, 0xa, 0x7a, 0x4}, 0xa) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x420200, 0x0) fallocate(r3, 0x10, 0x0, 0x10000200) 14:30:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:08 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:08 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:08 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:08 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:08 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r4) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$update(0x2, r5, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000240)={0x5, 0x1, &(0x7f0000000080)=""/90, &(0x7f0000000100)=""/121, &(0x7f0000000180)=""/139, 0x4000}) 14:30:08 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:08 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x110) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) fallocate(r2, 0x10, 0x0, 0x10000200) 14:30:08 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:08 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:08 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:08 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:08 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 14:30:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:09 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 14:30:09 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:09 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:09 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 14:30:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0xffffffffffffff8f) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r0, 0x41, 0x0, 0x10000200) 14:30:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 14:30:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:09 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:09 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xc5cf007, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe473f070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = socket$inet6(0xa, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0xffffffff, 0x40000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x0, 0x200, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r7, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000300)={r10}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000180)={r10}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000200)={r10, 0x3a, "ba028360c31bf1804fbe1bde582830089218f9b5e53c01cac5e5bde740008951b2984ab5c3e29fb36c04f29ff526fe08deba6b030ed21a0dc7ce"}, &(0x7f0000000280)=0x42) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000002c0)={r11, 0x400}, &(0x7f0000000380)=0x8) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/18) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r15, 0x84, 0x71, &(0x7f0000000300)={r13}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r13}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r13, 0x81}, 0x8) 14:30:09 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 14:30:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:09 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r0, 0x10, 0x0, 0x10000200) 14:30:09 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 14:30:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:09 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 14:30:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 14:30:09 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 14:30:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:10 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r0, 0x8, 0x0, 0x10000200) 14:30:10 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 14:30:10 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 14:30:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:10 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:10 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 14:30:10 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 14:30:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c}}], 0x80}, 0x6010) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000380)="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", 0x1000, 0x9}], 0x41402, &(0x7f0000000100)={[{@quiet='quiet'}, {@type={'type', 0x3d, "0969f4fe"}}, {@session={'session', 0x3d, 0x3}}, {@type={'type', 0x3d, "a320062e"}}, {@type={'type', 0x3d, "1bae2aa2"}}, {@gid={'gid', 0x3d, r2}}, {@quiet='quiet'}, {@session={'session', 0x3d, 0x1}}, {@quiet='quiet'}], [{@appraise='appraise'}, {@dont_measure='dont_measure'}]}) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r3, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={r6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={r6, 0x5, 0x10, 0x77f, 0x642d}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={r7, 0x37, "27b15e713cb15409b319775104eef4a78ca3542f3c7098a4bfba75a582b4b7173dfa0234c8a85f1f5c3f435c200aaea3fd757956c53fb2"}, &(0x7f0000000100)=0x3f) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r8, 0x10, 0x0, 0x10000200) 14:30:10 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 14:30:10 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 14:30:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:10 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:10 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:10 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 14:30:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:10 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:10 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 14:30:10 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7fff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fallocate(r1, 0x22, 0x8, 0x10000202) 14:30:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001680)={0x56, 0x0, 0x5, {0xf7c1, 0x1}, {0xb4, 0x1200}, @ramp={0x3, 0x1f, {0x2, 0x2, 0x81, 0x5f}}}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000002c0)={0x10001}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0xc0, &(0x7f0000000180)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x8000, @mcast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x1}, @in6={0xa, 0x4e22, 0x9, @local, 0x7fffffff}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x400, @mcast2, 0x7fff}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001380)={0x0}, &(0x7f00000013c0)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000001500)={&(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x9}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="f9ec03344b4234012e4ebd49e235eda0a9b01315effa0b491ffff5c52b44ecdf30dcf293c3dbfa0af0e08ecf433ce5960cfe4987bfde67cf46", 0x39}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000000c0)="d9441d53a6f07a62c0193ee98c2030d39acb5cd7d9ab7eb08364f98b8e21096da7837a0c95a5e0191b9fce988a5ce729d22add534bb91ae4e22b92e65c92e041df360f7f2c7724fc23fc3f", 0x4b}], 0x3, &(0x7f0000001400)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @sndrcv={0x30, 0x84, 0x1, {0xed, 0xff01, 0x0, 0x5b96, 0x81, 0x40000, 0x10001, 0xea3f, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x26}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0xc, 0x9, 0x6, 0x8, r8}}], 0xe8, 0x4000000}, 0x0) fallocate(r4, 0x10, 0x0, 0x3) getsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000001580)=""/176, &(0x7f0000001640)=0xb0) 14:30:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:10 executing program 0: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 14:30:10 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:10 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:11 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, 0xfffffffffffffffe, 0x9142a4063bca6514) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0x283, 0x2}) fallocate(r2, 0x10, 0x0, 0x10000200) 14:30:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r3, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={r6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={r6, 0x5, 0x10, 0x77f, 0x642d}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={r7, 0x37, "27b15e713cb15409b319775104eef4a78ca3542f3c7098a4bfba75a582b4b7173dfa0234c8a85f1f5c3f435c200aaea3fd757956c53fb2"}, &(0x7f0000000100)=0x3f) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r8, 0x10, 0x0, 0x10000200) 14:30:11 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 392.240172] net_ratelimit: 4 callbacks suppressed [ 392.240178] protocol 88fb is buggy, dev hsr_slave_0 [ 392.240190] protocol 88fb is buggy, dev hsr_slave_1 [ 392.245144] protocol 88fb is buggy, dev hsr_slave_1 14:30:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:11 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c4000"/52], 0x0, 0x0, 0x0}) 14:30:11 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:11 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:30:11 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 392.591118] binder: 19911:19913 ioctl c0306201 0 returned -14 14:30:11 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 392.800135] protocol 88fb is buggy, dev hsr_slave_0 14:30:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r3, 0x10, 0x0, 0x10000200) 14:30:11 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:30:11 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:11 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) 14:30:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0x283, 0x2}) fallocate(r2, 0x10, 0x0, 0x10000200) 14:30:11 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 392.981954] binder: 19934:19940 ioctl c0306201 0 returned -14 14:30:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 14:30:12 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) [ 393.163052] binder: 19948:19951 ioctl c0306201 0 returned -14 14:30:12 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:30:12 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 14:30:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:30:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xfffffffffffffffa) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) 14:30:12 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 14:30:12 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fallocate(r2, 0x10, 0x20, 0x10000200) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040)) 14:30:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r3, 0x10, 0x0, 0x10000200) 14:30:12 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 14:30:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x9, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fallocate(r1, 0x8, 0x0, 0x10000200) 14:30:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:30:12 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 14:30:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) 14:30:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x1d, 0x80000000, 0x10000200) 14:30:12 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7fffffff, &(0x7f0000000180)="11dca50df0700000000000cfbed039c288b4b55bffa5e35218f2612dcca157718891e54a338db825b41cab9f563055ceb1b765ab78c97c67db89195141df1012ec9991e743f28ef9ecae27572cb0538d9c1d996a15ffb4b7f3d50d7e4eb930bec1309f2c8864d98e2d747970e08f603d8a1602584103d187ff968ac7be516b1a9b26ee07949440993347c8f50fdd5ea660b763405aef86ee656a635e3371") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000000)={{0x2, 0x0, @reserved="44fd35910d6ee6f9eab1a3c39c8498b9067129dc5d7085edc45cdc2979ba5b92"}}) 14:30:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) 14:30:13 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 14:30:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100100, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x0, 0x78}) 14:30:13 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:13 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) 14:30:13 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 14:30:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={0x3, @default, 0xee00}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:13 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:13 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 14:30:13 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 14:30:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 14:30:13 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) 14:30:13 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:13 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 14:30:13 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") close(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffbff, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1e) sched_setattr(r3, &(0x7f00000000c0)={0x30, 0x0, 0x1, 0x2, 0x5, 0x7fffffff, 0x401, 0x7fff}, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x7, {0x80, 0x9, 0x3, 0x22, 0x3f}, 0x82db, 0x3}, 0xe) fallocate(r1, 0x10, 0x0, 0x10000200) [ 394.786548] FAULT_INJECTION: forcing a failure. [ 394.786548] name failslab, interval 1, probability 0, space 0, times 0 [ 394.855665] CPU: 0 PID: 20071 Comm: syz-executor.3 Not tainted 4.14.146 #0 [ 394.862738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.872101] Call Trace: [ 394.872122] dump_stack+0x138/0x197 [ 394.872143] should_fail.cold+0x10f/0x159 [ 394.872158] should_failslab+0xdb/0x130 [ 394.872175] __kmalloc+0x2f0/0x7a0 [ 394.872190] ? __lock_acquire+0x5f7/0x4620 [ 394.872202] ? rw_copy_check_uvector+0x1d8/0x290 [ 394.899090] rw_copy_check_uvector+0x1d8/0x290 [ 394.903683] import_iovec+0xa2/0x370 [ 394.903695] ? dup_iter+0x260/0x260 [ 394.903705] ? save_trace+0x290/0x290 [ 394.903716] ? proc_fail_nth_write+0x7d/0x180 [ 394.903727] vfs_readv+0xb3/0x130 [ 394.903738] ? compat_rw_copy_check_uvector+0x310/0x310 [ 394.928177] ? lock_downgrade+0x6e0/0x6e0 [ 394.932348] ? __fget+0x237/0x370 [ 394.932364] ? __fget_light+0x172/0x1f0 [ 394.939785] do_preadv+0x15d/0x200 [ 394.939797] ? do_readv+0x2d0/0x2d0 [ 394.939808] ? SyS_writev+0x30/0x30 [ 394.950596] SyS_preadv+0x31/0x40 14:30:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket(0x3, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xf0, r3, 0x701, 0x0, 0x0, {0x13, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_BEARER={0xdc, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}]}, 0xf0}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="e5532b538daa07acc8b7919b9fb74c61e128cd37d1cff5342dcb7c2ad5b9abf426dc2fd222708d03eb35958667649b9ed37aa965a2ef3f7ac6b109a64a86504bb6adaf1792e09b576dcc50ee48777a911195fe304e66198b0ef8c2d07e556752986fe5ddcb280762adfc2180780910729b2dc3988c39303aa62888dc0921db4c850c85c0cce827e1cd40a156a8a77c185266fa0478b800931f74d512c105d803c5605a5c5fe1a97e9a920713d7253d1bc343adec691f193f0288524b3ec66010d40a067918bcb4350b4dc174c3c2749a5b97f6b4a19fa866cc49b53d143cc935ea1b655bbfe53dc44100baa0b9", @ANYRES16=r3, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x40000010}, 0x20400) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4222, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x800000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000180)={0x5}, 0x4) fallocate(r4, 0x10, 0x80000001, 0x10000200) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x2840040, &(0x7f0000000800)={'tranr0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1a, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000"], 0x0, 0x0, 0x0}) [ 394.954075] do_syscall_64+0x1e8/0x640 [ 394.957979] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 394.962849] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 394.968054] RIP: 0033:0x459a29 [ 394.971247] RSP: 002b:00007f7465be2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 394.978981] RAX: ffffffffffffffda RBX: 00007f7465be2c90 RCX: 0000000000459a29 [ 394.986267] RDX: 1000000000000038 RSI: 0000000020000040 RDI: 0000000000000003 [ 394.993552] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 14:30:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/156, &(0x7f0000000100)=0x9c) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="293ad15fdd26b5bb214fe5d4206a1bf39474a09ce82a536a80ebb88120f97d91489219ea398541d58d55e804ebce6355e5ee5b7ef59c289e4112eef0740f0b5da23919413720fb88e843962f0d34e8e6d9daa5013e8959efc020afb2aac747929c1a216486c651a52869d3b79b90223aade14adce490a70d344416dbf94a5b637a9e8b4fafcbabbfb5d250e6484ff1ab050b3910efa8e13471cb12a06e2acf83036ea5718a91c73675010c8c81", 0xad}, {&(0x7f0000000380)="55cf627675", 0x5}, {&(0x7f00000003c0)="61d28b3e001bdfede6087b3181233256f5486848103a6540e1ebd6b7e5e90e0ceb4c7b8aaf89d09dd0a61b0092def13ac7799e00fa5c7d991813ef27c33dd2b521b2696e26", 0x45}], 0x3, 0x0, 0x0, 0xc1}, 0x8000) 14:30:13 executing program 1 (fault-call:2 fault-nth:0): syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:13 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1a, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000"], 0x0, 0x0, 0x0}) [ 395.000825] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7465be36d4 [ 395.000831] R13: 00000000004c6d4f R14: 00000000004dc148 R15: 0000000000000004 [ 395.037148] FAULT_INJECTION: forcing a failure. [ 395.037148] name failslab, interval 1, probability 0, space 0, times 0 [ 395.067376] FAULT_INJECTION: forcing a failure. [ 395.067376] name failslab, interval 1, probability 0, space 0, times 0 [ 395.079068] CPU: 0 PID: 20089 Comm: syz-executor.0 Not tainted 4.14.146 #0 [ 395.086102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.086107] Call Trace: [ 395.086126] dump_stack+0x138/0x197 [ 395.086145] should_fail.cold+0x10f/0x159 [ 395.086164] should_failslab+0xdb/0x130 [ 395.086177] __kmalloc+0x2f0/0x7a0 [ 395.113399] ? __lock_acquire+0x5f7/0x4620 [ 395.117650] ? rw_copy_check_uvector+0x1d8/0x290 [ 395.122430] rw_copy_check_uvector+0x1d8/0x290 [ 395.122452] import_iovec+0xa2/0x370 [ 395.122464] ? dup_iter+0x260/0x260 [ 395.122472] ? save_trace+0x290/0x290 [ 395.122485] ? proc_fail_nth_write+0x7d/0x180 [ 395.142958] vfs_readv+0xb3/0x130 [ 395.146434] ? compat_rw_copy_check_uvector+0x310/0x310 [ 395.151821] ? lock_downgrade+0x6e0/0x6e0 [ 395.151839] ? __fget+0x237/0x370 [ 395.151854] ? __fget_light+0x172/0x1f0 [ 395.163410] do_preadv+0x15d/0x200 [ 395.163423] ? do_readv+0x2d0/0x2d0 [ 395.163435] ? SyS_writev+0x30/0x30 [ 395.163444] SyS_preadv+0x31/0x40 [ 395.163457] do_syscall_64+0x1e8/0x640 [ 395.177673] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.177707] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 395.177717] RIP: 0033:0x459a29 [ 395.177721] RSP: 002b:00007fcb8bd71c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 395.202487] RAX: ffffffffffffffda RBX: 00007fcb8bd71c90 RCX: 0000000000459a29 [ 395.209750] RDX: 1000000000000038 RSI: 0000000020000040 RDI: 0000000000000003 14:30:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1a, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000"], 0x0, 0x0, 0x0}) 14:30:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000000c0)={0xb0, 0x0, [0x6, 0x2, 0x5, 0x2]}) [ 395.217008] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 395.224266] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcb8bd726d4 [ 395.231519] R13: 00000000004c6d4f R14: 00000000004dc148 R15: 0000000000000004 [ 395.246209] CPU: 1 PID: 20084 Comm: syz-executor.1 Not tainted 4.14.146 #0 [ 395.253280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.262664] Call Trace: [ 395.262684] dump_stack+0x138/0x197 [ 395.262701] should_fail.cold+0x10f/0x159 [ 395.262717] should_failslab+0xdb/0x130 [ 395.262729] __kmalloc+0x2f0/0x7a0 [ 395.262745] ? __lock_acquire+0x5f7/0x4620 [ 395.262756] ? rw_copy_check_uvector+0x1d8/0x290 [ 395.262769] rw_copy_check_uvector+0x1d8/0x290 [ 395.262788] import_iovec+0xa2/0x370 [ 395.262801] ? dup_iter+0x260/0x260 [ 395.262809] ? save_trace+0x290/0x290 [ 395.262820] ? proc_fail_nth_write+0x7d/0x180 [ 395.262833] vfs_readv+0xb3/0x130 [ 395.262844] ? compat_rw_copy_check_uvector+0x310/0x310 [ 395.262860] ? lock_downgrade+0x6e0/0x6e0 [ 395.262875] ? __fget+0x237/0x370 [ 395.262890] ? __fget_light+0x172/0x1f0 [ 395.262902] do_preadv+0x15d/0x200 [ 395.262914] ? do_readv+0x2d0/0x2d0 [ 395.262925] ? SyS_writev+0x30/0x30 [ 395.262936] SyS_preadv+0x31/0x40 [ 395.262949] do_syscall_64+0x1e8/0x640 [ 395.262958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.262973] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 395.262982] RIP: 0033:0x459a29 14:30:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x27, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c"], 0x0, 0x0, 0x0}) [ 395.262987] RSP: 002b:00007f9c59839c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 395.262998] RAX: ffffffffffffffda RBX: 00007f9c59839c90 RCX: 0000000000459a29 [ 395.263004] RDX: 1000000000000038 RSI: 0000000020000040 RDI: 0000000000000003 [ 395.263009] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 395.263015] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c5983a6d4 [ 395.263019] R13: 00000000004c6d4f R14: 00000000004dc148 R15: 0000000000000004 14:30:14 executing program 1 (fault-call:2 fault-nth:1): syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 395.422071] binder: 20100:20101 unknown command 811791 [ 395.451587] binder: 20100:20101 ioctl c0306201 20000000 returned -22 [ 395.464827] FAULT_INJECTION: forcing a failure. [ 395.464827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 395.477119] CPU: 0 PID: 20103 Comm: syz-executor.1 Not tainted 4.14.146 #0 [ 395.484159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.493528] Call Trace: [ 395.496132] dump_stack+0x138/0x197 [ 395.499783] should_fail.cold+0x10f/0x159 [ 395.503949] ? __might_sleep+0x93/0xb0 [ 395.507850] __alloc_pages_nodemask+0x1d6/0x7a0 [ 395.512519] ? _raw_spin_unlock_irq+0x28/0x90 [ 395.517004] ? __alloc_pages_slowpath+0x2930/0x2930 [ 395.522036] ? __do_page_cache_readahead+0x28e/0x960 [ 395.527165] alloc_pages_current+0xec/0x1e0 [ 395.531477] __page_cache_alloc+0x248/0x3e0 [ 395.535787] __do_page_cache_readahead+0x2d9/0x960 [ 395.540703] ? save_trace+0x290/0x290 [ 395.544495] ? read_cache_pages+0x5f0/0x5f0 [ 395.548806] ? lock_downgrade+0x6e0/0x6e0 [ 395.552948] ondemand_readahead+0x50a/0xb40 [ 395.557257] ? ondemand_readahead+0x50a/0xb40 [ 395.561744] page_cache_sync_readahead+0xab/0x100 [ 395.566575] generic_file_read_iter+0x1269/0x21b0 [ 395.571415] ? filemap_range_has_page+0x1e0/0x1e0 [ 395.576247] ? fsnotify+0x92f/0x11e0 [ 395.579969] blkdev_read_iter+0x103/0x160 [ 395.584106] do_iter_readv_writev+0x4eb/0x670 [ 395.588594] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 395.593341] ? rw_verify_area+0xea/0x2b0 [ 395.597393] do_iter_read+0x221/0x5b0 [ 395.601183] ? dup_iter+0x260/0x260 [ 395.604799] vfs_readv+0xd3/0x130 [ 395.608250] ? compat_rw_copy_check_uvector+0x310/0x310 [ 395.613618] ? __fget+0x237/0x370 [ 395.617060] ? __fget_light+0x172/0x1f0 [ 395.621026] do_preadv+0x15d/0x200 [ 395.624552] ? do_readv+0x2d0/0x2d0 [ 395.628169] ? SyS_writev+0x30/0x30 [ 395.631785] SyS_preadv+0x31/0x40 [ 395.635226] do_syscall_64+0x1e8/0x640 [ 395.639098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.643929] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 395.649104] RIP: 0033:0x459a29 14:30:14 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) setreuid(0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in6=@rand_addr="ebde2c9ca9bb5b304b331f9007e09b61", 0x4e23, 0x6, 0x4e21, 0x0, 0xe, 0xa0, 0x80, 0x21, r4}, {0x5, 0x43, 0x8, 0x0, 0x1368, 0xfffffffffffffeff, 0x7, 0x9}, {0xfff, 0x800, 0xffffffffffffffff, 0x8}, 0x6, 0x6e6bb9, 0x1, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d2, 0x13}, 0x2, @in6=@mcast2, 0x0, 0x2, 0x0, 0x7, 0x9, 0x1}}, 0xe8) [ 395.652278] RSP: 002b:00007f9c59839c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 395.659976] RAX: ffffffffffffffda RBX: 00007f9c59839c90 RCX: 0000000000459a29 [ 395.667236] RDX: 1000000000000038 RSI: 0000000020000040 RDI: 0000000000000003 [ 395.674505] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 395.681762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c5983a6d4 [ 395.690927] R13: 00000000004c6d4f R14: 00000000004dc148 R15: 0000000000000004 14:30:14 executing program 1 (fault-call:2 fault-nth:2): syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x27, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c"], 0x0, 0x0, 0x0}) 14:30:14 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 395.822185] binder: 20111:20114 unknown command 811791 [ 395.847995] binder: 20111:20114 ioctl c0306201 20000000 returned -22 14:30:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x100001fe) 14:30:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x80000000000, 0x10000200) chroot(&(0x7f0000000040)='./file0\x00') 14:30:14 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000380), 0x0, 0x0) 14:30:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x27, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c"], 0x0, 0x0, 0x0}) 14:30:14 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r5, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000300)={r8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000180)={r8}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000100)={r8, @in6={{0xa, 0x4e24, 0x0, @mcast1, 0x61}}, 0x28, 0x3, 0x6, 0x9, 0x81}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r9, 0x1000}, 0x8) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r2) 14:30:14 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x20005, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x10000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x3, 0x9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r2, @in={{0x2, 0x4e22, @local}}, [0x9, 0x7fff, 0x4, 0xffffffffffffff81, 0x5874, 0x2, 0x4, 0x24a, 0x6, 0x6, 0x0, 0x3, 0x0, 0x7fff, 0xffffffffffffffc0]}, &(0x7f0000000380)=0x100) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x101, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f00000001c0)={0x3, 0x3}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r5, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x1, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r11, 0x0) ioctl$void(r11, 0xc0045878) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="b6000600000000ff008602b2f9020006389540a6300e5afb198e1b2abd8d1b664758cde3648d99590d4670e836a96aead03637477726f96d9d15d0ca3181440b87022e48f7e1513805e99eedef708720f69939b4c9b353208dd301ce218d8147b0a7e3e9fe3f84620e38d3bb3b27ffd37fb13b16721636d87060eeff8bef66039652e98397a62bcdfc8e60eeb58d9d9d7003e34868a9dd5f0ba49bcab5517fe56815451b50b86f46fa3feba20b69b60f4af5418b430db4a14d271b96f707c28eddc4983e65c477f3a2cc6a0993af66d94b3bbfe4602ce2eade1bf8c33aed9750b937a0bb2285d3f2062f270f394a6f8dd17b818d26b58ef7cc"], &(0x7f0000001480)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000014c0)={r12, 0xfffffffe}, 0x8) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x3) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000440)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e59fdd132b0c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0xfffffffffffffe25}}, @rights={{0xfffffffffffffee5, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14}}, @rights={{0x14, 0x1, 0x1, [r14]}}, @cred={{0x36e}}], 0x78}, 0x6010) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x20, 0x0, @ib={0x1b, 0x7, 0x9, {"afad5903dc39f1b49e928beaddc121c5"}, 0xb918, 0xfffffffffffffe5f, 0xffb}}}, 0x90) syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r16, 0x800c6613, &(0x7f0000001400)=@v1={0x0, @adiantum, 0x2, "c211efc6117923c6"}) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000001500)=""/104, 0x180}, {&(0x7f0000001580)=""/247}, {&(0x7f0000001680)=""/182}], 0xc9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 14:30:15 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x42880) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d61d}], 0x1000000000000038, 0x0) [ 396.096442] binder: 20130:20136 unknown command 811791 [ 396.110465] binder: 20130:20136 ioctl c0306201 20000000 returned -22 14:30:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40200, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000080)="fed5de0acc102ff68ce9cadc2a67e235948ce783981e7d34f75caefc533f10f355bf6ac3e7bc5a1ebc07204f0c256d4f04015797e14150841fc09fa3df", 0x3d) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x10000200) 14:30:15 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x20000, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0xfe09}], 0x1000000000000224, 0x0) 14:30:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) 14:30:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x2e, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c40000000000000"], 0x0, 0x0, 0x0}) 14:30:15 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000000c0)={r3, r4/1000+10000}, 0xfffffffffffffecd) 14:30:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x28, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c40"], 0x0, 0x0, 0x0}) 14:30:15 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$setopts(0x6, r0, 0x4, 0x40) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:15 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x8}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08631040000000000000000000000003000000000763044000000000066304400000"], 0x0, 0x0, 0x0}) 14:30:15 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x209b, 0x0, [], {0x0, @bt={0x89000000, 0x5, 0x0, 0x3, 0x7, 0x0, 0xfffffff8, 0x8, 0x3, 0x6, 0x0, 0x1ff, 0x3c, 0x3, 0x8, 0x4}}}) 14:30:15 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xfffffffffffffd9b}], 0x1000000000000038, 0x0) 14:30:15 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6, 0x8100) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f00000000c0)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x2062a2, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08631040000000000000000000000003000000000763044000000000066304400000"], 0x0, 0x0, 0x0}) 14:30:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) rt_sigprocmask(0x1, &(0x7f0000000040)={0x7a}, &(0x7f0000000080), 0x8) 14:30:15 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0xad04fc479b4438d2, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:15 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8000) dup(r1) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:15 executing program 0: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000180)=""/81, 0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000780)=0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4820000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002c0000032cbd7000fbdbdf2500000000005f28d51683236ee3e66909718f8a094df08cfdbc43292e46578b9dd91e31b9c4c295cc23249adf00"/72, @ANYRES32=r3, @ANYBLOB="0600e0ff0900f1ff04000200"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCLINUX6(r5, 0x541c, &(0x7f0000000200)={0x6, 0x6}) sendto$packet(r1, &(0x7f0000000080)="e97768b0500d65c5a557c6890e1c74998fb3585ff51a37df3e598f2c9e3016b08691a2b265d9b6f87c4217e4afc4bef7a7476612c9e87ca8cb668301aa9b8325f4fed678f6e49aaa04a69e1c8848eeefd62c09f53f5b2c0773cbf98c015a89202905a92e27bf5727bd39b79c67fd4a8ffc3da236de564cd1dbb6acda2365beb09072925898c2fef3089448e7206d25525eff278ef3a6644707a55cc8132ab0fd83ef4e7c9101cd40e1d7cb68352f1395f25d", 0xb2, 0x10, &(0x7f0000000140)={0x11, 0xc, r3, 0x1, 0xe}, 0x14) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x22, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08631040000000000000000000000003000000000763044000000000066304400000"], 0x0, 0x0, 0x0}) 14:30:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fgetxattr(r2, &(0x7f0000000040)=@random={'btrfs.', '/dev/nullb0\x00'}, &(0x7f0000000080)=""/241, 0xf1) readahead(r3, 0x5, 0x854e) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r4, 0x10, 0x0, 0x10000200) 14:30:15 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x218021, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x1ff, 0xb5, 0x3f, 0x101}) 14:30:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x25, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f"], 0x0, 0x0, 0x0}) 14:30:15 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) set_thread_area(&(0x7f0000000100)={0x7, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in=@initdev}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0x98) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000000c0)={0x20, 0x1, 0x80000000, 0x9b92}) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000080)) 14:30:15 executing program 1: r0 = syz_open_dev$midi(0x0, 0xe1, 0xc8000) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x1, 0x1, 0x7, "2244ea364d1374084bcb38bd93b4d45aafd1a5df332959bc8ecbd9f85cb502d2a562e803c83c7dae55e4b8cfe8804d24341bfb2f77da2163f0a9582ad2f24a"}, 0x60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$nfc_llcp(r2, &(0x7f0000001b80)=[{&(0x7f0000000100)={0x27, 0x1, 0x0, 0x6, 0x1f, 0x2, "7aba1c095a7f0441d292413494a072fded82ad0bba3048fbb2e4ff33946fced791ac7ccc56c448d992bfd5993b1c206de4cfbf1a9ab6e4883d6e3c9be81043", 0x3a}, 0x60, &(0x7f0000000000)=[{&(0x7f0000000180)="2d7600a87c8e58a8e5de7f086ff3d4328db1168f4009436520af15f9b08aa3b2b29c62dd2f8b1367fdc0f0fe8fc1fe8ce33c12793e05f1cd3950137368935084c60a58072731aff5a5fd06de076913893d5ae8dd749a44aa995f962d3f10fd5274957aa49138679d6079b2ae9a116407d1ea", 0x72}], 0x1, &(0x7f0000001c80)={0x98, 0xe481b24155e8f523, 0x80, "68c28c44b4161bc97be346362e924de32b1509bd8d93badf89671f3969866d3a7bb8a2fd5d3677548310ebb7f134cb7820a45032782b2b3b3842f73b52887e4780741568b4a8c0276966c1ee519b788fff5cdbedd9d91e8428ba2d31cc43076a0a97e828efeb368f91f16e9814d4f62b8ee6970dd575398b2110ab09b655ebfd2cc16eff0c"}, 0x98, 0x10}, {&(0x7f00000002c0)={0x27, 0x1, 0x2, 0x2, 0xe1, 0xc5, "eb4140b0df71ff0c6222fa7f23e2cd6c9a4aca6ffb8cdb923b219d773086aa7d73cf87f0233c4c8729b12fc83a1068929c27469f902c1bb2c78b72d515dfe4", 0x28}, 0x60, &(0x7f0000001400)=[{&(0x7f0000000340)="624c460fad700925947315ddb7ccc40d9321b4cb68c0751fcfcd8848896089e0587f6713d8cdcb92a98fc1d9e5b4838abbbd149f4cf3d0cf60bf76d325453fb26f38bae78a5c010281ee365c866a79d8b60f098645941c0514d731c4eff82aca69aa6d7d3af1e52db4e5b9d7", 0x6c}, {&(0x7f00000003c0)="fede56e0098c2fadcba0c2b5f53b1efbf92f3379afa9d12265f2f40bca9ec947f173d1e91adb6fe71626", 0x2a}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="a8000000000000000a010000050000004db3a9e8d212a3b3e5ac8bc96ec32fc6ab0f090dd4697e50d2dcfef5ff74a08c8b727d0015491a8e207a47f1b99abd98ff2308d23ddc50617641b46623e5c916825a15a7ba18d8867159d450a6bc5bbc0af093852bd8948ef5862ee97f5996e8a1d4600c370e3d3207b177af2857f5d2b5dacd71c73ed054c6a495d8e050b09138d5fd7c6ef2df36df1ce7e9a900"/168], 0xa8, 0x4}, {&(0x7f0000001500)={0x27, 0x1, 0x2, 0x2, 0x6, 0x1, "55f80f1c8880afd5a8055d99877b3ddee08473e860812813bf01c8e5ecbd43b79198356a71ac6817510dfd30aedd1b592fa788fdc095891399bd6d2b6eeffb", 0x21}, 0x60, &(0x7f0000001740)=[{&(0x7f0000001580)="1990ab153f9f917950a0c7593b0444606111008ed28664e7f3ebe9f4dddb4c153e731539facbe92c8e0591fb248752f741d801252e4fbc2a45bbce43bbab2ea40437a50b1d89c12a201bafb3a6f2534fc7d8d3820fd839cfab0ace70015ba743b454ab29a43fb23a5bc8c4c3d6cea565a0e98cbcb8e321f742daa3a987fd77ad048aba92166f2d0a531c45b29fdbb6c8d125687a62c1000f0de5008e067c7ead14055c7d", 0xa4}, {&(0x7f0000001640)="4b3401af1e60811b3e51bb4e0622e1f396df5fdd9e4902d91e30907c67446a8a09c378dcfd9f7ea3304ee7fa115b955e48984cb52b13d2a380daae9a6f47fe75a637825e417bc9d6c8e12276ed8f8b91e98e1359c1970a02d01af396e8c7b2cf272652b67ad8bf11d0690988d6dfa849fef68a92ac86efeafe3815972a8db0dc45f1801a97c07d9e020b799111322aff62db38d7b460167b5dc2e0a148", 0x9d}, {&(0x7f0000001700)="a645212bb65ae27d3ddc040e90f4d7b1f98ab768625c8fc465f37bbe800dd946", 0x20}], 0x3, 0x0, 0x0, 0x4050840}, {&(0x7f0000001780)={0x27, 0x0, 0x1, 0x0, 0x1, 0x0, "86ff5f50ce53d0601987d55522760c953e13e6af05bdab5236a8f64100cdee9c0fa6fb7a894687854e1d1f37fcd1024931c444137b109e978c493192dbb68b", 0xb}, 0x60, &(0x7f0000001b00)=[{&(0x7f0000001800)="7d549250040e620f9c9f2bba59d9f495df5b43562437c727a05ddb7fbd2b6d511caadf43aed2655080c46f69f185c5b5c02dbde7570cba", 0x37}, {&(0x7f0000001840)="b3e425d3dae21e4912af622c83af128a9c33b957ad6a62d188609ccd61c7f9d4e98931cf9d0835412ec8a3f5d5f0f98797ce88194d30855101995211a367a0f02677f30a900672c13ae8e96793b9c6256f83d73e205210c6cd2c6ce378be93ce26c781543856c0d5e277841e4844b0e508ba37abc7c0e765981af7e313997c3158f5be39fe57368c82b29896c0e2a6a30522fff905593a10b0eb3bd06b0cb84c4fef49680b19caee83da7197240c1ea87e1301199cbe4a2a8a1816b4e90d7a0ce5a07918fa4d4a40a0c0b719316988ddcd92860decaad4c8889300226ee32bdaf1e7095ffbd589763ba333c281ca00be", 0xf0}, {&(0x7f0000001940)="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", 0xfc}, {&(0x7f0000001a40)="3a4008f21689442a3f42697c44890514f14a42900ed9f771a15171b6f86ec2b1eef04d12eceebf5134898d5046f0f05a6867cc982dea1585a270b344ebb195c4979e3cc7953fa283d3818404c8a449ac088c6bb3fab79f1654e56d4e597233e3261c14ba24376b9f98e6bfdd8204834d0fe9ffb68af46614e6852f3a9bf4fcea41c253d31bdad33dd265e83d64237ac1d505d2a11ca52fbef9782b72", 0x9c}], 0x4, &(0x7f0000001b40)={0x38, 0x0, 0x80000000, "c1e092855a18dd4445ba98d81b745dfb2fd7f5823a3c4869d93165658d577bb831a411176e4e"}, 0x38, 0x40000c0}], 0x4, 0x20000000) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:15 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/82, 0x52}], 0x10000096, 0x0) [ 396.929124] binder: 20225:20228 unknown command 15 [ 396.949130] binder: 20225:20228 ioctl c0306201 20000000 returned -22 14:30:15 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x447640) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000040), 0x0, 0x8000000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) process_vm_writev(r5, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000100)=""/206, 0xce}, {&(0x7f0000000200)=""/178, 0xb2}], 0x3, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f0000000400)=""/233, 0xe9}, {&(0x7f0000000500)=""/163, 0xa3}], 0x4, 0x0) 14:30:16 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2c0000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) 14:30:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x25, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f"], 0x0, 0x0, 0x0}) 14:30:16 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x8000) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c}}], 0x80}, 0x6010) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x20000, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) 14:30:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x20, 0x0, 0x10000200) 14:30:16 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x1, 0x47b4, 0x41f2, 0x81, 0x30, 0x73e2, 0x1, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x3}}, 0x6, 0xfff, 0x4, 0x7, 0x400}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r3, 0x9}, 0xc) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1299b}], 0x100002ce, 0x0) [ 397.248252] binder: 20248:20256 unknown command 15 [ 397.307692] binder: 20248:20256 ioctl c0306201 20000000 returned -22 14:30:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000040)) 14:30:16 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x7530}, {0x77359400}}, &(0x7f00000000c0)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x9000, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0), 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000200), 0x4) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/context\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000300)={r7}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r7, 0x4}, &(0x7f0000000180)=0x8) 14:30:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x90100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x20040, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000180)=0x40000000000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:16 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x10803, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 14:30:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x25, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f"], 0x0, 0x0, 0x0}) [ 397.540800] binder: 20270:20274 unknown command 15 14:30:16 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERROR(r1, &(0x7f00000001c0)={0x15, 0x7, 0x2, {0xc, '/dev/nullb0\x00'}}, 0x15) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000d80)=""/142) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000c40)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e24, 0x123f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x87, @empty, 0x6}], 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x200, 0x6}}, 0x20) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0xe56, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@int=0x3ff, 0x4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x40) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4044810) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:16 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000001400)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 397.564004] binder: 20270:20274 ioctl c0306201 20000000 returned -22 14:30:16 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x181800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r2, 0x701, 0x0, 0x0, {0x13, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_BEARER={0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_TOL, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_TOL, @TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_PRIO]}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_TOL]}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_TOL, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_WIN={0xfffffffffffffff2}]}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_PRIO]}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x0, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}}, @TIPC_NLA_BEARER_DOMAIN]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000002440)={0x1a4, r2, 0x5e811dd57bd133fc, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xac3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7c}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8da}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2800000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xade}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000001400)=""/4096) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000002400)=0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x0, 0x1}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r9, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r10, 0x2, 0x10}, 0xc) ioctl$KVM_KVMCLOCK_CTRL(r8, 0xaead) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x27, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c"], 0x0, 0x0, 0x0}) 14:30:16 executing program 1: lsetxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='\x00', 0x1, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x642000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x1, r1}) syz_open_dev$midi(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200)) 14:30:16 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000000c0)) dup2(r1, 0xffffffffffffffff) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 397.688325] nla_parse: 33 callbacks suppressed [ 397.688331] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 397.756060] binder: 20289:20292 unknown command 811791 [ 397.789912] binder: 20289:20292 ioctl c0306201 20000000 returned -22 14:30:16 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4, 0x0) fcntl$setflags(r1, 0x2, 0x1) 14:30:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x27, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c"], 0x0, 0x0, 0x0}) 14:30:17 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) 14:30:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000001}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r2}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCFLSH(r4, 0x540b, 0x2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='i#\x9f\x81.X\xff\xfelb0\x00', 0x8000, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x21440000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x10}, 0x60008884) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:17 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='b0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x2000000) 14:30:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f00000000c0)={0x9, "f00d0f800644b4391a44b96c9d0cffb97bb65a3aa422513b3ffcd99a5529e922", 0x7, 0x10, 0x4, 0x8, 0x1, 0x2, 0x7da}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r6 = socket$rds(0x15, 0x5, 0x0) fallocate(r6, 0x2f, 0x2, 0x8) 14:30:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000000)="11dca53f5e0bcff47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r2, &(0x7f00000000c0), 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x3}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) msgget(0x3, 0x0) fallocate(r3, 0x10, 0x0, 0x10000200) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) dup(r7) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, r3, &(0x7f0000000040)={r6, r7, 0xffff}) 14:30:17 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080), 0x1000000000000409, 0x0) 14:30:17 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000001680)=0x85e, 0x4) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 14:30:17 executing program 1: syz_open_dev$midi(0x0, 0x2, 0x72a3b91b2bd6a0b3) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4096, 0xfffffffffffffe61}], 0x1, 0x0) sysfs$2(0x2, 0xfffffffffffffff8, &(0x7f0000001400)=""/4096) [ 398.307299] binder: 20312:20320 unknown command 811791 [ 398.333978] binder: 20312:20320 ioctl c0306201 20000000 returned -22 14:30:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x27, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c"], 0x0, 0x0, 0x0}) 14:30:17 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='\x00_\xcd\x00\b\x00', 0x10001, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x7fffffff) [ 398.543837] binder: 20340:20345 unknown command 811791 14:30:17 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x41000, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r3, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={r6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r6, 0x7e9903ab, 0x10}, &(0x7f0000000140)=0xc) r7 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x8e6}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000080)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:17 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000280)=0x9) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000180)={0xf344ba1c2aea655e, @output={0x1000, 0x1, {0x503b, 0x9}, 0x1}}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000002c0)={0x0, 0x0, {0x30, 0x1c, 0x16, 0x8, 0x2, 0x68, 0x2, 0x137}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1], 0x1, 0x6, 0x6, 0x4, 0x0, 0x4, {0xb724, 0x1, 0x7ff, 0x4, 0x3, 0x0, 0x6, 0x7, 0x1, 0x1ff, 0x7, 0x3, 0x0, 0x9, "3a0b1d12d70d0230d9b8951649a3a6d3963b1fa6c53404a2ed074906b2959200"}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept4$alg(r8, 0x0, 0x0, 0x800) 14:30:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000100)={0x40, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @multicast2}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@empty, 0x58, r7}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r8, 0x10, 0x0, 0x10000200) [ 398.581027] binder: 20340:20345 ioctl c0306201 20000000 returned -22 14:30:17 executing program 5 (fault-call:5 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x28, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0863104000000000000000000000000300000000076304400000000006630440000000000f630c40"], 0x0, 0x0, 0x0}) 14:30:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = dup3(0xffffffffffffffff, r1, 0x180000) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000080)={0x400000000000000, 0x0, 0x4000000000000, 0x2, 0x1e}) syz_open_dev$midi(0x0, 0x0, 0x4f450df7b312e5a9) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x7) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffeb2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08631040000000000000000000000003f7ba8b8407630440000000000663044000000000c9ab5556dd60f75535640f630c40"], 0xd5, 0x0, 0x0}) [ 398.827477] binder: 20362:20366 ioctl c0306201 20000000 returned -14 14:30:18 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BLKRRPART(r0, 0x125f, 0x0) dup(r1) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1000000000000108, 0x100) 14:30:18 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r3, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={r6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)={r6, 0x0, 0x9}, 0x8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x8840, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT(r9, 0x401870cb, &(0x7f0000000080)={0xfff, 0x7, 0x200, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) preadv(r0, &(0x7f0000000200), 0x0, 0x2) 14:30:18 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 14:30:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VHOST_GET_FEATURES(r8, 0x8008af00, &(0x7f0000000140)) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x1e) tgkill(r4, r9, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r12, 0x80404508, &(0x7f0000000d80)=""/142) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000c40)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e24, 0x123f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x87, @empty, 0x6}], 0x94) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x200, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r13, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x3, "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", 0xb9, 0x4, 0xffc0000000000000, 0x2, 0x100000000, 0x1, 0x3}, r14}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xffffff45, @rand_addr="05877bf9a7aed796d92b4c63209cb312", 0x1}, r14}}, 0x30) r15 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) 14:30:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sync_file_range(r0, 0x3ff, 0x1f, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x20480, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r4, 0x701, 0x0, 0x0, {0x13, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_BEARER={0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_TOL, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_TOL, @TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_PRIO]}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_TOL]}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_TOL, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_WIN={0xfffffffffffffff2}]}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_PRIO]}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x0, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}}, @TIPC_NLA_BEARER_DOMAIN]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x318, r4, 0xcadc7cb68c3d3fbc, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x14c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @loopback, 0x803}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @loopback, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x3ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb6f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x101, @dev={0xfe, 0x80, [], 0x10}, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x52d2}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4cf}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x37214865}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c16}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x20000084}, 0x80) r5 = open(&(0x7f0000000080)='./file0\x00', 0x313400, 0x40) accept4$x25(r5, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x800) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) fallocate(r1, 0x8, 0x0, 0x10000200) 14:30:18 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x798825dda3fdac7, 0x0) 14:30:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x28, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="087310400000000000000000000000000006630440000000fe0e630c4000000000070000000000002e1a5825707e5c41850423e0a64634b1"], 0x0, 0x0, 0x0}) 14:30:18 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0xc60, @mcast1, 0xf2a2}], 0x2c) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000140)={0x61}) r3 = dup(r0) fcntl$getflags(r0, 0xb) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000200)=0x1) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200201}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r4, 0x102, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000014) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 399.274424] binder: 20384:20390 unknown command 1074819848 [ 399.312652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:30:18 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r3, 0x10, 0x0, 0x10000200) [ 399.317392] binder: 20384:20390 ioctl c0306201 20000000 returned -22 14:30:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000140)={'security\x00', 0x88, "5bf707e9aca727eb648e7ee36e88c4dc8a533ec1a976c4b8c4b61560addf508f8fa76f3620469aec074e16cfc7172a72a772b0e7765217e4ee8842cfa6cc3e81bf8a3ede81fe2bfce3ba1a543c76c4c54c9c2e9e90b2717978eb586de1688ec784967320e823954ef600a0005ed73ad45cb76327c23ac0854652e8c245f8d01847e02ceb1f7f2a50"}, &(0x7f0000000200)=0xac) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x3, r6}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x20000, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0xfffffffffffffffe) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@dev}, &(0x7f0000000100)=0xc) 14:30:18 executing program 1: syz_open_dev$midi(0x0, 0x40000000000000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 399.405261] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:30:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x220040, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000240)=0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000380)=0x4) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e22, 0x2, @mcast1, 0x7fff}, {0xa, 0x4e24, 0x80000001, @ipv4={[], [], @multicast1}, 0x7856}, 0x2, [0x5, 0xff, 0xffff, 0x8, 0x5, 0xffffff80, 0x9a, 0x9d]}, 0x5c) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000140)={@llc={0x1a, 0x323, 0x8, 0xd1, 0x1f, 0x4, @random="e6d535e63d87"}, {&(0x7f0000000080)=""/107, 0x6b}, &(0x7f0000000100), 0x43}, 0xa0) 14:30:18 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000000c0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x20, 0x18}, 0xc) 14:30:18 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000300)={r4, 0x2}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'vlan0\x00', @dev={[], 0x1a}}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0xec39f5e8eab04265, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @remote}, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) ioctl$VIDIOC_S_AUDIO(r5, 0x40345622, &(0x7f0000000240)={0x0, "c42dc6fb9076cdf7d0ccc4c5cb0a793e232b872430902082701870d6cef436c1", 0x2, 0x8e0dd88d7e1c2921}) 14:30:18 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = getgid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c}}], 0x80}, 0x6010) r3 = getgid() r4 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x800, 0x4200) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000680)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0), 0x0, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c}}], 0x80}, 0x6010) r7 = getegid() lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x1c}}], 0x80}, 0x6010) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ff"], 0x80}, 0x6010) getgroups(0x8, &(0x7f0000000180)=[r1, r2, r3, r5, r6, r7, r8, r9]) r10 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@null, @bcast, @default, @bcast, @bcast, @null, @bcast]}, &(0x7f0000000100)=0x48, 0x180800) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/audio\x00', 0xb388eca0df9db1c6, 0x0) setsockopt$inet_opts(r11, 0x0, 0xc, &(0x7f0000000880)="636af16b7ed2061efdaad0291110790232ce6ab46a3a637229ca5125a3b39b7647df71c8ee3fea43977af0f3a33fe88c1c027dc826337c1d8173a19cdde4b42f733d4aa83753c93c755b79e8eaa4cfd9c4d4a36d51474714e447d87450dd17d35d93258d88bbe2424923adf86d3191e31e81ca38189352f6f5db49bb6e9dac3a6c36862948536c49a0b96f0402fd6ab3a8f7833e1b8e08e562a644854d75b9d299a11438685ae01303956b3ca33cd8806ade77e4ae46f7373d3adf2b6a68b8022442e5d66d9495c5df566279d9d6d73381aa0b157c76f4eb55203d75b95fe01c391240093329feb6", 0xe8) r12 = gettid() ptrace$setopts(0x4206, r12, 0x0, 0x0) tkill(r12, 0x1e) sched_getaffinity(r12, 0x8, &(0x7f00000006c0)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'bcsh0\x00'}) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/121, 0xfffffffffffffeb6}, {&(0x7f0000000240)=""/73}], 0x164, 0x0) 14:30:18 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @raw_data="0c5a0817beb0a33e750ab1299fd0f038c7867346c276d88eb212c54ce2170ad3ce00e15a8fb8064e7a8510ae1ca5a53d0a0d8a1bb229f6fb07e8b2ee422dd2a52694bc2e631afc4ee3d6a0f54bdd563ca3db457fb05080c5bc83fa365b819148c5e6673658c5cec9483aa18823c4d4859f97437976a18896668cec09ca2b14934099910de860ed39777ee109a8749da9480cf30502fc1d689fa9aeeaedf0a165649e4c147964b9f004933b03e7e9b97fac11f7750dc325c2a08aaceb2a080a6d200ddb294a76c6b8"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f0000000100)={0x3, 0x81, 0x4}) 14:30:18 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r4) fstat(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000100)={0xb40, 0x8, r3, 0x0, r5, 0x0, 0x1, 0x400}) gettid() 14:30:18 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0xe443a7e210f584f8, 0x0) 14:30:18 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000280)=""/251) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x3}) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x6, 0x9, "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", 0x41, 0x8, 0xbb, 0x7f, 0xff, 0x0, 0x6}, r2}}, 0x120) 14:30:18 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) write$P9_RLOCK(r3, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x1}, 0x5) 14:30:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000080)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$netrom(r3, &(0x7f00000000c0)={{0x3, @netrom}, [@netrom, @netrom, @remote, @default, @default, @netrom, @bcast, @netrom]}, &(0x7f0000000140)=0x11c) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/123, 0x7b}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000000280)=""/5, 0x5}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000380)}], 0x5) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000040)=0xba, 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r7, 0x10, 0x0, 0x10000200) 14:30:19 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1240012, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@privport='privport'}, {@cache_none='cache=none'}, {@fscache='fscache'}], [{@obj_role={'obj_role'}}, {@pcr={'pcr', 0x3d, 0x22}}, {@smackfshat={'smackfshat', 0x3d, '.\'+-['}}, {@smackfshat={'smackfshat', 0x3d, '/dev/nullb0\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000200)={0x4, 0xc000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:19 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x8, 0x400080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f00000002c0)={{0x2, 0x0, @reserved="1fd48a5d8a2480d6f87158d932858decaeac31bfacebf20db87afccbb28be073"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self\x00', 0x10200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000240)={0xf00c, 0x6, 0x4, 0x0, {0x0, 0x7530}, {0x1, 0x1, 0x8, 0x9, 0x1f, 0x7, "71359e61"}, 0x20, 0x2, @userptr=0x8a80, 0x4}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000380)="f0f92876348362e1c1c69d254a68948d", 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x58, &(0x7f0000000080)="9e32eb9e10225612e9e6aadf5e03bc85d989b06662493aaf5647483f449cfaa063b8bbbf4508abfa16f7fd23a6264fccf0472aef5b6988dfbcb21a8f484e47f51c86d51222e3c3c96781b1b3609c30e1a4f803e321a100bd", 0x56, 0x0, &(0x7f0000000100)="183f2240c09a3a7f175961dfa4d14441876292862cb880be26ecd1f29a60dabfc901fd78f8d465019ee62d71d6a9cd2c69ec59371dabce1c85bdd852aae6f7aec078617032b670b38264b06cf9b324650393a0614ef2"}) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:19 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x200004, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="8ecc4f105859313055c52caa09374e3fddce1ce047da6693adaa58abf0deb3773cac0709d5daca2dbdf08ac0d9f1b1dbc27c7b7e37d22bf91914"], &(0x7f0000000080)=0xe) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x2, 0x80}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r4, 0x10, 0x0, 0x10000200) 14:30:19 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r3) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x800, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0xfffffffffffffff9}], 0xc1828f7ce7f7176, 0x0) 14:30:19 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)={0x7e0, 0x4, 0x4, 0x0, {0x77359400}, {0x4, 0x6, 0x0, 0x4, 0x0, 0x81, "1ba2597e"}, 0x7, 0x3, @offset=0x200, 0x4}) read$FUSE(r2, &(0x7f0000001400), 0x1000) 14:30:19 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) 14:30:19 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) 14:30:19 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) accept$ax25(r0, 0x0, &(0x7f0000000080)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:19 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x8400, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000200)=0x3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000080)=""/138, 0x8a}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/4096, 0x1000}], 0x5, 0x0) 14:30:19 executing program 1: r0 = syz_open_dev$midi(0x0, 0x800000001, 0x1054a1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) accept$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) r3 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000780)=0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4820000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002c0000032cbd7000fbdbdf2500000000005f28d51683236ee3e66909718f8a094df08cfdbc43292e46578b9dd91e31b9c4c295cc23249adf00"/72, @ANYRES32=r4, @ANYBLOB="0600e0ff0900f1ff04000200"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in6=@local, 0x4e24, 0x5, 0x4e24, 0x0, 0x2, 0xe0, 0x0, 0x0, r4, r5}, {0x53, 0x6, 0x8, 0x62f86725, 0x6, 0x739, 0x5, 0x5}, {0x3, 0xfff, 0x8000, 0x8}, 0xfffffffb, 0x6e6bb7, 0x93e299cfb48ced36}, {{@in=@multicast2, 0x4d6, 0x33}, 0x2, @in6=@loopback, 0x3503, 0x1, 0x6, 0x7, 0xfffffff8, 0x3, 0x2}}, 0xe8) readlink(&(0x7f0000000280)='./file0/bus\x00', &(0x7f0000000300)=""/232, 0xe8) 14:30:19 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:19 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x7, &(0x7f00000000c0), 0x4) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r6, 0x0) fstat(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000140)={0x3, @bcast, r7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x32900}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b08151fe85a5e593142abbd512ac9cfdef00a22fb2d3b839752e8cfc6f92210c0b1d2c73787f910f757d3ed5aa5a784c3f3a01b03549e640f882416a692f2e8182aaa3f1d060a237d63d93bd03f0a54ddd8f817207b981eb37e02b55d4c7057916962250fcac9dca1ac3330805da9fd61290a81e686d5a758531594fb29a2cca3df69a059003c7cc4611aa753870eff81b1d6a9a5685946e8fcca4a8717d3a4d9c5fdc444415363c5c985275f01e582609f2333ae4b1435a79998955d70d754e912f9fe5d36091cc74542d709501e02c6394e3e73500000000000000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf250f0000005c00010014000300ac1414bb00000000000000000000000008000b0073697000080004004e2000000800080002000000080004004e23000008000100000000000800020011000000140003007f0000010000000000000000000000001800010014000300fe880000000000000000000000000101"], 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x810400, 0x0) sendmsg$nfc_llcp(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x27, 0x0, 0x0, 0x1, 0xf8, 0xff, "513a3674ed844cf0da55f83e2db3d44ca2e9d5561f172fd3064f126c3228ba4c1ebe7c23e5b388c7c3968557c1cefaf94feeb36f0dfe9892282aee14cbb9bd", 0xe}, 0x60, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000140)="3b9b7a6f7572a0860a33e2e4284a345b0cd34f962ad818951d5961ed7ba86d604dc7c3f84e8338813dd68641fba0f4359eaccbccc9d873c6e3f859e0452e307e546aeae178fc93c162fe0388c2decf51438396daa675d65fea7b84cbc8668e400cea", 0x62}, {&(0x7f00000001c0)="23a95c50ca2a4a1911f6f17f79771a9557164c1a12fad7069f2d2be046e16354b55ccc6a99032a2d9fe76272f5eacf8cd923cf803050c820a01bc2967dbb14de9b16af45f5aae53a63cc0c46f705537739a797b8ce4aa0520ebba7c0d6fc05ddc272fde2fc1abed2ddd746575aa2820ed4db5df0a8f3d3c2c0f99883b38b41ac27ec6c7c6105a5ff7c7274cfc1a1b4e599a44695112f314df01849a5e350c0cb1afbbf191218972b38655afc8bf8fc43", 0xb0}, {&(0x7f0000001380)="499f39b1333c46a706bf6950452eace6d46ebdb51d70c9121e7edf4a21f643f1b7035eff0910db36d46c6eba30340c5b6f7613699459456f620894886b4d3b0ed94b3edcfdf31e1b499e51ba6e18df2c11df9adf6164fd753f9c97746fe91d6960a42db74d029dcf4ca502bd8ba713f9a9f67d3628dc9c735a1d828eae32caad1e1a29bcaaba3b3b615f64119596944863b2004237ee7f624055d6a9f6a12fddca5e803aeb15f9c71195205c70ff9075813a64ad63cfd41008f3399d3dda98910b5513931874118407752b36e3a6", 0xce}], 0x4, &(0x7f0000001480)={0x1010, 0x104, 0x3000000, "ba962d9a7a6b6691a8131382eff892b3e583fff3219bc58ac8ee5c473767f791ff99a24765525a55978c9ac3a32a465010cf51fa22fe10004ed4516bc071f4b985fbf0befe242c24107df0f92224875ac250c48f25bf67ee6a0e277c6eb8ad75285733776c380181dea7bc810adc780afa0bd44541bc2f6627314e2bef98357b9286adfc8572cd1588cec44a3d0394e6f8a76b5a40e7e5295841373c7b1871cb95fe6df7f203d7c364595af1de44fffa8b42f42cac21a3ec9a790b7fbef73a0b866cf67fc4e77ec8a9c62e8b4d44ee87cc9ffd80a7f5a99a4ce106794189afb5b4874cab887c116b4d90fab557ea568e529aa7032a0e80413300d68479f144b80f0775eaf1bd76e1ed658368e983cd2baed046738f2450a0f575205a79f44b09ec8c1bb7c16b3c179983961d1e346dd453719784447f112d326fd3f21d46ac5425ec2c42a315d1d3c1476cd51e4cb3a0e171676d2004ca2ba083f2c0bbc3d86cf466965aa154f0b4de8358cd60bf78788f24164c8985cf2dba4402b90c02d9bbbe42da1de47b6d63a36dd855ea58e87aa93f6d816b4228eb8651e1e3c81c4db5dc3b99225e9fe6ef3933770ca9ead2a2ffa25add6d056d6b1daac8bdf972cc6a48c651cd77eafea0e0b994541e0fb2a8236598085e5fc7df2da63b6e28e5b95d71ea095d24d5adf69ceab1531f43463b5dc780f5a106b33a47ea0454d3d97805c01c48c51e54ca2afb6f3b38e4de02da4fa34fd89cf100aecf6cc8c3bec02cc3ccdeae11d1105f3bb6ee3d31f09a51bc097d029df126199fe76d939e1057d1abafec02a2d957122aa144f3da67487c8ffb8fac9aef63621b9493b4348e6b5f6d370e0be1d88695733eb405e1b84e76bdf0f359b7f666dfb9a33bcb903557507711316c7b9ee4db66b95407a5e45353e98a103dfc1bf47cbc37f4d999c6df126e769afe6ba697663968774b030750770f06a1cbbee2c68d51fe60b0e6c4565ffaf93319c7156e874b13da2bd399727dc7761c0b928aa75125d12ee483ed538a442ed1621e7b2b744faef2f17971bccbb104dc454a440afe0537d4262c6b900edc3acabe72f978ca1793a2dce299d2d40448b449f4e7c14164a306eefa301ee98946452213c01abaa974fef81508ac47f963c95e55067aaaab1dbc687ebba050054355288a190391672fe223ea8867e5244557f02db05998452b78c86cccac018c9671799e576645508117fb9eb85b960d3d7e829b0629278ae85e0f7fd6045763490bab1a22327d783c3958e9c4a22ca4e9a8b5b0fab0110dd58c4624ec90a779d5b752e011edc73d04a3caf8e67a80f4dfdd071e6f71c207bc5b3707c6dfbd6c759cfc6c13d37b6bd4572e10a53dceee1e0f7fa34de49b418f159338d5722d3b095039f00ef80af493aa84cfdcd5ce34849b53cd60a316fba18fd5ba95bf72a8ed9dffa3e92bfa3839afe0cf173e330e7e94a72b7766e4e7c25c5fd655663d1dcb9982c1dfe562211e385b0c09e2c60defdf4d817288fae750b06c20fbc109b9e46d27822bb3714795ce1087c201dbadccc34bca91cc3dd8513337f6c4016ca6408e1d0e827a8494b467b1ad4bcf87502fe64a168f571415bc4adbb95ee51f63ebeb8f53ac6564dd792690ff1928c160e14ca99c403bd165e6d0d76840954ddb90ec4a8f080ddab351c966ae6d6820a3088251424474085bd0b8d8596346e7b702ebbfdfa505e401bbc23df0553d9dad5fce54f2d2f28c1ea79fe76367f6b5e0208b8b1e88284b559697bb778b295cb84c464d54e48ab441e96c444baeef4444ce8207fa64c7dc7f72ec93dd0a0dce784ab95ce16a777cf898e996a52676382d41985cbd9affb1f7c1ed2ff948d22db339d72c0c68300b345003bc48609427f4df51fdc9ace7d7a8d94129dedcc6730d9529b76b8d29b9a81cbcfa7c18d1de15778b3644425be4d17b2e15d0c99905b55a8a8304d0c4df279ba361e1cb3458ce9552fa0a3049018813b45fe365a6df822d494196ce5610819ae1a44ba0692d04b60ad6c2a0d1a201470abb60d026b99333801afbe9a152062c1a35335b6ef4b7148120a9a889c48a73cc5690b4fa5325368586c508cc90cd5fca4113f5ada1e7b90ae97625506bc858ff88ac05939a9f89d53b85ce9a3520e1dcbca70833a232709f265f41acc8b8e5b4652bc52ee32322d5a1776b26ce98daaaf459bcc779441446256fb5e5e2514fc7fa3be2f565573dc13ca9a23640410c5526056c760e360472c73a0473259fdfd5d2981e2fc8ab90321e5e6cc3e37838aefbbf9d4f6f61ab95cda1978762f358fc8c12ba4be05daa1fb6aeaa2642a62ddb046a3706b7d04edd4b62ea32e6fe60f6b06ac4914248ade3d36d922a31513980d55ba56f5fc3ef54cc6c493f9da64faa68674d7b16fac801d4678fdeaaf4347e0180613dccfa21508f9d766d35076dddc78102e3be249d5e97b001bc9e81d44f86b576d45d3f11c6d9332a6da909f3f0c95b3cb60e823362a72ab2f7b552993068c942536f2b8bd4654492a94e87ea488b291029d6aab4c2e16ad34a079971bd0dc871ade6e60fe1b5467c4f278a5a179a49975a75d9136939f86241048af1372a613198d585e2c8dfc4d1ed8bd6d8c8cdb12ec82f5a7d52c7acc5b9b50e0c232181886274972e972c832549425565cb8b06cc6cc7b91a087737181480fbddeea2b289f37921f606dd50ad5c1e04945cd44d3d64baf0a77aeab493f66637011c3f10ffeb862199aaac7f556ad30a93625eb221187df5eda7c0599602e8b9624a2780382c918e86ff4517c374af26234a4fca1a67f22785a4555f625595d0aacebe93b65ab154769869c8fa0245b1353433ec5c55568b88535ca7893bef43eb983b6ac569bbc48c0a2548fc55f8fd5d549038effce7a2aba6cf4ee6e5af7aa21f7be79805e0eb2cd56b8af498d47b66c84ec2c2c4d21d6b96a6be120d1c87549c2b90f738412ee4fde05f49ce0a5c8979e330f5cc375e5b1e4eae5f070e6cb39470d5e5d1fb9ff9a4b109588d729ac2714fe6af6b86966ccf0f98a9f4e11d005a2548cd46b0dc003f782c1dfb65d0c2d72a84a7ee4bb6e332b07f87ed9d2b5aba6240c44b9bbe626eb4ef27b895460cd3b55d40c7971654b808194338e30bb88f22fb019179288abb4958e1f8f541b6ee5ce1cc18893cae3cadf03e051add0128b586d1d1374004d1073f924853f5c75b398224f8a25f384a05fcf32b547f320b8fd85bbb1946df55bfa5e727e13eee54ff89e5dc6483c56172b526a74a2d7c5ed5f176bcf709f23b4445bb1ced1c576aa17dcb572a7e49c4866c479219a9caec7ec5962004e3e344c9d12bbc160f771ef7674605bb75908c279256ff21a48cf243268464f7c333c063e158ad8ef8b53fbe80ffbc7cb061db0f85536027e458d039c0939652957822168ce7d17e3c359aa3bca2431fc4453a38da6e21855707ec395c1d7d742d7fc3f7816c12c376f3276c9109f3a519102a1a7aa8ddc7a1692d543dc0b45ec5ae813b2e62858e49d64495ef67c94a943001f3616c61f3d32f58a1e5d4453a80438b8d5a4c5c0aaf3ad575f2eb8bc1dfbaee869a36f97f5512066c386eab1a3c09e4c95a66c635e7e290bdb0f1d8b106eda0af56a8d0e1448915d538b5776aea820b783529d6cd6d77cb29ef5968e37cad479ba69b51ed98eb16fd57d87caca016b28d816f8c444fddfed9da1aedab8d363fec520d1a0002a7b388bcd101ca487fb6d423e84efc7ff81d2b33226b07a369020f49c70827311831265786e0a7a985cd65031d28db8daca793fc8565b3bd2b1ee029990459d3d9612b9bf5e47103c1259982a9787d0fd1eb1d2e2854dbd04ccd7156887a7f770b63fd526204929fbdc23373071b778a13b91404a9464bcb95bd19e52344a38ea3fb8d633518a54bd3a82d105dd231b6aa5add48d41ffc1eb2f30a1548e987646a9c16393d874a244e6fdeae52cb3f8c28c764ac0005c16ff412fd0d934ad2ee76048cbe426b013bc237f8904f9e119833e6f7a2513fb4192730fbb73b44b4ce952d52fac090a8e84db5872defef47b4f32499214f7bdce4eb1caf81adc30c765a6cd6349634338be2f6e5d47aee59ef56a73d6e9836858fa9f16bfbca327c79ddce0fa1ef1974fadeae48cb65b4257f9bb9aff2afb05ef06e0c39ac9537d1a67a2a6c291d89499602f4f00be5af13d1f1d0c871a0b0590290e8b8ef81cb1d0a011411a19320170f90b0afca03177234b6cae4fc0edfb4f47acc4787d32fffcf5a4d79a79afbdcc3edac4901b7a280d82947b830a655ddeb850c839c31e32939a2e3b6fbc5484d7be1aa7477270c607b8cd72d1f2de3a05a4e69e9868b196da9b97d0425615fcb70f02f415f922193a8330bf4f4878cff323db59964f1437141f0d4cbcce78cbff7a4b58b471345f3eea40b203e86827063d7d44fbd276e4459bb5f5d07cd6ab8e6c9b5761548e3aaee07171dc80d473a212b914d8ea45b33e2042bdff3e60321079b222694d1979ff44406bd6809d29522427a54e41c524c10959810886e5b5175a3fb8da839d986afa453048717c91680d6ef47fd26e6b2bb857a8d9a736af8d9b8640ca03e7e4a15272c48340c9bc48111a0f976d22b498b66dd226adcb5883ac1e0cf65b0afbcab77ed49ff0d4eb807e2ced5e2051075593954e2ad1418599e111e8e2d14aff2fa24bf12df4fa1189a495300fdf1a6836cdf89299023c0825d1d82dcf1a102a38163cd82ad6bac2b612e0a1465a436b036a4c06e2a0d2dd7d3da6bc5f63723f91c9cce1ca0ebe4aa72eaafcad3319baa5e8bba455dc5d0a6bed3b582a28967fb6d20200b5d0d8ed9acf8c7c20a601ad120f393d65f340e82fd5823219c2db6f366c8fccd30329a1c483897d961d98666352197017df9b2bbe3d7c9a743d463073f352fba60034b403c91537d3b6c4550e01b7b889abb4a54f976bbc3c1ec7fd50863c2e826d0f8faa1ca245fd6d3baf728e436ce374d8095a22f5a6b5f2af8aae44415cfd11b3ba6f646fb8d659c815537d6e317678957e4bbfcd2d9bb9219e2672a02c6835e6e1ae987ca0e10f831b9f40f3661a60067b0a94af81d041564db3a36c386376fd7b4fd2a6409af21a0d2fecedc751ca84870190d770ccb07240fda7e5df0157fea195ce05e07f6d9615c9cff52c9e2e8395f8b1c5f26f2e092173635b9d97241652bf527bd3c0dbcf710b4eb25456dbcd8ffcadc3a27552bf3c2052ce7885eec3440c0b2f18813e09ef8e43a94c8b5bdf292c1fec3deeda7cd750b4041d58800691692b72787cfb219bdc39e923787cabc3109f10869c51e163457f8384495e1f66c808ac44a681d1f62da3442b5cf29f10096c4f1b8316e73ae3c2ea19ed70ae3a3d71c843f87b27708407c549d3e2d6cb04af2d4a4c63f2331fa8ada6a2e30a0d7bbaa43cf00a144d567e1b79d39ee5647d34e936a4c8e4347e021576a6d41c4e9c249446ff02f5eef4117582e62edf71176defacaba5ede4c49ec18dc836b614f52e7e35a11dc7c7e492f600b052dd9882a7b6e8c1ca6cc5b815c1232198401d4a9de1d5d189863fef7c05f49fc32c4c3487804afdd10607873826dd3b11ae73a2dd4f19fcb8bdc2a67c59b11958bc3081b2b77e8c036d9bb94b35734b49967657d71c9961089512b00c6869f9a58a627ea4739c91036ad86dde3aaef4416a36929d0b312c9dff03727ebce9879a464f3c4a4ac60771e10852ad60273e869463a382d9d5291b7d5a8d0d3301f9789c5c67a"}, 0x1010, 0xa0}, 0x808) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r6 = dup2(r0, r5) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0xe) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r7, 0x10, 0x0, 0x10000200) 14:30:20 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffd) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r5 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x800) ioctl(r5, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f00000001c0)=0x10b000) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000040)={[0x8, 0x9, 0x7, 0x17ee710000000000, 0x20, 0x2e, 0x8, 0x36c0000000000, 0x259, 0x0, 0x5, 0x5, 0x8, 0x9, 0x7fffffff, 0x2], 0x4000, 0x30d2fb}) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'eql\x00'}}, 0x1e) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x10000200) 14:30:20 executing program 0: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'nlmon0\x00', {0x2, 0x4e20, @local}}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:20 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='bond0\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:20 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/37}, {&(0x7f00000000c0)=""/128}, {&(0x7f0000000140)=""/197}, {&(0x7f0000000240)=""/132}, {&(0x7f0000000300)=""/52}, {&(0x7f0000001400)=""/243}, {&(0x7f0000000340)=""/90}], 0x1000000000000038, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 14:30:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x7) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) fadvise64(r2, 0x0, 0x0, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r3, 0x10, 0x0, 0x10000200) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0x1015, 0x1, 0xc4, "d9e758a6d7068a5a2a5515eba56a00f0", "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"}, 0x1015, 0x1) 14:30:20 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$ax25(r1, &(0x7f0000000080)={{0x3, @null}, [@netrom, @null, @remote, @remote, @null, @bcast, @rose, @bcast]}, &(0x7f0000000100)=0x48) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:20 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev\x13nu\xff\x01b0\x00', 0x200000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x442, 0x0) set_mempolicy(0x4000, &(0x7f0000000140), 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r3, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0xffffffffffffff18) 14:30:20 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x40) ioctl$KVM_SMI(r1, 0xaeb7) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:20 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x81381, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0x1, &(0x7f0000000080)="6849a2697ce353f6a4b5a3267f5f8f5d0a3755ff9ed08ba3e2c0a5f24a069fe3170d6faa0a8c19ac7106dea68579769a95476a8f04a5334402547d1e3cf60d1c40442b80dde1c2141e59e42c22936d8ba3f8beeb7cd8ad0e7d723e2900e117e62a9f5b48bed6e5605fddab5fc3a2ffb40f05327b9f3f94973b62c3d489", &(0x7f0000000100)=""/119}, 0x20) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='bic\x00', 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x400002, 0x0) write$P9_RVERSION(r5, &(0x7f00000003c0)={0x15, 0x65, 0xffff, 0x10000, 0x8, '9P2000.L'}, 0x15) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet6_dccp_buf(r6, 0x21, 0xc, &(0x7f00000002c0)=""/80, &(0x7f0000000340)=0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SCSI_IOCTL_START_UNIT(r8, 0x5) accept4$nfc_llcp(r4, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x1000) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r9, 0x40046411, &(0x7f0000000200)=0xffff) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:20 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000080)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x221001c}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x118, 0x0, 0x310, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x926a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x400c4c0}, 0x20004800) 14:30:20 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/205, 0xcd}, {&(0x7f0000000180)=""/40, 0x28}, {&(0x7f00000001c0)=""/179, 0xb3}, {&(0x7f0000000280)=""/120, 0x78}], 0x4, 0x0) 14:30:20 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(r0, &(0x7f00000001c0), 0x1000000000000055, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CAPI_INSTALLED(r3, 0x80024322) r4 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000140)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000100)={{0x0, 0x1, 0x9, 0x1, 0x6}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r11) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat(r4, &(0x7f0000000080)='./file0\x00', 0xce39a6227748d38b, 0x48) 14:30:20 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:20 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:21 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x145700, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:21 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) 14:30:21 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x1000, 0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 14:30:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x22a284, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x0, 0x80000001, @ipv4, 0xfffffffd}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={r7}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r7, 0x1, 0x20}, 0xc) fallocate(r1, 0x10, 0x0, 0x6) 14:30:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, [], [{0xf5ed, 0x4, 0x5, 0x7ff, 0x4, 0x3ff}, {0x7, 0x6, 0x1f, 0x2800000000000000, 0x3ff, 0xd3}], [[], []]}) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x1, 0x3, 0x6, 0x2000000, 0x10, 0x8, 0x20, 0x1, 0x10001, 0x1f, 0x8, 0xed6a}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x3b4, 0x0) 14:30:21 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/de\x02\x00\x00\x00llb@\x00', 0x20901, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000100)='/dev/nullb@\x00', 0xc, 0x2) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x1c) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) 14:30:21 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x145800, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:21 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22}, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:21 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) preadv(r1, &(0x7f0000000240), 0x10000101, 0x3) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x0) 14:30:21 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r3 = socket$caif_stream(0x25, 0x1, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/224}], 0x1000000000000000, 0x7fffffffffffff) 14:30:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000380)={0x0, 0x0, 0x2080}) r4 = accept4$packet(r3, 0x0, &(0x7f0000000040), 0x80000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) poll(&(0x7f0000000080)=[{r4, 0x201}, {r3, 0x4}, {r6, 0x730}, {r0, 0x1090}, {r2, 0x40}, {r8, 0x110079a5e038a9ad}, {r10}, {r13, 0x20}], 0x8, 0xffffffff) r14 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r14, 0x10, 0x0, 0x10000200) 14:30:21 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0xd0f7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) close(r4) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000100)={{0x1, 0x7f}, {0x8, 0x6}, 0x2, 0x1, 0x54}) 14:30:21 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="0c42e018e646ade909d461bf0ab59be681e162a76c7c6c58bfbe65a61fbfbc", 0x1f, 0xfffffffffffffff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r4, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000001400)=ANY=[@ANYBLOB="1f278576d24b7d42d59cead710e54f54da898153782d79d36da71f13b993f852d74f8f2004e7c6b4afa88da7a3aa861e4fe36d6a4c573575b603c5bfd90c8b42ffba2e394c81e38f5bb7fb7664dcf308ada763d7d7b9e9218bd1acc2226fcce074795daee29544cd5ec2c97be7f809601b135840fd90a38bb337b3236d83c87c679cf6f97a77ab1d4020745e1d43f7ddfe1f5540f0f19509e89737736559b62a7d9848148f0e9fab4611b766b866c2ba84a53da952cd7eb4cdc95540", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000300)={r7}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x1000, 0x8605, 0x3, 0x8, r7}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000200)={r8, @in={{0x2, 0x4e23, @multicast1}}, [0xfffffffffffffff9, 0x5, 0x0, 0x1, 0x7ff, 0x2, 0x100000001, 0x6, 0x101, 0x7, 0x7, 0x0, 0x400, 0x5, 0x100000001]}, &(0x7f0000000300)=0x100) keyctl$read(0xb, r1, &(0x7f0000000140)=""/21, 0x15) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:21 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x4000, 0x0) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x4, 0xb4002) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x5, 0x8, 0x1, 0x80, 0x9, 0x10, 0x6, 0x0, 0x1, 0xd3, 0x7f, 0xfb, 0xe00}, {0x80000000, 0xfffd, 0x8, 0x80, 0x2, 0x5, 0x4, 0x34, 0x8, 0x8, 0x1f, 0xff, 0xa0}, {0x4, 0xfff, 0x7, 0x0, 0x1f, 0xff, 0x9, 0xff, 0x20, 0xfd, 0x0, 0x3f, 0x8001}], 0xffff}) 14:30:21 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) timer_getoverrun(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:30:21 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0x202000) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RFLUSH(r3, &(0x7f0000000300)={0x7, 0x6d, 0x2}, 0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r5 = getpgid(0xffffffffffffffff) r6 = fanotify_init(0x28, 0x1) kcmp(r4, r5, 0xe8ad6da7bf47d4d4, r0, r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$P9_RMKDIR(r0, &(0x7f00000002c0)={0x14, 0x49, 0x2, {0x8, 0x3}}, 0x14) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = accept4$inet6(r8, &(0x7f0000000140), &(0x7f0000000180)=0x1c, 0x80000) ioctl$FS_IOC_SETFSLABEL(r9, 0x41009432, &(0x7f00000001c0)="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") r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:21 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x100000000000011a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1a2d) 14:30:21 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x220c00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000000c0)) syz_open_pts(r1, 0x48401) 14:30:21 executing program 1: lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) syz_open_dev$midi(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f00000000c0)={0x81, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_PIE_ON(r4, 0x7005) 14:30:21 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6c4c01, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) fcntl$setstatus(r1, 0x4, 0x47000) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)=@bcast) 14:30:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x3) r17 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000680)='/proc/capi/capi20ncci\x00', 0x0, 0x0) io_submit(r3, 0x7, &(0x7f0000000840)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1ff, r6, &(0x7f0000000080)="4241d37e7381736f123769baff6e1291b32198ba16befad0d3e8345804ec96abadd4cde0a943d9a3a1980d60b91b5447f8ddd957c37b7c65a46e04f90df6cf6c13f8a3cf2b1a97365f0d3a8cf3f71439ca9593b9b0ed2783739937a9705e3e3a768f3c0b0240780faf723bd7903a3f11fa201803f1d06105cd9deb62d5766e8ecfc15fc5bb4ce88663441cb5407af2cf0644b3", 0x93, 0x50, 0x0, 0x0, r8}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000180)="5e7a92360a530cac4e183d1e89e6e3dab25d5fbd5c7a4aacb747f952fb3df4441d0279cba369f78a36a6b8368353b2bb1396e14582b4c6f31ef3416d5286ae3d1971cd2461e32d377681635b9a26e3dd6a4de4a4fad633ee40330fb91e1dd9ce642c292cb536df7a82f05af24f691fd7bd6ec61b7ece16e4363358adeb0c738ca378eb92dbeb957226878ee3a0843f9a9c4547c7d2008d688b499b094e3678cb9d90da5fc1a84fab7f2a2c11e0f188058d0fe6d57cdbe1638c9875c0ae7c9e7f66561afa2ebf7be875ca63", 0xcb, 0x200, 0x0, 0x0, r9}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xe643065ee2922a7e, 0xfff, r10, &(0x7f0000000380)="2585261c85eef02012c563d92f9eacc3", 0x10, 0x370b, 0x0, 0x56ecd5719b1cd605}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0xe4, r12, &(0x7f0000000400)="8dd9313a89222e24395d1a04d67c7c0f29332984063ef202cb904a5ddfbbfa945018d82582b8cf8c6aafed7743bf8bf96a0588084421f671d0fd29d0836d155b72c81fbbbacc62a5e4bf927aa0d675ead942b4a58989f075d4ec098df198c0c7eed0cae397a9a6db8c42427034ba4cf4e1bdcc52ca625addb7cd338fe82633fe3cb9acd451b9d70ffa4bd4af162e0fc1bcec8d8b260a95cf5dc46c9879929b6e237ebd412ae1546a27fe625549ee8b3992ecf431a14afd4bb014330595ee63f3f4baede1ccfb9b410079de9f65ed56b84dfd929582f73ee6bcb12003cb0f03d177a8012b0c3571f1c9fb570f69700aae946b634c98d0", 0xf6, 0x3, 0x0, 0x4, r14}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="ce67082b83f0707954bdc92b4f682fe32eb0a37f0e0f6ec633b2", 0x1a, 0x8, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x0, r16, &(0x7f00000005c0)="e1caf51f66278a5792968288ca0ed76c8978eaa6986d4395c3b278e86fdcd2bcc91bcfc87f08ef8beb59980626fbcba3ad25f1af92b03fc4f7e6d0a96d450703e063a766273e6d6f7dd7b39d1c4cc3563e2634d27b5e857b5e28e29b13c3caf84b976a2349508f4d6d77c9b92a0e09233dad86078bdd629ff8a608104d28465ee9c54c4eb6112a809c5a32700140ee83de222821b60ee629", 0x98, 0x0, 0x0, 0x6, r17}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000700)="1fe4a277d6cc48d039ddd00081c7f61077a34f94308aa5ef86f6a123ecdac0d1ef707f7166e863f91a06c1875c3e439863a4ff107d71b86f02835ff3defca4404f7d63e2ac202e8ca507d5d3487360dc208931025bffa8444e8cfd17e4c24fc48a5c992795d4b995cf71025abb03a881514fed065d4a9483f432cac2867f9caeb977763fbcfff2232c363e5794afe640b894717fbf2364b04289cd906278c056c1bb41bd7e3418c47c5bc4c47b01a079c9bd195e235a507e65c2547b1d1751a5c61d5e8abd50fc4d5ac3090fbe85b90b7068e74b211a32b2d3db79a2de48f5", 0xdf, 0x74d}]) 14:30:22 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80480, 0x0) finit_module(r4, &(0x7f0000000140)='\x00', 0x4) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x6) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:22 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000100)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r2, 0x10, 0x0, 0x40010000a00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f00000000c0)={0x6, 0x5, 0x23e7, 0x800, 'syz0\x00', 0x80000000}) 14:30:22 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x2000) r1 = accept4(r0, &(0x7f0000000100)=@generic, &(0x7f0000000180)=0x80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x8, @remote, 0x7}], 0x2c) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f00000000c0)={0x2, 0xffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000200)={0x7, [0x9, 0xe509, 0xfff, 0xd66, 0x6, 0x1, 0x10000]}) syz_open_dev$midi(0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:22 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x2) write$selinux_create(r2, &(0x7f0000000080)=@access={'system_u:object_r:vhost_device_t:s0', 0x20, '/sbin/dhclient', 0x20, 0xfff}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000100)=0x1, 0x4) 14:30:22 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/Wez/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8008}, 0x1) 14:30:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r1, 0x10, 0x0, 0x10000200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$rfkill(r3, &(0x7f0000000040), 0x8) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r4, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000300)={r7}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x8) 14:30:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:22 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000080)="3131fcd49ff2e272b6c433aa56745b44b5e8f4d6172d59d3dc367d30e8487dd3f0490cbee3fe3e775c14caedb3bf6465fdacbf773450feac3ac6c2e18976f43648001495b7466fbb02894b0818712ed91c882e0c18b8d00af874c7a51108c7605f55d53161ed61b7c07ee469d8eaa840e1f582", &(0x7f0000000100)="3883c90f2315de"}}, &(0x7f0000000180)=0x0) timer_delete(r1) 14:30:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x1d63, 0x4, 0x3f, 0xbd}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) fallocate(r1, 0x10, 0x0, 0x10000200) 14:30:22 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x87) accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x6c2031bf3efcb442) 14:30:22 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x80001, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x40000, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) mmap(&(0x7f0000139000/0x2000)=nil, 0x2000, 0x100000f, 0x12, r12, 0x800000000000100) dup(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r14 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_mtu(r14, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="73345466a56974792e6c730013e7fc97ab0ee94f98cb6fb7caaf9060139768731700"/43]) r15 = dup(r13) socket$inet_sctp(0x2, 0x6, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x3) fcntl$dupfd(r17, 0x0, 0xffffffffffffffff) write$P9_RSYMLINK(r6, &(0x7f00000000c0)={0x5c, 0x11, 0x2, {0x40, 0x4, 0x8}}, 0x14) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 14:30:22 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:22 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4$tipc(r1, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x180800) preadv(r2, &(0x7f0000000300), 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r2, &(0x7f0000000040)={0x50002000}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1e) r6 = syz_open_procfs(r3, &(0x7f0000000080)='net/tcp6\x00') ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000000c0)=0x8) 14:30:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008100e00f80ecdb4cb9040a1d65ef0b027c05e87c55a1120009000e0000990d000000000000000000812fa80007000d0063e3e558f030035c3b61c1d67f6fab007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x420380, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x40}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x10000}, &(0x7f0000000180)=0x8) 14:30:22 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000080)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000100)) [ 403.835271] IPv6: NLM_F_CREATE should be specified when creating new route 14:30:22 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x400, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x424002) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0x7, 0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:22 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='\x00Y\x87\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:23 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000000c0)) syz_open_dev$midi(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0xf04, 0x3}, @window={0x3, 0x2}, @sack_perm, @sack_perm, @window={0x3, 0x9, 0x8000}, @sack_perm, @timestamp], 0x8) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000200)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000240)={0x7fffffff, "fd6fc07bab86e8d64ca94bc179cfdeb5b80ba08402ea411c1296a3154925b511", 0x3, 0x1, 0xd3665078, 0x10001, 0x8, 0x977ba642df67b0cd, 0x8, 0x2}) 14:30:23 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r6, 0xc0305616, &(0x7f0000000180)={0x0, {0x9}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000080)={0x3, r4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0x6c) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r13, 0x0) fcntl$getownex(r13, 0x10, &(0x7f00000003c0)) r14 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r17 = dup(r16) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000004640), &(0x7f0000004680)=0xc) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r19, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r19, 0xae41, 0x3) r20 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r20, 0xae01, 0x0) r21 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r22 = ioctl$KVM_CREATE_VM(r21, 0xae01, 0x0) r23 = ioctl$KVM_CREATE_VCPU(r22, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r23, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r25 = dup(r24) ioctl$PERF_EVENT_IOC_ENABLE(r25, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r27 = dup(r26) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) syz_open_dev$adsp(&(0x7f00000046c0)='/dev/adsp#\x00', 0x4, 0xa2600214fbc41c31) getpgid(0x0) lstat(&(0x7f0000004700)='./file0\x00', &(0x7f0000004740)) lstat(&(0x7f00000047c0)='./file0\x00', &(0x7f0000004800)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004940)={0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000001400)={0x360, 0x3d, 0x300, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x73, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}, @nested={0x1a4, 0x3d, [@generic="4d252c2f004eff4aae7544da92c31fd7b984e60185f2d9e855cc14f241d3167ed32d43b9d1696584f0e7e1de0e50e94de6572b241317cb40746d1a8d9cc40104a1c017b68dc0b7113e41276294ec9a27afff2f1bd1580d7fcc29dbc098686d6ce874", @generic="ea9e093b20828d92a08d19abba359173aab9c1645151a249d6499150cc6dce0913f1c6d2b4acb8eab7155be2c6151e925d9d65df18d89c93e6b91d13c3b3757160e9bd6212eaedabecd44b46dbcd7a1478f4818c9ab3cfaba49f002024fddd02ca828eae9884068bbd7849f1c0ce555cbcdac62ce9a9cdc7c6d320315498cbfb4b9c9bd907700b2431c6f5c6a5699fca6f88a1ade00b65526602b0b0c2b7e63bdc18195665fb8afc692297816fa315e872f6deac7660d589", @generic="0eedd18bc2cfd5b05f69d8633a1d1ab833fb5153ba0d7d9418f8f341cd99d79735e1073a10f82dcddcc5471aa4ae894e42c1a4843c4e4a6abcf7bed3c7e5ac3c1246bf85993cbdf1e35c7ef3c24e031905d4c77ef5c6d011b8f9466dfe79356939e727fab798eca86549be2959fce1", @generic="d2e4f294", @generic="51639e23186ca8b555e43ee3dc9d91644a"]}, @generic="d31b711db4fff8f7742ac0876ce78a448ccb3b4341bf851931cce20f91ead27ca001cd6c393b73d645e17a838b4e44596a81e9431d5d2e823442285d43d4d0f7f9fd06ec856bd503f6197326e65d1484b6652df0f37f7dac35f3881a288fc75ec857e1d33b6c09519b4cc587b599d480bf438b6b8954eeb5a49b172d9542083b4844a5abd59dacb864fb2a8dd50fdfdc1d99cd05c20bec9a3a2117022f8b8a65c201612c95408b1e50ab7d106e666c092a10d6", @generic="a4d33b99f8e001d25196e7bc65c1f9484478722413bdf74fc0c6d8cdd646488e99e75b4bc0f899d854bee8c71bc0650b3a1182d9611580d65aee5a0182f856ba60a4a9a6197939b3f88bbe3f1ba8e571b596f15b6abb400bfcfd213f03e6ede6b8e2957d66e10afa7a2ad2a677f578d23330d2f23033613434a9c6325199d9074587c70bb32e304438fc6ec563b0583bef8c2099214036df68b6b11611caa0fbdd36ecb37b8611d308005801ab08be6d93f6a0b78023cef73b6bfec87806d0186ed3d32afa5e0bbb2491f908344b39dfb1aa906ac700d6630ace0f6875fa44a198f855ffd432fde03410a2135f726e61d6"]}, 0x360}, {&(0x7f0000001780)={0x2194, 0x41, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x4, 0x5d}, @nested={0x4, 0x8b}, @nested={0x20, 0x1d, [@typed={0x14, 0x5b, @ipv6=@loopback}, @typed={0x8, 0x55, @ipv4=@local}]}, @nested={0x10fc, 0x22, [@generic="146310380c7bde38fa5262676b0af254e23ec73933cd4b003b45d7ad6bdb7fb3a635602778f8f4603be05e1c7389cc1c7b587af28b8d308afe70556cbef9da61ff1c0492ce675169177bb994961fcc29b1fe6ca5cb933bd12333c5c998f25161ad3be76d9b1895cb9345ecc84386c4c283c6120da074db6ccb35b14243eeb3b44eae86ac50158e12e24b51a96861e6edb8c80bd5a75b04cc1555fb661aa48e12c826ba8f1165ea75cf0353f2ec0e0b4fabf6f688d4f3a6484945ed90edcd17b4fcf1b67cdf792219b72d1b9a05397db2e147dbb24912a3687702a0ef403d700e78b0598c7536a777ae96c2de843683", @generic="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", @generic="cccb4c439cbd5b"]}, @nested={0x1060, 0x24, [@generic="9b813fb71f7791da214f10523e8e1ba50c3622", @typed={0x8, 0x40, @uid}, @typed={0xc, 0x80, @u64=0x9}, @generic="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", @generic="05693104b47f0f4ad542726e46d2b61669cb64cd8b84a6286b94efe63b1f8271adcb896bba31aba983edcdbd9ccce7f1ba9ee710"]}]}, 0x2194}, {&(0x7f0000003940)={0x270, 0x17, 0x200, 0x70bd29, 0x25dfdbfd, "", [@typed={0x14, 0x11, @ipv6=@mcast1}, @nested={0x23c, 0x18, [@generic="3318369ce55852dde056f0b9f90ca73378d7543298ffae64bc6945533ebe59895d2d520385ea45946ee17ba9fe6e85d757786e685de0a1b9fcbf5f1468c71de5219ef55bf45a8c57543042a6378d657d7fef01109d4a05a8e35a99ffebbf5da2f213b7e944ffddab1b1c4a1c627415d3d8f84d854812a1bb9a", @generic="61bfa3b9780bd5facddfa5d36be72a76ee333b3c5d38acf8a8a9e5af5a6a502c5f325946f64adf15876df3946c80d64004ab1cabd111fb3dad798a8c8565061b4852abd802ceef88e3d62ae320fa859d39e587f88d4eb1f469", @generic="8070b6896bbceed2ced0640c2b66f245fda4e2cef039f92e5db0224d3a1b46834b274a06cd24ccebd9d20d4b9c817511a04a31b05f4ae0bf65614775baf840623740e10a19c61bdeaa1fac7ba38cd5ff3167593cbd99a5e9cccaddf9ac16a23893b4f3373bdf5608d87d2dda0597831da314d32f92118c93ec36d61f6c662ea8712ab1", @generic="3869005c979507b9225f7c1868e5549c0b8ddb733b213d402468a57f3bdf5c90b52acd059e3e855419cdbbab6279ef14e11fb95aeaf8bd48ae7de153a391079bbd5d0a2a5e583dbc17fe21a6445e615f80ac8472d2866159c4fd5b5d16973442a0bff41e3e933da0c8c3df2a6a18360fcb5124582c9aaecb6ad7a0991df99fefec2db6dd5df1de581fc7fcf20f555b005d2a43a91b5ad5606c5c77015861dd3b0f3ca0cbf7f503518411e818b2cfadf58f60dbc00d2dcd0d2e409a0b05635b09cece8c23fd135cacb3df494843ff423516e9", @typed={0x10, 0x87, @str='/dev/nullb0\x00'}]}, @nested={0x10, 0xf, [@typed={0xc, 0x87, @u64=0x2}]}]}, 0x270}, {&(0x7f0000003bc0)={0x584, 0x1d, 0x1000, 0x70bd27, 0x25dfdbfc, "", [@typed={0x6c, 0xa, @binary="ba2d77c00b83d4924a20293a4de2670da23c6dfb1e270e158c1abfca400df902bdaeb6df524a9f03ae24f9db1e6c183d4d0c3afca24364fa59bba6301ebf0173bf3c5b17863e05df19a679790c4a1578b742a486a5de5c6373d383ccd7dac9435df952fa7a539ed6"}, @typed={0x8, 0x17, @fd=r1}, @nested={0x1b0, 0x25, [@generic="7522bea2c8c8f4d8dd4d415d0cfae7e14d9b09a46e8ede0a76ef34fb2158cd912eca48f103f7f14e3b20a93e48e2015b1c3e18678d8930334f00d1aebb3108e4ba47851b600f4d830b217a3daff8af84a4b3dfeb", @typed={0xc, 0x57, @u64=0x101}, @generic="bcc2fa0671005ce5170ef122f2988eb4b8217c4fe16bfd72e45bb0cfeccf32bb6ab54f4622ff293f4997f233982623d6adbb67473d57641aa4eb3f8ad0177393a145b22a5f4a52dbcda0e53994ce224581f3102d", @typed={0xc, 0x52, @str='eth1\x00'}, @typed={0x8, 0x2b, @ipv4=@multicast1}, @generic="5f5585d609c174e37e56812adbbfab180fd54c73e0b9fa839e48f1104228d18029625c18a6ea393774c5bb13c2b1c2292176ac80ce0860cbc648a920fc8dc65036f3e5759fadb9dc008c2f46453752bd34e1076b0beda9f2ea5b65f7bd6dcf91e85819492e3510b8397a2ff6bfad502d255f552caf195c4b8ed5a25b7bcc6bc58563835879bf344f509ca8e33ccf2a2cbfd68a01d35f82de2544864fd683fc5c060bd45c66b3e59b1420", @generic="67976bc492e0ae3388ce3f2abfe5ec3a42d1f4fc9398fdaa663d2885e3c8f8e332aa2cb558e9ac7ca6093776b6a35e24ed5d850227f980a2668e"]}, @nested={0x114, 0x19, [@typed={0x18, 0x53, @binary="36f8d3a46ba47e6745a8f292080a5ebb681d2c"}, @typed={0x14, 0x5e, @ipv6=@mcast1}, @generic="52e9d43732ce9f8d80d9bcb8315427445be22c7fa4233e7a85bf288643afc15e5626ac1be5c7a6ca40d07c1f0822602f5e016de0f6b06cf1bfb525701ea513d525a19ac590b8aedf46d43007eb3c56df4a5c438e5df86346255a7e771b0f80cabac728817a44cddde1f66dd26d4d786b2470a44813c7c1905260a182ea594017721adaa11bf4d1ab5aa1f1b1a86e358947c7d1377db04a1d3e670f02da2d8794", @typed={0x8, 0x15, @uid=r9}, @generic="b25f87527b2237e29707c931b2445f3dcb06", @generic="e673074fbf04e616786a4468f5b7e1b5be052f0b4e2d9612aa44b89d353197d03d8ca4b281d45a"]}, @generic="f70dd12ea08c4625ffb8be3dc620b49a9c30a7bef7bdcc8c034a26e303b128b1a7dd833d225bb42959177247824b1700c0c9291ec7f159926f656e96fa9d4d4c2f8707759cde8044110c953bda419946d1f22250f1ad17dfadbab80fab29b45c98fdd89a80ba852f6c222284703ddc9c33159e026456a9057309ec4470bee7e37447a0312926fe92c9c9e25386a0d7837fb6f24ebddf4abddc7d0bd6e717c0b6c9945fdb988d95aa1a8c4f3f106c5d3ae87d186a3c0371e07348b6293e5e9eb20d186830986e888fb1", @typed={0x14, 0x6a, @str='vmnet0md5sum\x00'}, @generic="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", @nested={0x60, 0x17, [@generic="7749487feb7af962d6d5e703522f0b1d72c0d7c492215b25d51d733f06298dfcd0eef57768ae0cc79c33fe35d79412f6a4174254bebd1ee43c86b67bedb938854fa99f17b0d5be993f7764c22aa38e066477c2ca3aef53ceac"]}]}, 0x584}, {&(0x7f0000004980)={0x224, 0x41, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x214, 0x61, [@generic="a10593ccadbfc2f7c96c02c87bc1bfc286285f68a3025231ae3a1b82f600da51f5e8121f8249edc130ad736f223c4f018d02beaf0883a6caec7edf1b84e78471ae994fa596d19d771df9113c0f1d4628970aaefe4763db5aa3f479476a030e51c26a83e26bf5c0a080d400730013579ddd6067a9", @typed={0x8, 0x1b, @ipv4=@multicast1}, @generic="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", @generic="4c6a7031f4eef66d4c021725368d2237538692d3f429dc9e86bccfc1a15aba23f93739dc920d42628d7cd19cb0ba4d", @typed={0x14, 0x36, @ipv6=@rand_addr="db78c22e374857db985457a96055f778"}, @generic="fa8875ce4cacb399bb478ba7acd7262aa36a03fa43e7b75a4bc33b090fb5db99b12746", @typed={0xc, 0x53, @str='bdev\x00'}]}]}, 0x224}, {&(0x7f0000004380)={0x210, 0x2d, 0x800, 0x70bd26, 0x25dfdbfc, "", [@generic="629c39805ebacd72bf769058f7edd0a8f699f821f08b92bc638ff986af744fb9cb32150e75c0131b306baa508d3ca38c6cc52831ef2f51e096f113b35f4c492bd8da092eae75ebc846d3eff8d7f009274cc1834c027af919720e6bbf1e48e295c704bbedcba6ec96515e415188b971bef6ada675cfa8e112b56d3dbc3b0b04818e788235585947de9a6bf732177d61739cbc41a9f1572c3fa43394bd92755fd453adcdb1d4a8485b4dc3a2385caf7976b5be52fabd362d91016d7dedab35bc1e968f73e5014217a52bb3ab5af63e5a3b7eaea196ccc3285645e09013033ad3edeab3562e2022724a6767ffd9cbc3118d67987706ff58", @typed={0x4, 0x86}, @typed={0x8, 0x67, @uid=r10}, @generic="057f44d5a25fa067a6e5d89ef3a74cd7c731feef6bafb110d4b5455693856f13f6747d95f9fd5f14f0a196c92bf770fbaba036ac0fcdb4827a2abca8d09f2efb3cd6640823d7e47d5e4132bf20df11619887e0e3157d04f8be56152266e86b84f7f8ee9a3e142ee337de3d8440d6fafd46ce91c5de4bbf0f6735295732180517812778b8a1c38f46bb69715c901e286d51014e3254506fbd2f85dc3a4c332d7c0f0ca88da3676c220a5512e26cbab339c104807e2ae5fb351630b5c2e371604eade294d2d0687ee03c1e676973e2a3986ff7201522fd", @typed={0x8, 0x81, @u32=0x9}, @generic="6836c8ee6f7f140a0477e9aedbe827ebe0e195423a04c349", @typed={0x8, 0x91, @ipv4=@remote}]}, 0x210}], 0x6, &(0x7f0000004880), 0x0, 0x24040084}, 0x40000) recvfrom$x25(r4, &(0x7f00000000c0)=""/131, 0x83, 0x2000, 0x0, 0x0) 14:30:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@remote, @remote, @default, @bcast, @bcast, @bcast, @bcast, @default]}, &(0x7f00000000c0)=0x48) fallocate(r1, 0x10, 0xffffffffffffffff, 0x10000200) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x84100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x3d152867}}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1e) fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x1, r3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x4, 0x1, 0x2800, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x8) write$P9_RATTACH(r5, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x20, 0x0, 0x8}}, 0x14) 14:30:23 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080), 0x10000000000000f1, 0x0) 14:30:23 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000080), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4222, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f00000000c0)={0x1, 0x80000000}) fallocate(r2, 0x14, 0xfffffffffffffffe, 0x10000200) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$RTC_PIE_ON(r0, 0x7005) 14:30:23 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x800, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) 14:30:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = semget$private(0x0, 0x1, 0x404) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_WRITE(r5, &(0x7f00000000c0)={0x18}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r5, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r6, 0x10, 0x0, 0x10000200) 14:30:23 executing program 1: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:23 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r0, 0x10, 0x0, 0x10000200) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') 14:30:23 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) gettid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000100)=""/25}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/197}, {&(0x7f0000000280)=""/42}, {&(0x7f00000002c0)=""/106}], 0x36f, 0x20) 14:30:23 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hostfs\x00', 0x402000, &(0x7f0000000140)='posix_acl_access\xca/vmnet0,*\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:23 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x83, "464999e66e8467969783d55cbfaeedbdcb5e909ff12e0d8f2c6fef5adbcd31d14f95d5d3d49f246ccfcb7b9dac986bd4abd6910125c2fd61c04e8df792745eecdb53904b41446559f239e62ee9d4bf68eef30c41efab598f93e623476687d5add3bd67685adb5eb47e30f291e69c95f172de187340f7d0c1acc44108a23c5de0471362"}, &(0x7f0000000200)=0x8b) dup(r2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RSTATFS(r7, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x4, 0x9, 0x5e9, 0x5e1, 0x3, 0x1ff, 0x2, 0xfd, 0x9}}, 0x43) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:23 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={r5}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r5}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={r5, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r6, 0x7fff}, 0x8) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) waitid$P_PIDFD(0x3, r3, &(0x7f0000000100), 0x1, &(0x7f0000000180)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000080)) syz_open_dev$midi(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x9, 0x20, 0x5, 0x5}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r4, 0x4aa, 0x20}, &(0x7f0000000140)=0xc) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x46c3b}], 0x1000000000000038, 0x0) 14:30:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x80) write$selinux_load(r0, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "b9da7cf92be2cfd2aad0205faac6f71e1029d331eeed00e0d00264ca0e4fca30978031a045a08fc6379786c7d12c8c63f52e4c2787ab88a1789a69917ceb90bb4cad5b35d12e685d3d0cb779fe8fdb2d0f305eb7919f1104f4d1a80863fe3d1f8d5c272551a864e88872f11c0dfa417988cb26d0756606ef645526aa92f1b495d5b30fc5c3e923635da57add9de35de281664d51dc9fb9baaa0c291876055cfb8d09637cbd7864869cd4258cc78554970955"}, 0xc2) syz_open_dev$midi(0x0, 0x0, 0x0) getuid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)=';\aev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) 14:30:24 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000000c0)={@initdev, @multicast2}, &(0x7f0000000100)=0x8) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:24 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='security.selinux\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) close(r2) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000100)="f59095a352ff9e7f71505dc82aa2334f0aa1428683d3e256753254ab50dd50678a431e973cec850d6b2a0392abec2ff4a45ca5af19a881ce99ddf0f2bb2d617985f3fda61e598cfd4a5d1d7d2bb108614a118bb2f53cbef28fb17ba4de8eaaf117ad5578ad38b2213646c8c1ecf5cea221de0cbf563e0286e450ae9af92a3ba83fceb067edb9aa4c4a16d6840c34b05a2a27b235a6d0b92130bbde07f054f65661ef0831ceddb21ee6e173c0e5a8c262b8972ebc0f38de2e05782020dcd6f872c427dbd492ff906b8d33561d502d8e2d37575367d0b79e5a58afd569763619c2a41d0c50c3f5c3c52d687cadade442b57f561307") fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:sshd_var_run_t:s0\x00', 0x24, 0x0) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000000200)=""/133, 0x15}, {&(0x7f00000002c0)=""/198, 0xc6}, {&(0x7f0000001400)=""/95, 0x5f}, {&(0x7f00000003c0)}, {&(0x7f0000001480)=""/42, 0x2a}, {&(0x7f00000014c0)=""/192, 0xc0}, {&(0x7f0000001580)=""/255, 0xff}, {&(0x7f0000001680)=""/219, 0xdb}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x9, 0x2000004000000000) 14:30:24 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @rand_addr="35bf8f4f3bb5d081e2d8f21310110fb4"}, 0x1c) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x20) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:24 executing program 1: syz_open_dev$midi(0x0, 0x7, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 405.378214] audit: type=1400 audit(1569853824.279:105): avc: denied { relabelto } for pid=20774 comm="security.selinu" name="UNIX" dev="sockfs" ino=101863 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sshd_var_run_t:s0 tclass=unix_dgram_socket permissive=1 14:30:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008100e00f80ecdb4cb9040a1d65ef0b027c05e87c55a1120009000e0000990d000000000000000000812fa80007000d0063e3e558f030035c3b61c1d67f6fab007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x420380, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x40}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x10000}, &(0x7f0000000180)=0x8) 14:30:24 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000100)='self\\security*cgroup@\xa3security.keyring\'$procself&em0&\x00') r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2000000000080000) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x1e) fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x0, r6}) 14:30:24 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000100)=""/69, 0x45}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x29c5, 0x9}, &(0x7f00000001c0)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000280)=0x1e8a) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)={r3, 0x5, 0x40, "dd2caf2acfb5568f8ddc962a9a81ae76e9c758bcf44bf395264c1ab33145db26b55068981f0d5fc7b8581b1284167c40e0ca1a7c76643013c87e39fb61de44ec"}, 0x48) 14:30:24 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='+eyring\x00', &(0x7f00000004c0)={'s\xff\x7f', 0x0}, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r3, 0x1c, 0x9a}, &(0x7f0000000100)=ANY=[@ANYBLOB="656e633c706b63733120686173683d736d332d636500000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000bbfd00000000000000"], &(0x7f0000000180)="49849f94353855e98c28882e8a39903c066e64bfd124c48c3d9f4bc6", &(0x7f00000001c0)=""/154) fallocate(r1, 0x10, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x208004, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r5, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000300)={r8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000180)={r8}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000440)={r8, 0x34d, 0x3, [0x9, 0x2, 0x6]}, &(0x7f0000000480)=0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = dup(r9) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000000300)={0x40, 0x2e, &(0x7f0000000380)="a8a674515e712432e23770ea07680e4fd00a77fbee6f3aafd5ef5d6ae669c0f69da234f43cb5adf4e818b32c3041e5abe3dd73ef15b0f5e84d473ab7461fd64364a6f993f6a19b30bb9f1ea59ed187a5cbbe6df8b1e72dfd61a1565362dd47", {0x2, 0x5, 0x0, 0x0, 0x1, 0x0, 0x9, 0xffffff81}}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TCSETXW(r10, 0x5435, &(0x7f0000000280)={0x3, 0x1, [0x1ff, 0x0, 0x80, 0x500, 0x1], 0x6}) [ 405.636032] IPv6: NLM_F_CREATE should be specified when creating new route 14:30:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x3) r17 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000680)='/proc/capi/capi20ncci\x00', 0x0, 0x0) io_submit(r3, 0x7, &(0x7f0000000840)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1ff, r6, &(0x7f0000000080)="4241d37e7381736f123769baff6e1291b32198ba16befad0d3e8345804ec96abadd4cde0a943d9a3a1980d60b91b5447f8ddd957c37b7c65a46e04f90df6cf6c13f8a3cf2b1a97365f0d3a8cf3f71439ca9593b9b0ed2783739937a9705e3e3a768f3c0b0240780faf723bd7903a3f11fa201803f1d06105cd9deb62d5766e8ecfc15fc5bb4ce88663441cb5407af2cf0644b3", 0x93, 0x50, 0x0, 0x0, r8}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000180)="5e7a92360a530cac4e183d1e89e6e3dab25d5fbd5c7a4aacb747f952fb3df4441d0279cba369f78a36a6b8368353b2bb1396e14582b4c6f31ef3416d5286ae3d1971cd2461e32d377681635b9a26e3dd6a4de4a4fad633ee40330fb91e1dd9ce642c292cb536df7a82f05af24f691fd7bd6ec61b7ece16e4363358adeb0c738ca378eb92dbeb957226878ee3a0843f9a9c4547c7d2008d688b499b094e3678cb9d90da5fc1a84fab7f2a2c11e0f188058d0fe6d57cdbe1638c9875c0ae7c9e7f66561afa2ebf7be875ca63", 0xcb, 0x200, 0x0, 0x0, r9}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xe643065ee2922a7e, 0xfff, r10, &(0x7f0000000380)="2585261c85eef02012c563d92f9eacc3", 0x10, 0x370b, 0x0, 0x56ecd5719b1cd605}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0xe4, r12, &(0x7f0000000400)="8dd9313a89222e24395d1a04d67c7c0f29332984063ef202cb904a5ddfbbfa945018d82582b8cf8c6aafed7743bf8bf96a0588084421f671d0fd29d0836d155b72c81fbbbacc62a5e4bf927aa0d675ead942b4a58989f075d4ec098df198c0c7eed0cae397a9a6db8c42427034ba4cf4e1bdcc52ca625addb7cd338fe82633fe3cb9acd451b9d70ffa4bd4af162e0fc1bcec8d8b260a95cf5dc46c9879929b6e237ebd412ae1546a27fe625549ee8b3992ecf431a14afd4bb014330595ee63f3f4baede1ccfb9b410079de9f65ed56b84dfd929582f73ee6bcb12003cb0f03d177a8012b0c3571f1c9fb570f69700aae946b634c98d0", 0xf6, 0x3, 0x0, 0x4, r14}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="ce67082b83f0707954bdc92b4f682fe32eb0a37f0e0f6ec633b2", 0x1a, 0x8, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x0, r16, &(0x7f00000005c0)="e1caf51f66278a5792968288ca0ed76c8978eaa6986d4395c3b278e86fdcd2bcc91bcfc87f08ef8beb59980626fbcba3ad25f1af92b03fc4f7e6d0a96d450703e063a766273e6d6f7dd7b39d1c4cc3563e2634d27b5e857b5e28e29b13c3caf84b976a2349508f4d6d77c9b92a0e09233dad86078bdd629ff8a608104d28465ee9c54c4eb6112a809c5a32700140ee83de222821b60ee629", 0x98, 0x0, 0x0, 0x6, r17}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000700)="1fe4a277d6cc48d039ddd00081c7f61077a34f94308aa5ef86f6a123ecdac0d1ef707f7166e863f91a06c1875c3e439863a4ff107d71b86f02835ff3defca4404f7d63e2ac202e8ca507d5d3487360dc208931025bffa8444e8cfd17e4c24fc48a5c992795d4b995cf71025abb03a881514fed065d4a9483f432cac2867f9caeb977763fbcfff2232c363e5794afe640b894717fbf2364b04289cd906278c056c1bb41bd7e3418c47c5bc4c47b01a079c9bd195e235a507e65c2547b1d1751a5c61d5e8abd50fc4d5ac3090fbe85b90b7068e74b211a32b2d3db79a2de48f5", 0xdf, 0x74d}]) 14:30:24 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x100000000000017a, 0x0) 14:30:24 executing program 1: syz_open_dev$midi(0x0, 0xfffffffffffffffe, 0x80000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:24 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(r3, 0x10, 0x0, 0x10000200) 14:30:24 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) 14:30:24 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x44) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x3) r17 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000680)='/proc/capi/capi20ncci\x00', 0x0, 0x0) io_submit(r3, 0x7, &(0x7f0000000840)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1ff, r6, &(0x7f0000000080)="4241d37e7381736f123769baff6e1291b32198ba16befad0d3e8345804ec96abadd4cde0a943d9a3a1980d60b91b5447f8ddd957c37b7c65a46e04f90df6cf6c13f8a3cf2b1a97365f0d3a8cf3f71439ca9593b9b0ed2783739937a9705e3e3a768f3c0b0240780faf723bd7903a3f11fa201803f1d06105cd9deb62d5766e8ecfc15fc5bb4ce88663441cb5407af2cf0644b3", 0x93, 0x50, 0x0, 0x0, r8}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000180)="5e7a92360a530cac4e183d1e89e6e3dab25d5fbd5c7a4aacb747f952fb3df4441d0279cba369f78a36a6b8368353b2bb1396e14582b4c6f31ef3416d5286ae3d1971cd2461e32d377681635b9a26e3dd6a4de4a4fad633ee40330fb91e1dd9ce642c292cb536df7a82f05af24f691fd7bd6ec61b7ece16e4363358adeb0c738ca378eb92dbeb957226878ee3a0843f9a9c4547c7d2008d688b499b094e3678cb9d90da5fc1a84fab7f2a2c11e0f188058d0fe6d57cdbe1638c9875c0ae7c9e7f66561afa2ebf7be875ca63", 0xcb, 0x200, 0x0, 0x0, r9}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xe643065ee2922a7e, 0xfff, r10, &(0x7f0000000380)="2585261c85eef02012c563d92f9eacc3", 0x10, 0x370b, 0x0, 0x56ecd5719b1cd605}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0xe4, r12, &(0x7f0000000400)="8dd9313a89222e24395d1a04d67c7c0f29332984063ef202cb904a5ddfbbfa945018d82582b8cf8c6aafed7743bf8bf96a0588084421f671d0fd29d0836d155b72c81fbbbacc62a5e4bf927aa0d675ead942b4a58989f075d4ec098df198c0c7eed0cae397a9a6db8c42427034ba4cf4e1bdcc52ca625addb7cd338fe82633fe3cb9acd451b9d70ffa4bd4af162e0fc1bcec8d8b260a95cf5dc46c9879929b6e237ebd412ae1546a27fe625549ee8b3992ecf431a14afd4bb014330595ee63f3f4baede1ccfb9b410079de9f65ed56b84dfd929582f73ee6bcb12003cb0f03d177a8012b0c3571f1c9fb570f69700aae946b634c98d0", 0xf6, 0x3, 0x0, 0x4, r14}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="ce67082b83f0707954bdc92b4f682fe32eb0a37f0e0f6ec633b2", 0x1a, 0x8, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x0, r16, &(0x7f00000005c0)="e1caf51f66278a5792968288ca0ed76c8978eaa6986d4395c3b278e86fdcd2bcc91bcfc87f08ef8beb59980626fbcba3ad25f1af92b03fc4f7e6d0a96d450703e063a766273e6d6f7dd7b39d1c4cc3563e2634d27b5e857b5e28e29b13c3caf84b976a2349508f4d6d77c9b92a0e09233dad86078bdd629ff8a608104d28465ee9c54c4eb6112a809c5a32700140ee83de222821b60ee629", 0x98, 0x0, 0x0, 0x6, r17}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000700)="1fe4a277d6cc48d039ddd00081c7f61077a34f94308aa5ef86f6a123ecdac0d1ef707f7166e863f91a06c1875c3e439863a4ff107d71b86f02835ff3defca4404f7d63e2ac202e8ca507d5d3487360dc208931025bffa8444e8cfd17e4c24fc48a5c992795d4b995cf71025abb03a881514fed065d4a9483f432cac2867f9caeb977763fbcfff2232c363e5794afe640b894717fbf2364b04289cd906278c056c1bb41bd7e3418c47c5bc4c47b01a079c9bd195e235a507e65c2547b1d1751a5c61d5e8abd50fc4d5ac3090fbe85b90b7068e74b211a32b2d3db79a2de48f5", 0xdf, 0x74d}]) 14:30:24 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='\x00\x01\x00\xf7\xff\xff\xff\xff\xff\xff\xff\x00', 0x40280, 0x0) r2 = dup(0xffffffffffffffff) execveat(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000240)=',eth0\'vmnet1\x00', &(0x7f0000000280)='\x00\x01\x00\xf7\xff\xff\xff\xff\xff\xff\xff\x00', &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', &(0x7f0000000300)='\x00'], &(0x7f0000001440)=[&(0x7f0000000380)='\x00\x01\x00\xf7\xff\xff\xff\xff\xff\xff\xff\x00', &(0x7f00000003c0)='\x00\x01\x00\xf7\xff\xff\xff\xff\xff\xff\xff\x00', &(0x7f0000001400)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00'], 0x400) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r5) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x100) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) flistxattr(0xffffffffffffffff, &(0x7f0000000180)=""/80, 0x50) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080)=""/39, 0x5}) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0xdda3fb2558a1b88, 0x0) 14:30:24 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x40) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) 14:30:24 executing program 0: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x3) r17 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000680)='/proc/capi/capi20ncci\x00', 0x0, 0x0) io_submit(r3, 0x7, &(0x7f0000000840)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1ff, r6, &(0x7f0000000080)="4241d37e7381736f123769baff6e1291b32198ba16befad0d3e8345804ec96abadd4cde0a943d9a3a1980d60b91b5447f8ddd957c37b7c65a46e04f90df6cf6c13f8a3cf2b1a97365f0d3a8cf3f71439ca9593b9b0ed2783739937a9705e3e3a768f3c0b0240780faf723bd7903a3f11fa201803f1d06105cd9deb62d5766e8ecfc15fc5bb4ce88663441cb5407af2cf0644b3", 0x93, 0x50, 0x0, 0x0, r8}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000180)="5e7a92360a530cac4e183d1e89e6e3dab25d5fbd5c7a4aacb747f952fb3df4441d0279cba369f78a36a6b8368353b2bb1396e14582b4c6f31ef3416d5286ae3d1971cd2461e32d377681635b9a26e3dd6a4de4a4fad633ee40330fb91e1dd9ce642c292cb536df7a82f05af24f691fd7bd6ec61b7ece16e4363358adeb0c738ca378eb92dbeb957226878ee3a0843f9a9c4547c7d2008d688b499b094e3678cb9d90da5fc1a84fab7f2a2c11e0f188058d0fe6d57cdbe1638c9875c0ae7c9e7f66561afa2ebf7be875ca63", 0xcb, 0x200, 0x0, 0x0, r9}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xe643065ee2922a7e, 0xfff, r10, &(0x7f0000000380)="2585261c85eef02012c563d92f9eacc3", 0x10, 0x370b, 0x0, 0x56ecd5719b1cd605}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0xe4, r12, &(0x7f0000000400)="8dd9313a89222e24395d1a04d67c7c0f29332984063ef202cb904a5ddfbbfa945018d82582b8cf8c6aafed7743bf8bf96a0588084421f671d0fd29d0836d155b72c81fbbbacc62a5e4bf927aa0d675ead942b4a58989f075d4ec098df198c0c7eed0cae397a9a6db8c42427034ba4cf4e1bdcc52ca625addb7cd338fe82633fe3cb9acd451b9d70ffa4bd4af162e0fc1bcec8d8b260a95cf5dc46c9879929b6e237ebd412ae1546a27fe625549ee8b3992ecf431a14afd4bb014330595ee63f3f4baede1ccfb9b410079de9f65ed56b84dfd929582f73ee6bcb12003cb0f03d177a8012b0c3571f1c9fb570f69700aae946b634c98d0", 0xf6, 0x3, 0x0, 0x4, r14}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="ce67082b83f0707954bdc92b4f682fe32eb0a37f0e0f6ec633b2", 0x1a, 0x8, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x0, r16, &(0x7f00000005c0)="e1caf51f66278a5792968288ca0ed76c8978eaa6986d4395c3b278e86fdcd2bcc91bcfc87f08ef8beb59980626fbcba3ad25f1af92b03fc4f7e6d0a96d450703e063a766273e6d6f7dd7b39d1c4cc3563e2634d27b5e857b5e28e29b13c3caf84b976a2349508f4d6d77c9b92a0e09233dad86078bdd629ff8a608104d28465ee9c54c4eb6112a809c5a32700140ee83de222821b60ee629", 0x98, 0x0, 0x0, 0x6, r17}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000700)="1fe4a277d6cc48d039ddd00081c7f61077a34f94308aa5ef86f6a123ecdac0d1ef707f7166e863f91a06c1875c3e439863a4ff107d71b86f02835ff3defca4404f7d63e2ac202e8ca507d5d3487360dc208931025bffa8444e8cfd17e4c24fc48a5c992795d4b995cf71025abb03a881514fed065d4a9483f432cac2867f9caeb977763fbcfff2232c363e5794afe640b894717fbf2364b04289cd906278c056c1bb41bd7e3418c47c5bc4c47b01a079c9bd195e235a507e65c2547b1d1751a5c61d5e8abd50fc4d5ac3090fbe85b90b7068e74b211a32b2d3db79a2de48f5", 0xdf, 0x74d}]) 14:30:25 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x4ab, &(0x7f0000000140)={0x401}, 0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:25 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x139, 0xa}}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r6) r7 = dup3(r5, r6, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000140)={0x20, 0x0, 0x5, 0x5, 0x7}) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, r3}}, 0x30) 14:30:25 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) sendto$isdn(r0, &(0x7f0000000100)={0x7, 0x9, "1b39515f62e0f88662088277e3cf0938d3963659ce59734bee60f05c90efaae8c70ed4caa0a014a5a2aee21e76057a765be3ff263e3ae61c381ab347e12e99c706ecff6fa89603c98a43c4a632a3414c9935e7a5933104883c7c7f75f5d7ccdc325551f2cc625d09117142ef0241d1"}, 0x77, 0x40000000, &(0x7f0000000180)={0x22, 0x3, 0x4, 0x0, 0x2a}, 0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r2) setsockopt$sock_timeval(r2, 0x1, 0x84, &(0x7f00000001c0), 0x10) clock_getres(0x7, &(0x7f0000000080)) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x2) 14:30:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x3) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000680)='/proc/capi/capi20ncci\x00', 0x0, 0x0) 14:30:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x3) 14:30:25 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r1, 0x4, 0xb, 0x0) semctl$SEM_INFO(r1, 0x4, 0x13, &(0x7f0000001400)=""/4096) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f00000000c0)) 14:30:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x10, 0xffffffff, 0x10001, 0x9}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000100)={0x0, 0x0, 0x9, [], &(0x7f00000000c0)=0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) fcntl$setflags(r1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r3, 0x10, 0x0, @in={0x2, 0x4e21, @multicast2}}}, 0xa0) 14:30:25 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\xe20\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="741db23d97254c8911845321e76b2ceedbf91e423bddbf5390a8af2379537d917ec0f200ac56e8a469fb42e40b296a96b8f8faab16c80f907c69a31402a60709bf77ba4a1b76107ccd82907b02bb533aad65343db0dd3c6fb6b34ba9ad02f609faa1af87f72cafefab1c51abec04ba", 0x6f, 0x0, 0x3}], 0x3d2b07ec1a9b224a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) preadv(r4, &(0x7f0000000040), 0xdca1a3ec9962a19, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x60, 0xfffffffffffffff9, 0x1, 0x8, 0x4, 0x379}) 14:30:25 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:25 executing program 3: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:25 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f00000001c0)={0x4, 0x3, 0x9, 0x4}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x9, 0x20, 0x3, 0x5}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r5, 0x5, 0x8, 0x0, 0x6, 0xd3}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_int(r7, 0x29, 0xce, &(0x7f0000000180)=0xff, 0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:25 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) 14:30:25 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/254, &(0x7f0000000180)=0xfe) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) 14:30:25 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000240)=""/125) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000040)={0xb, 0x80}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/215, 0xd7}, {&(0x7f0000000180)=""/18, 0x12}], 0x2, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000001c0)={0x7, 0x4, 0x3, 0x7ff, 'syz0\x00', 0x46}) sync_file_range(r1, 0xffff, 0x4, 0x1) 14:30:25 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2400, 0x0) 14:30:25 executing program 4: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\xe20\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="741db23d97254c8911845321e76b2ceedbf91e423bddbf5390a8af2379537d917ec0f200ac56e8a469fb42e40b296a96b8f8faab16c80f907c69a31402a60709bf77ba4a1b76107ccd82907b02bb533aad65343db0dd3c6fb6b34ba9ad02f609faa1af87f72cafefab1c51abec04ba", 0x6f, 0x0, 0x3}], 0x3d2b07ec1a9b224a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) preadv(r4, &(0x7f0000000040), 0xdca1a3ec9962a19, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x60, 0xfffffffffffffff9, 0x1, 0x8, 0x4, 0x379}) 14:30:25 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000080)=""/1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 14:30:25 executing program 4 (fault-call:5 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:25 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180), 0x0, 0x0) 14:30:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) 14:30:25 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x80001) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) [ 406.970878] FAULT_INJECTION: forcing a failure. [ 406.970878] name failslab, interval 1, probability 0, space 0, times 0 [ 407.038038] CPU: 0 PID: 20914 Comm: syz-executor.4 Not tainted 4.14.146 #0 [ 407.045109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.054484] Call Trace: [ 407.057095] dump_stack+0x138/0x197 [ 407.060749] should_fail.cold+0x10f/0x159 [ 407.064926] should_failslab+0xdb/0x130 [ 407.068930] kmem_cache_alloc_trace+0x2e9/0x790 [ 407.073633] binder_inc_ref_for_node+0x1ff/0xba0 [ 407.078443] binder_thread_write+0x11db/0x2200 [ 407.083059] ? binder_transaction+0x5e80/0x5e80 [ 407.087755] ? __might_fault+0x110/0x1d0 [ 407.091842] ? lock_downgrade+0x6e0/0x6e0 [ 407.096017] ? kasan_check_write+0x14/0x20 [ 407.100284] ? _copy_from_user+0x99/0x110 [ 407.104459] binder_ioctl_write_read.isra.0+0x189/0x860 [ 407.109852] ? binder_thread_write+0x2200/0x2200 [ 407.114632] ? _raw_spin_unlock+0x2d/0x50 [ 407.118810] binder_ioctl+0x2fc/0xfcc [ 407.122637] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 407.128199] ? __might_sleep+0x93/0xb0 [ 407.132098] ? __fget+0x210/0x370 [ 407.135577] ? binder_ioctl_write_read.isra.0+0x860/0x860 [ 407.141146] do_vfs_ioctl+0x7ae/0x1060 [ 407.145066] ? selinux_file_mprotect+0x5d0/0x5d0 [ 407.149838] ? lock_downgrade+0x6e0/0x6e0 [ 407.154014] ? ioctl_preallocate+0x1c0/0x1c0 [ 407.158446] ? __fget+0x237/0x370 [ 407.161926] ? security_file_ioctl+0x89/0xb0 [ 407.166356] SyS_ioctl+0x8f/0xc0 [ 407.169768] ? do_vfs_ioctl+0x1060/0x1060 [ 407.173935] do_syscall_64+0x1e8/0x640 [ 407.177843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.182716] entry_SYSCALL_64_after_hwframe+0x42/0xb7 14:30:26 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000d80)=""/142) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000c40)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e24, 0x123f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x87, @empty, 0x6}], 0x94) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x14001) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x90, r6, 0x21, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x74, 0x2, [{0x300, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0xfe8c, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}]}}]}, 0x90}}, 0x0) r7 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r7, 0x7, &(0x7f0000027000)={0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000780)=0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4820000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002c0000032cbd7000fbdbdf2500000000005f28d51683236ee3e66909718f8a094df08cfdbc43292e46578b9dd91e31b9c4c295cc23249adf00"/72, @ANYRES32=r8, @ANYBLOB='\x00'/12], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', r8}) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r14, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="80010000", @ANYRES16=r14, @ANYBLOB="02002bbd7000fddbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="6401020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400060c00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e55626c656400000000000000000000000000080003000600000004000400080006cc", @ANYRES32=r11], 0xa}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x3) r17 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r18 = ioctl$KVM_CREATE_VM(r17, 0xae01, 0x0) r19 = ioctl$KVM_CREATE_VCPU(r18, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r19, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) dup2(r16, r19) r20 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x200, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r20, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x3, "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", 0xb9, 0x4, 0xffc0000000000000, 0x2, 0x100000000, 0x1, 0x3}, r21}}, 0x128) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r21, 0x7}}, 0x10) 14:30:26 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x248880, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000780)='SEG6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000840)={0x0, 0x23b, &(0x7f0000000800)={&(0x7f0000000500)=ANY=[@ANYBLOB="053ebf2f28ef0c460f2e50ca14000000", @ANYRES16=r3, @ANYBLOB="ff9a000000000000000004000000"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_KVMCLOCK_CTRL(r7, 0xaead) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x14f9e7f170f3588f, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xa9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4014}, 0x1) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:26 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) accept4(r0, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80, 0x80400) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0xa0802, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 407.187921] RIP: 0033:0x459a29 [ 407.191122] RSP: 002b:00007f8d66f13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.198869] RAX: ffffffffffffffda RBX: 00007f8d66f13c90 RCX: 0000000000459a29 [ 407.206151] RDX: 0000000020000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 407.213435] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 407.220722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d66f146d4 [ 407.228003] R13: 00000000004c0f6e R14: 00000000004d4270 R15: 0000000000000007 14:30:26 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000080)=0x1) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) [ 407.290011] binder: 20911:20914 unknown command 0 [ 407.338376] binder: 20911:20914 ioctl c0306201 20000000 returned -22 14:30:26 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4b, 0x2}, 0x7) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7e0, 0x320, 0x5d8, 0x4a0, 0x0, 0x230, 0x710, 0x710, 0x710, 0x710, 0x710, 0x6, &(0x7f0000000080), {[{{@ipv6={@rand_addr="6ff2b03cf8f479aa8c28865c64f1b0c1", @rand_addr="919761c22de34f429b1dddb609f72c2d", [0xffffffff, 0x0, 0xff], [0x0, 0xffffff7f, 0x0, 0xff000000], 'team_slave_0\x00', 'veth1_to_bridge\x00', {}, {0x7f}, 0x0, 0x3, 0x4, 0x4}, 0x0, 0x1f8, 0x230, 0x0, {}, [@common=@inet=@recent1={0x108, 'recent\x00', 0x0, {0x471, 0x0, 0x4, 0x0, 'syz0\x00', 0x14, [0x0, 0xff, 0x0, 0xffffffff]}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x9}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x7, 0x1}, {0x2, 0x0, 0xa6}, {0x64, 0xcb, 0xf8}, 0x20, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x6}}, @common=@hbh={0x48, 'hbh\x00', 0x0, {0x20, 0x2, 0x0, [0x5, 0xffc0, 0xff, 0x6, 0xfff, 0x7, 0x0, 0x1f, 0x1c4, 0x9, 0x7, 0x800, 0x2, 0x8, 0xff00, 0xe329], 0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@empty, 0x3d, 0x16, 0x1}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@ipv4={[], [], @multicast2}, 0x4, 0xd, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x23}}, [0x0, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0xff, 0xff], 'bond_slave_1\x00', 'irlan0\x00', {0x101}, {}, 0x2f, 0x2, 0x2}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={[], [], @empty}, @ipv6=@remote, 0x21, 0x6, 0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x840) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:26 executing program 4 (fault-call:5 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:26 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) seccomp(0x0, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x1, 0xb5, 0xf8, 0x2}, {0x1, 0x1, 0x6, 0x800}, {0x7, 0x6c, 0x1f, 0x2}, {0x4, 0x1f, 0x8, 0x2e}, {0x8, 0x6, 0x1, 0x1}]}) [ 407.489927] binder: 20944:20949 unknown command 0 14:30:26 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) [ 407.525306] binder: 20944:20949 ioctl c0306201 20000000 returned -22 14:30:26 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x43, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 14:30:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) sendmsg$nfc_llcp(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x27, 0x0, 0x0, 0x6, 0x7, 0x1, "d426203b46b947b76af428eb4e1decb6522c71d4c52831f014c68756f17a647cccfb88fabc02e9f230b2255830c4d7b5abec3ac96677aa5607d3d918587227", 0x2a}, 0x60, &(0x7f0000000040)=[{&(0x7f0000000180)="e195fd77aba0ceda8db25469adeae0c1aec558d96ab9fd17bdd8ea2917aabbab00808c36a237d212396175a2c4ea008869780393f5e745c8376090ea525f53092e35d80c08262e1b0359abca3dc2f4e2f051d83259edca09d58e7e14d92ff1da1e2186fc5c18e9e36eeca323cf7b4de228c5", 0x72}], 0x1, &(0x7f00000002c0)={0xe0, 0x3a, 0x6, "d0b6779cb8d365c10af303b91971d72a00e7d3523147eaae44c6c6f1c9494f23becb97cd0405828708e130e9640a77a45cba49818c7432488f67ea7e10658f2100e951f924ee3ae1ba56e9a326e5d52824bf934d20a0160d852343e8d4d51d8cc52c36705ae5837d0a803ef178ba7d03125fdc2e7fe3789094adfee92fe0db8cd3e70fe4608f0bf1dcbbadf6f83db9748c4ad892fe6a2c265e8d7f639e15d2b9341cd63f9c6ae0c5947b7f013438ad0d19cb9a601965e6e64ff4c3151b2740e6a4017eace4fe71f152c373"}, 0xe0, 0x200481c0}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:26 executing program 1: syz_open_dev$midi(0x0, 0x20000000000000, 0x73b5606b2619f2a3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:26 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/145}, {&(0x7f0000000140)=""/111}, {&(0x7f00000001c0)=""/30}, {&(0x7f0000000200)=""/76}], 0x2a7c2067ba65c5a, 0x0) 14:30:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) [ 407.693789] Unknown ioctl 4725 [ 407.710261] binder: 20965:20967 unknown command 0 14:30:26 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='\x00z\x92\xcf\x95\x00', 0xc4a80, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) r5 = dup3(r2, r4, 0x80000) write$vhci(r5, &(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, "b498ffc7d01d2406cf10a4b7d61f0b037bd5532dfeedf9d76c1b0f7f"}, 0x1d) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000001400)={0x0, 0x0, 0x2080, {0x5000, 0x1000, 0x1}, [], "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", "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"}) [ 407.743719] binder: 20965:20967 ioctl c0306201 20000000 returned -22 14:30:26 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_DISCONNECT(r2, 0xab08) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200001, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0xfb, 0x3, 0x3}}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname$netrom(r1, &(0x7f0000000080)={{0x3, @null}, [@rose, @netrom, @netrom, @bcast, @remote, @null, @netrom]}, &(0x7f0000000100)=0x48) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000180)={0x10003003, 0x7f, 0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001400)={'#! ', './file0', [{0x20, '/dev/nullb0\x00'}, {0x20, 'cpuset'}, {0x20, '/dev/nullb0\x00'}], 0xa, "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"}, 0x102c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x80000000, 0x12) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:26 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x10000) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x23, @remote, 0x4e24, 0x1, 'lblcr\x00', 0x7, 0x3ff, 0x43}, 0x2c) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 407.897220] binder: 20983:20986 unknown command 0 [ 407.919284] binder: 20983:20986 ioctl c0306201 20000000 returned -22 14:30:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f0000000a00)) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000000200)={0xa, &(0x7f0000000100)=""/206, &(0x7f0000000900)=[{0xe973, 0xf5, 0xb516, &(0x7f00000002c0)=""/245}, {0x5, 0xa4, 0x9d2, &(0x7f00000003c0)=""/164}, {0x5, 0x7d, 0x6a, &(0x7f0000000480)=""/125}, {0x9, 0x7e, 0x1f, &(0x7f0000000500)=""/126}, {0x68, 0xb7, 0x1, &(0x7f0000000580)=""/183}, {0x101, 0x8c, 0x8, &(0x7f0000000640)=""/140}, {0x7fff, 0xbd, 0x40, &(0x7f0000000700)=""/189}, {0x0, 0x15, 0x5, &(0x7f0000000040)=""/21}, {0x6, 0x9e, 0x9, &(0x7f00000007c0)=""/158}, {0x1, 0x5d, 0xef, &(0x7f0000000880)=""/93}]}) 14:30:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) 14:30:26 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r2, 0x701, 0x0, 0x0, {0x13, 0x0, 0x1a0ffffffff}, [@TIPC_NLA_BEARER={0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_TOL, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_TOL, @TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_PRIO]}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_TOL]}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_TOL, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_WIN={0xfffffffffffffff2}]}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_PRIO]}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x0, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}}, @TIPC_NLA_BEARER_DOMAIN]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x148, r2, 0xb12, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x219c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb4c}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x539}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x71a}]}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff62f9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffe0}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x1140}, 0x80) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:26 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:26 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f00000000c0)={0x80000001, "f824058c0b891a001daadc4c34cf93bf2db1f885fe94aed2e080913a42e2bcec", 0xc61e45b394bcc29f, 0x1}) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 408.048397] binder: 20997:21001 unknown command 0 [ 408.068138] binder: 20997:21001 ioctl c0306201 20000000 returned -22 14:30:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r10) 14:30:27 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000080)={0x4, 0x4, 0x8, @dev={[], 0x21}, 'ipddp0\x00'}) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x2) 14:30:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$audion(&(0x7f00000024c0)='/dev/audio#\x00', 0x9, 0x1) connect$rxrpc(r3, &(0x7f0000002500)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0xff, @dev={0xfe, 0x80, [], 0x2a}, 0x101}}, 0x24) write$P9_RCREATE(r0, &(0x7f0000002480)={0x18, 0x73, 0x1, {{0x8, 0x0, 0x5}, 0x6}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_opts(r8, 0x29, 0x71, &(0x7f0000000240)=@srh={0xff, 0xe, 0x4, 0x7, 0x8, 0x2c0560b63b37be30, 0x3f, [@mcast2, @remote, @ipv4={[], [], @multicast1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="521ea3083cd58d5dce1d314eac0915bb", @local, @loopback]}, 0x78) socket$rds(0x15, 0x5, 0x0) r9 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_inet_SIOCGARP(r9, 0x8954, &(0x7f0000002400)={{0x2, 0x4e22, @loopback}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x20, {0x2, 0x4e22, @local}, 'rose0\x00'}) vmsplice(r5, &(0x7f0000002380)=[{&(0x7f0000003580)="879196b3efba5536a5bfee32225da1f249fc15b5de870cccb09df7959f3b208c546b73004d141b13b27775c10c361269eca9f5c0a70ff5d9953dffc7adc45ca2872fe7be6f007e411363ed1395712818d8b2a23867ddf76ad9930fab8c3ab2401671b87299f49e5bcb1b57ab15763808727908e3971ed80a891267b3771cfb5d48d2513b77a26e3f44c8f9583c33a750f53b761cd05a61a0e8ffe5d1eb744175a6", 0xa1}, {&(0x7f00000002c0)="2495dd6f5b6ba72bfd57f312cadef485bec12c6657d2e584e148fb9290380a1f311da54809223a56caa8b46fdc6c7e61afff15a1360f0eed9a9b65e046c7bfb9176b9f7230946911a1a5843a7551362276e1299abf172559aaf7fab50090b4a68089995f46128256044057853cd48ddc32c74d66d7f0e1c0165b5d8bd071356a3317f36bee9b5575ac9a53fb1b2b62494c21581939f66bd471c8add85bcf28210f731eab703626fded14d457c7953c44dab7a58c15957153494ee6cc96ba0f4ca8b525e79d4eb69962e46ac32db80d6e62385b3c39d3b244378260382db495d89382dfdf860106ba797f9dcc619f2d891d874031fa6a95f3a6a9561feb165732945399dbb83cadb810f9946fdee802d5527ea647ac9446cc8aedc1fa58f05068235423b1a166878f83dc7cb89d168da6447595d11285f1c270b822edf3fe0d4f7e22dc2f404eab0f40639dc80998a42f7504b394a8d219fd6c3d4d215cfdca24a10f6f92107866a00429d251e8c5ac08419bf57871fdcefbd3a3e817e6eb1ad0c6d84f5800220a0e26d90cc71278165644d72c7fd0072b564638d2571c8dbeca4e4e37e53e4b576bf8dd487e5c1711fa66c821ca7d5342a9757b8978f23966ee8a4aeb90c420b3439530cceb47f6e798afa33b646b825941d3d63dc2b3896be22060241fb94581ffe5c8d6ae5052c6f1af147eef822e8e56868e57a646f4875dd3ab6216a09c1ce30000f307558c8aedba5307a66d207a3449a6ad832a341ea79440b0c9a44e878fc8a0a39f8264bd00051aeac3edc1f2dcfbf6ddcaccb82a3f1dba37a10725eedd6c6678c9fce9d7a28d7eea8ac7830fd0a51dd2f834b0c4a18768167e729c58d8bf98a3a5f34182ab6d9da100cb1a9798bea972db74231c77b1f60ad2e4ef5e7efae9451e27f5d9b46c2bb99620c0db2279c64b3d5c7b8ab7fcc912a2d10729a2386fd2926f42e769c148043776f3f1d8f5923c8f90df6e163abd4e5d9e0a2f7570c3e26168d4fa7d49e7d6bb02fa8be65a889cbb869d6b9433039e5690cdcca6622cef76b81f5edcabcd3980eee2679072037347e4764fb3058324fcfd05d7057bdfe61f3b83386115783778ab11f06632e7cc8ac264d932a3df3ba5f423b9dc18b46ada3c38a280e0ef7cea9c5792bf1229d9d154183d5083e4f971c4f37c6c5c98c33f69fa4248c65eec310b9d199487c28563e0541c6bf52759a3c6743b20c9398db1e0368616202eafc313b869e3c68093fb9544aaa500904e426653aa1b753a610ff202c961ec47c71c58d5b2cf361cd6391c344557d7485bf9e4cbcf1b85168f55d500abffbbb05dbb75eb0496df85912f903966887830db14b0dd93f601c8e425553ce8b0b13035c05a6d06031858dac84c83a4c055993fd6dd0c08b1c06750af339df3b06c60826f5ebb2412de35830c0477e9ac2be3b377cb464e606ebb81d05ff571b57c274da1503fae4c800557d859a271c2ac0009fc995e558596fed21480aafd89d6de44a7274e648cb256771e64a71ac3e1040e35301d567887e9d72a231a09ec6501d47ba0534903fbb33f0933f15715f329748ccd288019957acadaf06a41d6bffdcdc7c341a885c777bdb8e5ffde1a56d0f854119a483183692015605245afbfea543b04582fa51152052ec81d41e71c24e8cf4147b31e35aee6d322f4d6d3d5c1d2227cf49b7539580fc3059aa23368d22fcf57cdc3c32f832a847112e5d3251930a72f4775519f74a4594971b49aa6bb031aafb9eb00ec5d7702bd253711ec0e2f6096b92e81780ba4ac2bbe54ef797f025376875d5d82b0c7f24eebe0abf52f1b2a6bbd1e43f2ab4a12afcd0bac73cb84ecac7fb51e0f6366c0ac5320bbaa82bc0bf62444b00e33b959b1ec3e318c7434d474f3f4c7b8a2cd303dc284c6911a85fd1897aec97cfa30bba072cd0f6f89fdd1807758c5e3e1d27b8d6c536c8e2aa21f9ebd8eb30061048c3fc99de4b6fba2c1ea7c1dc13a3151f9f08880bf0ad3bb94aba45a5b5b5d3b742d9da3c893b85b182f81c58b3ed4926f280a6508450855f46c5adc3ae1ba11c6273f60ccfa2f649997b81465aec709f0fa8cb0c26218954288c0b08944c27fbfc91bb7e564745c97fada62ea8c0183975b12d3a1e16ed75cf06288211dc3979436037c0f594808142b66d5b49808617aadd7bd10a0d73a773f7a1e3de213e0572cb57458dbd044cb07feb3200cd6d0a04f987dbddda98bdf59b282cd77ea2bb24351147554ea589a17fed605175ee3edf6a49daa910ee492909906d2fd3bafd1a7276fb0a94492504466f71c84fecb8fb111284a36bd2b4d112fc3d9ca3ab92b1dfe2fff6d97263c7ef34325b2d37585363c5273c3faa2c90f4f08d017b150b6a10b4b61c41909ebb2021ce14532875e8f378908c96834fb6c7884c13f7ddec66080205832ba95231ded7471b5ab950130691620c9c7f628da3f3edcdc6b7feff0d9a707935a6da7ddd1f285e03e01df98407c5d7834f264d8df110eca76d0b8b060f02a80743c922f4bb49df9efc5ca3d19a3a380bdcf0396b9880dd651d02b6b8508c7db0f0ca8cb6714500a26e3cfa69245023e4dc00d98516911889a710c7874127c505395b030191203322478e1c33b9945b36f2beeede9d77b620084834aef53467f4f10bc0b0eab4b94172994625a1aeef68883c42efebd87d264dfc46ffd0e63aaeac7ce107a5dbdbe9c15bba9d8cdc64ed33d30fb667f3db9da8129a21c60c3a351596b2c2771746ddee8f7cf17bd0317c073e4e28e7926d1dc7c4917218360cb99dc75ee27d15d46f891c739b572c53e67a212f86b32b4edae83d4da33e0aca075d3b937d4cbce4ecc1b6b89e1a4f700780d2e6570787098b2da4eee184b372c4d912ed9057cb5d65e2f2cd1dfe2b5b5be49cf01585619a53ff81abeaa747fde6278e1c9bdf9e9d9d08135c5023d1d2c8ad61698c5f3c5136d3e79122f53f68b82103fcd616c21f7ec0fcda3724e7567dd5419478b2ce5a41493503db39d2166d032c28223ec538abc488d98755629fb18577137b8e5695c34ee640ca1d4382bd99b631b5ab331e0ae35248f76fcc184b6c1986f5f12db7a9b45a09b038b5094c5be69e33fb793b30ec4dac3ba1a37c8bbb03c5923cb0f1fffedcc8a5fb0c3d514fc22b689b5e8d67b210f9a5c877a7d4f97a7059f39faa77db5bd144be4369f09a25c3e166962b35a45a910582724d15248493f6e111d4211c7be359930adc8182a5de5077bc3d25ccbe43aa01b68197180198c683d06bd9fc664283d586676f53c279562d97672d8f98d3ddb97e8f0930d0de3fa260f0aa398775e9f417bf909f65606889e9acca6c7ab21f000452b7ee6e81edf6f3697c8a5bf2e939dceeaa46f8465fc2925d56aded16ae1571edf36d4c87c0b31c3a55be7b312a13c313808c022d84b08f08f3f0495f652a31386ece633b4856c3ccc51bbae98a2f34d151967f1b2816345fff27c09dc34493ebfc0b3ab53babb1a9438920eca17019a86d978bb4b056e602649945026a44da64c59d82a207311884db63f900da8c03165451ea822635cf896bd395f95e211320adc3a9ec2bd54233c3584e7c6711bcb762bbe7570b1e27efc2a0897d5f29d476d3bfc0ceb5e2d4da04fa6e305bd01e602f5e76e405ec584fe4f6700199b0296ce19073593c816c625f5acd3c11e87375ec44d45e2aec974dc250e2259029742f407375bc67ef8374ca7f5b6c46c282d93bcacc0ee9b944695c7f4769e1049538d337370ddbb16ce64cd859c7bde60358058189e8576f40a932791adb650be69bb0e1f59e8cc101c5dceb916c449482f95962bb39520a66329db1f5e21e7185a2a6932af7ddf6708599343b9bd7956b00ff18336cf3f0e46d6dcc52a842040fcb3dd4aaf73316eca9514ada0f1fbdd7980e7bcf485d3a5f13783dacf070a6a44e826de8d08353ed693dc5dd4632032a6f8c9451dde7a510831001048a1e1a8e387266818983bc0027ee9f793f686b6735c6a5db296a14704c8c25e40408d387e359a9ded0d7a596d01b40c7b4bfed2a19f7175454cfc2aca216a9fbd2be943598aa60d8cb3f3cb0b85a4e444bb89af5f5b1e651c634142cb93188b2f56dfd5419f13d539282ba151e65b2c1cb3f677c048c95a08d3b63288a75e5bc37812c751c88e65fb99ac85feae2c9eef4cf8cbb872b26525e18766ddc2257ada07c48f73ad7c7f4a9204573e2bce9a4df2beb602fe9aee97aba6043c723864ad9b149736e6e3b900410003b4a2be90d8cbc1527805730023fb7c21fe0a99a9a4f2950f6465661b707af10f7143f2327371fa577f5e4f17900f6b7a3ec910e53909ac5ff166ac7498d89a95e541c30fda60a37c2fbcffe1b31d069ce64b12391e38442d02cc34957d26a82a95ba07526ce800bf9dc35342bf506972ef2a3b13a25e5c31dc7dda103803a0206700a652652e47b4b985491b7d3d9672c7368e3bb93659d11d9a582b517b918fe31a39fc90ec58c5d83787811698eeafa0a14d5b45b8b68d46d94fffedd0e97c577d53311de2004a251515d448a962216224bc4ef8f2e33bc0c0aa0e2ba4dabeb284b8db3e472ff222305a3c6ee6274aec062044395e3b114335710bcb53c175690af7d4df8cfc49188eff823f76360b96db346b47288a2a0e8724cce9ef0c987fccc4b06eed3bc5a4fb911ab0912155384d6251535b895582e991fe94707673d4d10ccaa2b3605c6ee3eae244d8e6e06bc206ee93fba19f2f0d07af55e58cd131fbf9b32b1a16bdadea88291a51cb99611995d75a765245a7c4a2e14af48e4006cc880f77c3900329a5c3f7eeb354a9516710eef447d72b3bdfed61b4b9fd98f0b12d22313fedcc2e87f70ac2f2c29557a5787a3c1e25d6fb72d4748f91f15bb155aec8a6438a572db84f944beafab49ec21c115d06255ad5cc22a2873b756ea70608000a81a24296de25c7716de6a552ca0fe7321e1d7191360693659a87783148323df830d6fc590d907ade8185491cc765ba4df2534d12a6f4fb1becfb35b9c37a24b73ff4439dc0ec49ae7056e95ba4469eb8337dae73207bdbacb5e95f8107e8b04311118c531dd729aa3b74b2e60c35ba65b64b9643529dea2444db9a832a52dfb9554d19a4a20d2baad2078bdccba59ea6c1297a231306f9a30c613ddd544b094854ced2a4f6db33f0b56fcc0916b1c11923228269d51a5bcf894839ea1577ea4e97c306e73bc1a17ebb55e4e403ea4b5a766cf098621c75316a1d574f5ff8e5623dddc29a4fb493c4f804e185ec695027037566d507c88798ec0b61b444158240a5badedf1ee8a0df1ead3da43641c2376353bfddee0a764202fccabf8cc7a0d48ae4f5a918b71d2c544a28197ea477f5aebd1cd5a90c7e4ac8feddc770f9839d4d3c7963287b3ca47e0d5d5a761172169b7ab40347ce18ee892f086d147f85e6e8259fdfcd5de9c1d400d565a14b220f7f2354c2c528a27d6bb0debcdde114476100642542d5dd605b4f7276b7959a07437f5ca1c96ff71bb66b8658a07c138be186cd76b42db68ac461998b3fa59e64d2a951bb35f570a36629439e16e053757980916554b85e33b669b4fbf1030be6ef37f214efea17860b8c87dfdeb71665703419da218c36c7fc047e70e536525cb58284863c30ff8853390bad0dfce013b7069e0c98ffb73bec955dc9c4330ac917d0f6becc7f9c59ddb69eefd1587301252f8146d5f9cc690498536f380603befa60df677d8d46af1daffb7d0000000000000000", 0x1000}, {&(0x7f0000000100)="7d9da0e4815789c2a7114586ca02771aecb46463761cfcb2a40359b6d5e561c283494c311e97df4452e57b7d62523f072402b5cca5229800"/69, 0x45}, {&(0x7f0000000180)="af120a193df0c95c910935f0db4dd9fb861d1c8e131d6771a0c72b9f3f35460890f9edf18fda6c7324e2a173efe8b0765efd6e935f9fab17190f4fd3d1450ac010c3e4033edda30f51ecde4ed0bd603309dc94221a95e98d966853847c5dd78eeb572de01a3042283ae1d3bbee7fa72a87267b626f21b4f72042215fcf1603363a707427f3cf408325807241af82a28c1eb831806dfe57afc19ba2", 0x9b}, {&(0x7f00000012c0)="ea6e15c8e4634a2a37865ce8b3681d69409cbcfb2f1b11523fb3ff35e8e6186e4e31e6dbf29dadd64474a731e1b567c1fc44a1862f2d26aa20255890eaa525ae7f4777bbff9d9e5142829fee0e9a1ed13c88f802cf8d4e028d16cd7266afc20fd189d023e07d3c9fa6357c3a8655e26ed7baeb7f4762f1e954b08a65eaa601a697790ddbab24254bda51ae6c498a84ec95ff67d3cb20c29636dc0b5bf6d5ed31e818a70a0000000000000000", 0xac}, {&(0x7f0000003640)="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", 0x104c}], 0x6, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) [ 408.117889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:30:27 executing program 1: syz_open_dev$midi(0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:27 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0xffffffffffffffff) 14:30:27 executing program 3: socketpair(0x3, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) r6 = getgid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r7) r8 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/context\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, &(0x7f0000001840), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = accept4$llc(r2, &(0x7f0000001540)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001880)=0xc4, 0x100000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = gettid() ptrace$setopts(0x4206, r16, 0x0, 0x0) tkill(r16, 0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r18 = dup(r17) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f00000015c0)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000016c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001800)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000140)="c2a0dfc27c0e4a6637d8f2847e801379b8c1ba2f688aff40b3321b362d6a0bfd7a019f3e5e6db8072089e9e55ec5cc6ad95a7302c062252104f1ea64929b409b0c0f7fc18375abe0f208c2827a6b40992259b9778f4f8514b39c731dc35faa6b9b4f6ede70ad25102e150cc6290aaeca82", 0x71}, {&(0x7f00000001c0)="66d7ff4b03a2e9d2c470e4ce4b7fc5d3a2abd5d132be44d7d8cf3e91ca0861e6dfb713c7192c8545ff69936652f7f6d03b0476c34cb36254de3d985f97355c01abde9ded6a86ad85c1cc97dfff2e31b952b2d0860c922171f6c25c5dfe5e332b4c26110a15272da3", 0x68}, {&(0x7f0000000240)="d8afe113fc5ba6e725b04e69d5e956b1f4ea37c79d5056d805c62af1b39f5e90e29488a1453da12eb0d6dea884fe23aafab4da2e23c376afdf4fa318a66dec6d3b57be30fdee494bc0f88bac75dff4772eaa9cfec1443868503e93810d636283b68ccc5ff2102ff9b125cdecee055e6bfd77cf45e49cc0953c8ea7862cf9f4e8cce40aeb155b31623378155c0d8d33b9b4", 0x91}, {&(0x7f0000000300)="f739f746042eb209b3f1a0a081b0adb20dcebe0a5b76fe8c209abb5534cfbba678698f53a6a458358e7e2ea125cd21862adce3dd3c310551c58f1f1c4abe4271c93e4c3b1244cc176d52e7d051883eddb556310314c018bdb6c147a7728d769b1615e6eedd85204c4a6ace8560355890633966a225482f00abeb4c3fb3eeaf770b206132f3aecb4e8680c6a2e6c37ef7f44e49dcd79975fcd1343098", 0x9c}, {&(0x7f0000001400)="74fe1c2910e18537d3a3387b60b1c0ea46b88e08113a75e929cc026c42d59d7dad5468d8530941da7ad14380ac34955be102bd9f88eee5291716081ba6ffd0d17d3fc8459cfdf371d79773efd02d9e5692", 0x51}], 0x5, &(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r11, @ANYRES32, @ANYRES32, @ANYRES32=r13, @ANYBLOB="14000100000001000000", @ANYRES32=r15, @ANYBLOB="000092b532d600dded0000010000000200000052d2bf02a88986dd9e3922b725543f14440570d62ac117e0fdc0500743b2dfb05499953766c455040000", @ANYRES32=r16, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB], 0x80, 0x10}, 0x1) r21 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r21, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x125}], 0x1d0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000340)="c04346af8cd8987adc2eecc6f7a4186845b56e1641920e09fb75711b07505f97818930c15552e36302d7ea0ff89454c6beb58e594ea90f15108d77f9023880113ed4da76efd099b8f66aceaab0be978555add799b09af4358fd9891479db2703d8a6c5e8fbcbd7eff5799e6f5c775b88589f") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="046304402100907b63ee6a6400000000000000000000000000000000000000000000000000000000000000000afdffffffffffff00"/84], 0x167, 0x0, 0x0}) 14:30:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 14:30:27 executing program 0: keyctl$join(0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4096, 0xff47}], 0x1, 0xfffffffffffffffd) 14:30:27 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)="61710970a7399a1651cfc50ca0364d6370b9dbb464f90492c9c98df9c784431dfe4ba0cefd8deeb1dffdcba11cef5ac8832f9ececb80fe863af0ef09d0e8a8f595b485720680db8726a033b22dcf986f76c61fa7c2fbb77c1e5b7275376f7a01bab6db8f53c958887847496f5fc2b791dd26b52ae3f04ba898c62832ef071df77356301a6d06fab759484732b742b932a7fd840ed4f702426ed3ca379dce10a25bc3002e306f86e63c92700c580e5bf219c0d5b91aead7b779bb591fcba7a318629ad236c69074f05611df1899fb943901c8", 0xd2, 0xc0000}, {&(0x7f0000000200)="6dd7c30a732fad905cb2dd8e11ae16079b4cc0da0ad265c0a991aee19c3a858218d67b5da44c6aa5a3bdb932203e61d4235389fa64abf9fae876fadd243f9ef12f85566b4175d8b400cfecb76cee008429e12dabb9cdf9863aa9a04e4dafae7fcfea87ac1735b09f9e53dc967b9a746b395de908413b95b17a12881c5c997dfadf56ecb846e1e34291f273b069d5b7b68d8f1f33f3a3c5aed5278b436112f32b4d2f0db3b2b189e4d02448ba8ddbd43fcc9be7f966ded49f922b2a7d517ec417ec4fb6", 0xc3, 0xfffffffffffffffe}, {&(0x7f0000000300)="b9a8bbd052f2ac621d604df8c9cc002b472987835286f360fe407551533ffc165dcd659d48db7c491074fb73931ef88d7d08a95e2a311ef1faac29d36c3dd67400a3e2d22b755f227ff19800ced0c73788c5c155aafc24fa23050b8a3f53fb646e", 0x61, 0xc09c}], 0x1a12004, &(0x7f0000001400)={[{@case_sensitive_no='case_sensitive=no'}, {@dmask={'dmask', 0x3d, 0xd7}}, {@disable_sparse_yes='disable_sparse=yes'}, {@disable_sparse_yes='disable_sparse=yes'}], [{@subj_type={'subj_type', 0x3d, 'nodev(em0wlan0g-ppp0\''}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:27 executing program 1: r0 = syz_open_dev$midi(0x0, 0x8001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4$bt_l2cap(r3, 0x0, &(0x7f00000000c0), 0x80400) fcntl$setstatus(r4, 0x4, 0x44000) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000080)) 14:30:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) 14:30:27 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0x800, {0x0, 0x2710}, {0x5, 0x5, 0x7f, 0x8, 0x0, 0xfa, "7fd2b9b8"}, 0x1ff, 0xc64490b8676a3e4e, @planes=&(0x7f0000000080)={0x6, 0x5, @mem_offset=0x422, 0x7}, 0x4}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) 14:30:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{0x7fff, 0x9, 0x3d, 0xdb}, {0x4b70, 0x3, 0x20, 0x1}, {0x56, 0x7, 0x6, 0x400}, {0x200, 0x9, 0x8, 0x4}, {0x8, 0xff, 0x9, 0x4}]}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x3, 0x8001, 0x5, 0x2, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r3, 0x2, 0x4}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 14:30:27 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) 14:30:27 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/de\xb0\x9d \x1d\x80\x00\x000\x00', 0xec8d4440ec8e369f, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x283201, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000100)={0x20, 0x1, 0x2, 0xc46d, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x3ff) r5 = openat$cgroup_ro(r3, &(0x7f00000001c0)='rdma.current\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) preadv(r3, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r2, 0xf4946ced74359d1, r7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000180)="459fa5eaedb2bef6d0ec1aa1ba7131d6", 0x10) r9 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) write$P9_RCLUNK(r11, &(0x7f0000000140)={0x7, 0x79, 0x1}, 0x7) [ 408.654331] binder: 21069:21071 unknown command 0 [ 408.664893] binder: 21069:21071 ioctl c0306201 20000000 returned -22 14:30:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 14:30:27 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) listxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/4096, 0x1000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240), 0xfffffd2b, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$unix(r3, &(0x7f0000000440)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)="e5ce9b8f5bfb74be63d530a1778fe93bb86cd9cec722c809678a7966b25266a5b196cee917f14451dd8c4133a614801c39df57bb021e107aec2ef09e84b395dbd5fcb8b0a1ed736c104c038ce1254f05ab3bdc636562a99a4beeee54cdb45960279bcf4764fbc603343bb115f0e3ab8097744c72e5b1a345f21802cdec74f9006a61bc5fbb9866993b7d4755b7093116168ff146ef65f4eb2da52196bddaab4f08c5d3256d9df14ae934d687d8", 0xad}, {&(0x7f0000000240)="027b81ccb8a9ae728c1ac9a7f416abed21db32f32b876f09d32106a0c16302ed8ca06a1db6103de96b3047e04b5098163045a38fc788332652b18057c7d4995de028c98f10b3c7e9f3509332a49c5e57d7751131d192da4f384ddb29ab3c0630b67eca1f2d1ab5667b45c61dc509796641b66e1b1c2af66eb4ca1740f2124645ae7321fd73a01ac96971422105cfa309e63c490b118f82350632f996d6", 0x9d}, {&(0x7f0000000040)="67a7403a4b48fa601f1541a952d96890154f51598a0e23ee7039507125a4eafbbe7a8b8df13cfb73ecf81da97564", 0x2e}, {&(0x7f0000000300)="972268856fe8f6c0ccfa2f097af2abecc51000dbadecb5c98dd77850822d061adbb3c55de9ab1b07977b5960fb4af1c2b8799f82ea3d4f6fc9ccb37bd987c2ba7505dda92e29cbbd275005d005d7cdc92ecbb5ec2c63f71b8d8c0a6d5127ef2c0aa384a8019a59ff62e26c", 0x6b}, {&(0x7f0000000380)="85a82b69eb184b26b5ddce90ea1cfb2550915557831bb9ddc5a63d368b0552f3623fb010da3e33", 0xfffffffffffffca4}], 0x5, 0x0, 0x0, 0x40001}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r4) getsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x10) write(0xffffffffffffffff, &(0x7f0000000080)="d130dfa36ae4898ed0d2a1ae330d02ccb14c6b96f2e1f557090341217b83", 0x1e) 14:30:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000140)=0x80000001, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x40911c9a7623b058) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x4) 14:30:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r2) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x490140, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$setperm(0x5, r6, 0x2) 14:30:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 14:30:27 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) 14:30:27 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x2100c5, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='\x01\x00', 0x40000, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0xc0000000000, 0xffffffff}) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x7fffffff) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="c72856b5be33dac5d4f45edc46fb8fd33d75fc52e851727235515bbea74b49bea670", 0x22}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x4, &(0x7f0000000c40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c}}], 0x80}, 0x6010) setgid(r7) getsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r8 = dup(r5) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0)='\'procr/eXec\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) semget(0x0, 0x2, 0x480) ioctl$BLKROSET(r8, 0x125d, &(0x7f00000000c0)=0x4) [ 409.032091] binder: 21092:21095 unknown command 0 [ 409.048657] binder: 21092:21095 ioctl c0306201 20000000 returned -22 14:30:28 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001300)='/proc/capi/capi20ncci\x00', 0x20200, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001780)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f00000013c0)={0x370, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x940}]}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc73}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3930}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x32a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x12}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x447}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x579}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_BEARER={0xec, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x40008000}, 0x3005c014) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) 14:30:28 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7, 0x4000) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000000c0)=""/249) [ 409.189530] binder: 21105:21107 unknown command 0 [ 409.200240] binder: 21105:21107 ioctl c0306201 20000000 returned -22 14:30:28 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x1) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000180)=[@increfs_done, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0xfffffd66, 0x0, 0x0}) 14:30:28 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x402000, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 409.335811] binder: 21117:21119 unknown command 0 14:30:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) [ 409.363632] binder: 21117:21119 ioctl c0306201 20000000 returned -22 14:30:28 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r5) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) r7 = dup3(r5, r6, 0x80000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r8, 0x0) unshare(0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r9) sendfile(r8, r9, &(0x7f0000000080), 0x2484efcd) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) ioctl$VIDIOC_ENCODER_CMD(r7, 0xc028564d, &(0x7f0000000100)={0x3, 0x3, [0x7, 0x9, 0x10001, 0x0, 0x3, 0x0, 0x7, 0x85]}) 14:30:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) flock(r2, 0x1) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:28 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x80020, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x8000) [ 409.538185] binder: 21132:21134 unknown command 0 [ 409.560380] binder: 21132:21134 ioctl c0306201 20000000 returned -22 14:30:28 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) 14:30:28 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet6(r3, &(0x7f0000001280)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x9, @mcast1, 0x7}, 0x1c, &(0x7f0000001200)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="6644af5fdf0e11ce5fd1e4d9d6f50e412a65af0ad3dcdbaf668474b8dbd329dce8dc77a9a63752d214c421f789c724d663e2da0468a0cb1de0adae78643f3f4bb02112701316e24fd1902f909d1e7f01d16497797685fb76a0e87ea8f389fdb243057422de03859fa09e9a97f4e197b4359fe74e3a73bfba84d0e9c410022ad4e50ca0c242148a8c11420f9121eeb501ab5541e1bc6a225640d0b3f039dc6a5d8531010e42bf7b9f4c15205b54e49b4d72232d59919577eb18c9f348b2bd003cc732d2fb57afe208c147801d95d6da9dcb74645a83c5a390b6666a1240216b36", 0xe0}, {&(0x7f00000011c0)='M', 0x1}], 0x3, &(0x7f0000001240)}}], 0x1, 0x8000) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)=0x0) tgkill(r1, r4, 0x27) preadv(r0, &(0x7f0000000040), 0x82, 0x0) 14:30:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 14:30:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) sendto$llc(r2, &(0x7f00000002c0)="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", 0x1000, 0x4000000, 0x0, 0x0) 14:30:28 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x1, 0x0) 14:30:28 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev\x1bnullb0\x00', 0x200002, 0x0) socket$rds(0x15, 0x5, 0x0) 14:30:28 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r2 = gettid() tkill(r2, 0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61e01cbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x318) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r6}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r4, 0x0, 0x5, &(0x7f0000000200)='bdev\x00', r6}, 0x30) syz_open_procfs(r7, &(0x7f0000000280)='net/mcfilter6\x00') getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={r8, @in6={{0xa, 0x4e23, 0x7, @loopback, 0x6827}}, 0x7, 0x8, 0x9, 0x8, 0x81}, &(0x7f00000001c0)=0x98) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 409.796968] binder: 21151:21157 unknown command 0 14:30:28 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kullb0\x00', 0x519302, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x304) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0xa, &(0x7f00000000c0)=[{0x8, 0x3f, 0x3f, 0x3}, {0xa4, 0x46, 0x8, 0x3ff}, {0x8, 0x6d, 0x1, 0x1000000}, {0x6, 0x20, 0xf8, 0x3}, {0x100, 0x80, 0x5, 0x400}, {0x400, 0x7, 0x6, 0x4}, {0x80, 0x2, 0x7, 0x401f}, {0x1000, 0x1, 0x20, 0x513}, {0xfbff, 0x0, 0x18}, {0x3a5, 0x6, 0xd3, 0xffffffc1}]}) 14:30:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$char_usb(r4, &(0x7f0000000140)=""/197, 0xc5) wait4(r2, &(0x7f0000000100), 0x8, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/Eeq/nullb0 ', 0x200000, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 409.822428] binder: 21151:21157 ioctl c0306201 20000000 returned -22 14:30:28 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x8b802) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x400) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000080)={&(0x7f0000fea000/0x14000)=nil, 0x93, 0x5, 0x80, &(0x7f0000ffb000/0x2000)=nil, 0x3f}) 14:30:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r6) 14:30:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:28 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x80000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x32000, 0x0) accept4$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10, 0x100c00) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RREAD(r2, &(0x7f0000000180)={0x2c, 0x75, 0x2, {0x21, "55cae10ba2e5dbfbc3deb58faeec402b81954ebac9c15bdaba9f1f7c8df7ea4a0c"}}, 0x2c) [ 409.960782] binder: 21171:21176 unknown command 0 [ 409.979031] binder: 21171:21176 ioctl c0306201 20000000 returned -22 14:30:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 14:30:29 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xffffffff00000001, 0x100) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x8, @broadcast}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x84, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffff}], 0x68) syz_open_dev$midi(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000001c0)={0x7a, 0x2000000, "99c53abaa4087dc8ff30658a30ce95d25dc75843562fc837", {0x10001, 0x8001}, 0xdf59}) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000140)=""/102) 14:30:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x260a81) 14:30:29 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x101000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000ff9000/0x4000)=nil}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000140)={0x0, 0x1000, 0x3f, 0x4, 0x6, 0x74}) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 410.138873] binder: 21189:21192 unknown command 0 14:30:29 executing program 1: syz_open_dev$midi(0x0, 0x8000000000000015, 0x7da6a6238688d006) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) [ 410.158487] binder: 21189:21192 ioctl c0306201 20000000 returned -22 14:30:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x4222, 0x0) fallocate(0xffffffffffffffff, 0x1d, 0x800, 0xffffffffffff31a0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001480)="7a2f04655b16b9c38ba0c94aef743e56", 0x10}], 0x1) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0xfdef}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e7148554e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d50000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r4, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1f4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) 14:30:29 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x48000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 410.305697] ------------[ cut here ]------------ [ 410.310755] kernel BUG at ./include/linux/scatterlist.h:124! [ 410.348974] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 410.354408] Modules linked in: [ 410.357610] CPU: 1 PID: 21208 Comm: syz-executor.2 Not tainted 4.14.146 #0 [ 410.364608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.373980] task: ffff888087d7c500 task.stack: ffff888099058000 [ 410.380051] RIP: 0010:gcmaes_decrypt.constprop.0+0x910/0xd20 [ 410.385831] RSP: 0018:ffff88809905f7a8 EFLAGS: 00010212 [ 410.391187] RAX: 0000000000040000 RBX: ffff8880960575c8 RCX: ffffc90012ab3000 [ 410.398440] RDX: 0000000000000aff RSI: ffffffff812ecd40 RDI: ffff888096057264 [ 410.405708] RBP: ffff88809905f880 R08: ffff8880960560a0 R09: ffffed101320bf18 [ 410.412972] R10: ffffed101320bf17 R11: ffff88809905f8bb R12: ffffea00027f8782 [ 410.420354] R13: ffff8880960575fc R14: 0000000000000010 R15: ffff88808fbfda00 [ 410.427606] FS: 00007efdc0c04700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 410.435813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.441673] CR2: 00007ffc72718fc0 CR3: 00000000938b4000 CR4: 00000000001406e0 [ 410.448938] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 410.456192] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 410.463445] Call Trace: [ 410.466038] ? aesni_gcm_enc_avx2+0x140/0x140 [ 410.470518] generic_gcmaes_decrypt+0xf4/0x130 [ 410.475084] ? helper_rfc4106_decrypt+0x320/0x320 [ 410.479913] gcmaes_wrapper_decrypt+0x162/0x200 [ 410.484580] aead_recvmsg+0xf47/0x1d70 [ 410.488454] ? __kernel_text_address+0xd/0x40 [ 410.493109] ? aead_release+0x50/0x50 [ 410.497012] ? selinux_socket_recvmsg+0x36/0x40 [ 410.501680] ? security_socket_recvmsg+0x91/0xc0 [ 410.506424] ? aead_release+0x50/0x50 [ 410.510210] sock_recvmsg+0xc6/0x110 [ 410.513923] sock_read_iter+0x22f/0x340 [ 410.517880] ? sock_recvmsg+0x110/0x110 [ 410.521835] ? selinux_file_permission+0x85/0x480 [ 410.526665] ? rw_verify_area+0xea/0x2b0 [ 410.530727] aio_read+0x221/0x300 [ 410.534176] ? aio_write+0x4f0/0x4f0 [ 410.537886] ? find_held_lock+0x35/0x130 [ 410.541945] ? __might_fault+0x110/0x1d0 [ 410.546078] ? __might_fault+0x110/0x1d0 [ 410.550130] ? lock_downgrade+0x6e0/0x6e0 [ 410.554279] do_io_submit+0x1027/0x13f0 [ 410.558255] ? free_ioctx_users+0x3e0/0x3e0 [ 410.562578] ? kasan_check_read+0x11/0x20 [ 410.566720] ? _copy_to_user+0x87/0xd0 [ 410.570597] ? put_timespec64+0xb4/0x100 [ 410.574645] ? nsecs_to_jiffies+0x30/0x30 [ 410.578782] ? SyS_clock_gettime+0xf8/0x180 [ 410.583104] ? SyS_io_destroy+0x310/0x310 [ 410.587238] SyS_io_submit+0x28/0x30 [ 410.590936] ? SyS_io_submit+0x28/0x30 [ 410.594807] do_syscall_64+0x1e8/0x640 [ 410.598695] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 410.603547] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 410.608722] RIP: 0033:0x459a29 [ 410.612322] RSP: 002b:00007efdc0c03c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 410.620014] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 410.627270] RDX: 0000000020001440 RSI: 0000000000000001 RDI: 00007efdc0ba3000 [ 410.643032] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 410.650284] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efdc0c046d4 [ 410.657537] R13: 00000000004c0e25 R14: 00000000004d4030 R15: 00000000ffffffff [ 410.664808] Code: 0f 0b e8 d4 15 2e 00 0f 0b e8 cd 15 2e 00 0f 0b e8 c6 15 2e 00 0f 0b e8 bf 15 2e 00 e8 36 75 d1 ff e9 63 ff ff ff e8 b0 15 2e 00 <0f> 0b e8 a9 15 2e 00 0f 0b 4c 89 85 58 ff ff ff e8 9b 15 2e 00 [ 410.684625] RIP: gcmaes_decrypt.constprop.0+0x910/0xd20 RSP: ffff88809905f7a8 14:30:29 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) r1 = accept4(r0, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80, 0x101000) r2 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000780)=0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4820000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002c0000032cbd7000fbdbdf2500000000005f28d51683236ee3e66909718f8a094df08cfdbc43292e46578b9dd91e31b9c4c295cc23249adf00"/72, @ANYRES32=r3, @ANYBLOB="0600e0ff0900f1ff04000200"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@loopback, @dev={0xfe, 0x80, [], 0x16}, @loopback, 0x9, 0x3f, 0x5, 0x100, 0x7b, 0x41000040, r3}) signalfd4(r1, &(0x7f0000000140)={0xffffffff}, 0x8, 0x800) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000200)={0x0, r5, 0xc224}) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) 14:30:29 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x4000, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, 0x7}, 0x10) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pkey_alloc(0x0, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f0000000140)="8a80e87bcc12fd65f653dbfddb396f756723081558e14948ef8ea5156b4d0d615ad7410e9852e82713c1e6f7d7cdc94897a7caa1743f58b3a5fd81e837db07fa71") prctl$PR_SET_PTRACER(0x59616d61, r6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs, @transaction_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 14:30:29 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) preadv(r0, &(0x7f00000005c0), 0x3, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0x3ff, 0xffae) 14:30:29 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/127, 0x7f}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000180)=""/25, 0x19}], 0x2, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000080)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x8100, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0), 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r6, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000300)={r9}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000180)={r9}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={r9, 0xb3, "0ab75b44a216682eb65dd6719121483343cd39ca4118b8b8da090107b3fce2fd8fe563abf9d84b8aa0ac812f5f32c5318b20dfb88a60e0de3fd74d377cd3c71c5bd3c8dc721726c6a4354c7e98153965c91390d4aec22b9abfcd403528ed53e6bac99848f7579992e462e73e34d4c5cce778f177041067421b745f502efb156222080e4901b9a70b630e5195429000b1ca1958f6a862f8b799f5311cea5d86e1476a66a21d135d51f3284687f17b9aed0e65c3"}, &(0x7f0000000200)=0xbb) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000440)={r10, @in={{0x2, 0x4e24, @multicast1}}, 0xfcf6, 0x8, 0x4, 0x5, 0x7}, &(0x7f0000000500)=0x98) bind$inet6(r3, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000300)={r13}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r13, 0x9d}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r13, 0x8}, &(0x7f0000000280)=0x8) r14 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r14, 0x10e, 0x4, &(0x7f0000000040)=0x3499274f, 0x4) 14:30:29 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) [ 410.772861] binder: 21215:21217 unknown command 0 [ 410.785671] kobject: 'loop1' (ffff8880a49c57e0): kobject_uevent_env [ 410.787030] binder: 21215:21217 ioctl c0306201 20000000 returned -22 [ 410.802888] kobject: 'loop1' (ffff8880a49c57e0): fill_kobj_path: path = '/devices/virtual/block/loop1' 14:30:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@v1={0x2, "c7bf1d0d80a4d7eacedf1d27"}, 0xd, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0xc) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000002c0)={0x8, 0x0, [{0x3fa, 0x0, 0x1}, {0x581, 0x0, 0x3}, {0xc0000102, 0x0, 0x8}, {0x91c, 0x0, 0x4}, {0x8be}, {0xf64, 0x0, 0xf622}, {0xc0000081, 0x0, 0x3}, {0x8f5, 0x0, 0x10001}]}) 14:30:29 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x8080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000000c0)=0x1c, 0x80000) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) [ 410.828914] kobject: 'loop3' (ffff8880a4a35260): kobject_uevent_env [ 410.849681] kobject: 'loop3' (ffff8880a4a35260): fill_kobj_path: path = '/devices/virtual/block/loop3' 14:30:29 executing program 1: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0xfc1, 0x6}) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x228bcdb393304bf, 0x8000000000) 14:30:29 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000000c0)={0x9210aeb7bcf92a, 0x6006, 0x2, 0x1, 0x1}) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BLKALIGNOFF(r7, 0x127a, &(0x7f0000000080)) [ 410.885437] kobject: 'loop4' (ffff8880a4a841a0): kobject_uevent_env [ 410.901472] kobject: 'loop4' (ffff8880a4a841a0): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 410.924632] kobject: 'loop1' (ffff8880a49c57e0): kobject_uevent_env 14:30:29 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000038, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0), 0x14) bind$inet6(r3, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="00000fa7", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={r6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000080)={r6, @in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x7}, 0x90) [ 410.938870] kobject: 'loop1' (ffff8880a49c57e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 410.971833] kobject: 'kvm' (ffff8880a6ea8350): kobject_uevent_env [ 410.978643] kobject: 'loop3' (ffff8880a4a35260): kobject_uevent_env [ 410.993936] kobject: 'kvm' (ffff8880a6ea8350): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 411.003120] kobject: 'loop3' (ffff8880a4a35260): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 411.023998] kobject: 'loop1' (ffff8880a49c57e0): kobject_uevent_env [ 411.031615] kobject: 'kvm' (ffff8880a6ea8350): kobject_uevent_env [ 411.040389] kobject: 'kvm' (ffff8880a6ea8350): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 411.055527] kobject: 'loop1' (ffff8880a49c57e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 411.070901] ---[ end trace 3a67fcf0f3c03804 ]--- [ 411.075806] Kernel panic - not syncing: Fatal exception [ 411.082634] Kernel Offset: disabled [ 411.086267] Rebooting in 86400 seconds..