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"]) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) 14:14:40 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xa00) 14:14:40 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00X\x0e\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:40 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40, 0x50000) write$P9_RUNLINKAT(r0, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x100000050, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:40 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="7a1628cc75e302fd6bd74fd29676bb0b4a498139046ae16c99dd128f68152eca24ab26ec5d0c79f246bef797d6d897bce299b615716f298bac4303c4d9f03ebbaf80d25f58882f638d66337dfb8503f43f250808309e7abef9f94a53e6d5f60ce8bbc4cb9327af44172a980aecbe89d2912e8b4ea63d7b3cc35bad270a937e30e68fdaa1fdc967bb28419fc701ac3fb91cbf0ed42d298ebe9d6237ec5f5ba4cf01d4e45f18bd3b25af17e299316fe08c4f464873248845d18c24c8e6956da7ea8b6046cbfc2b5b5b99529e30467e8cbd941d", 0xd2}, {&(0x7f0000000440)="42369df9f630743d2fbd9f6dedfa2619eb1083aaf798fcab9b8d4ea1405001027799201e3de4069768fb82f5a0322cba11254bfc0241c5f9c0b2f5167505ff8232a9d27bd1f9cea96f44c0bd9d7a2f296c261217e1ebed1942", 0x59}, {&(0x7f00000004c0)="55788c67664c7731377fd073f8c37fa1169309bfd686a9b2e76be9bb049a06c321c045ddfc42e3d880c943162b3b8dc4b34e9947d33ee7cc84bd438af06486f86fda27f2758ba9f53281d83e0e63cc73395da019811ec05bc75ba02ad583bf69ef2c", 0x62}], 0x3, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000100)=0x4) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:40 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xe00) 14:14:40 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:40 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000000c0)={0x40000400, 0x203, 0x1, 0x10000, 0x0, 0x5}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:40 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x1100) 14:14:40 executing program 3: r0 = socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x4) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:40 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00`\x0e\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:40 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x6, 0x40000) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x40002001, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = semget(0x1, 0x0, 0x42) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x200) semctl$SETVAL(r4, 0x4, 0x10, &(0x7f0000000080)=0x5) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x0, 0x20, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00'}, 0x30) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r2, &(0x7f00000001c0)={r2, r1, 0xe2a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:14:41 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r4 = getpid() migrate_pages(r4, 0x7fffffff, &(0x7f0000000100)=0x7, &(0x7f0000000140)=0x7) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x8001007, 0x1, 0x2}) 14:14:41 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x1c00) 14:14:41 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00h\x0e\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:41 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x78) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:41 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x9, &(0x7f00000000c0)={0x7}, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x89000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xf}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x90bb762c6b39152}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x32}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xba1e}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x4) 14:14:41 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x2000) 14:14:41 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x3f00) [ 512.134345] XFS (loop5): Invalid superblock magic number 14:14:41 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00p\x0e\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:41 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000580)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x0, 0x6, 0x9, 0x6, 0x4, 0xfffffffffffffffc}, @exit, @call={0x85, 0x0, 0x0, 0x16}, @map={0x18, 0xb, 0x1, 0x0, r1}, @alu={0x7, 0x4, 0xc, 0x7, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x3e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000180)='GPL\x00', 0x7bce, 0xd5, &(0x7f0000000440)=""/213, 0x41000, 0x1, [], 0x0, 0x7}, 0x48) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r3 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x81}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:41 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000002e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002e80)=0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x3, 0x8) r3 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000400)) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00'}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000080)={{0x0, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r4 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fadvise64(r4, 0xe4ffffff00000000, 0xffff, 0x0) sendmsg$key(r2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) 14:14:41 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506ffffffff00000000000100090000030000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vfio/vfio\x00', 0x400d02, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4001) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket(0x1e, 0x805, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) 14:14:41 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x4000) [ 512.373581] device bridge_slave_1 left promiscuous mode [ 512.380370] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.394136] IPVS: ftp: loaded support on port[0] = 21 [ 512.454383] device bridge_slave_0 left promiscuous mode [ 512.459853] bridge0: port 1(bridge_slave_0) entered disabled state 14:14:41 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3fffffffc00) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:41 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b00000540800ce5c8e982c20810000000000fccffe91fc2351741eddaaabc39d80e39909e6bd3d5073556c5cf833000096ecbfb26f4946392b6f545400812b81de5ae32e3037fef2f8e4ad49940c9d95c20429bb02ec0dadb3a0c42701d64fa6fc095d01000000010000005e1cd0fe55993a2ee393cba636fdfc73b44d2caf8d1fec090823829ce12bf73cb75377ec0fdb7b4f14559f4a37a7cd140fce3e7e20f2629ba35bbab73ed5621c66f1e0a918892e6bc701fa82afb1340adcaecdf5a2858b556df3da5047b10059788e4ce8c9d52dc9e6aa590f859ff654235ba16cb8e203"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0xff, @mcast2, 0x9}, 0x1c) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000440), r4, 0x1}}, 0x18) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000001c0)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) [ 512.695439] device hsr_slave_1 left promiscuous mode [ 512.748394] device hsr_slave_0 left promiscuous mode [ 512.800206] team0 (unregistering): Port device team_slave_1 removed [ 512.817793] team0 (unregistering): Port device team_slave_0 removed [ 512.834086] bond0 (unregistering): Releasing backup interface bond_slave_1 14:14:42 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="f18c6dc700000000000000000000000000", @ANYRES16=r3, @ANYBLOB="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"], 0x2bc}, 0x1, 0x0, 0x0, 0x4040}, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) [ 512.870392] bond0 (unregistering): Releasing backup interface bond_slave_0 14:14:42 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000f1cf297ec3f337e80fc6d59ac809ce2845c5693cd3e382390bba0fcd704a2fc2edcd66ec3e91ac6ec85b10c7303cb003d3c82698cd53fef0ea3efbcac13caf0d15fa0a6d13c1f79711ef64035ff4c36b00afde87264b015be8fec333fa214c4bc45b22eba66696446175c0b87655234595cce1d5188a46307d837a56f617ff3d4bee76a2e5d99eb5c4c02bffabfadb7956e5296eec0e5890bdaf8b5ad3"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) socket$isdn(0x22, 0x3, 0x24) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r3, 0x1}}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0xf772) getsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0xfffffffffffffffd) [ 513.054972] bond0 (unregistering): Released all slaves [ 513.353192] chnl_net:caif_netlink_parms(): no params data found [ 513.389454] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.395941] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.402842] device bridge_slave_0 entered promiscuous mode [ 513.409464] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.415973] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.423349] device bridge_slave_1 entered promiscuous mode [ 513.440118] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 513.448931] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 513.464961] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 513.472058] team0: Port device team_slave_0 added [ 513.477707] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 513.484815] team0: Port device team_slave_1 added [ 513.489972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 513.497533] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 513.630184] device hsr_slave_0 entered promiscuous mode [ 513.692439] device hsr_slave_1 entered promiscuous mode [ 513.754019] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 513.761076] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 513.781570] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.787959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.794586] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.800921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.854822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.869342] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 513.880044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 513.894199] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.901212] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.919503] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 513.930048] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.942532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 513.950138] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.956506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.975980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 513.990580] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.996976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.024320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 514.032859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 514.047286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.057973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.069007] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 514.076186] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 514.084089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 514.091784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 514.105902] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 514.113395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 514.127777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.198112] binder: 4070:4071 unknown command 1869770799 [ 514.203946] binder: 4070:4071 ioctl c0306201 20000000 returned -22 [ 514.212877] binder: 4070:4072 unknown command 1869770799 [ 514.218352] binder: 4070:4072 ioctl c0306201 20000000 returned -22 14:14:43 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:43 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300), 0x10}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7, 0x20000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b009000200080001000300a9d60bd0bbaaabbc0f97cfc3e4a5bea304c787f599bba7ace8e58cb53e5184a59b9b583d1c491af45d1a89fa61eb9773bd2c2aa350f523ebcedf21aec8cd41ae7192ae6b762a5bc9f1f2fa2e3e00fb68f813bac919f777d88c0990691247fc85ee763925f26962de7b651614a29d0ec23416b0e68a7459de"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0xfffffffffffffffc, 0x211977ba, 0x9}) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001c00841aef76", 0x24) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) r5 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) ioctl$CAPI_GET_ERRCODE(r5, 0x80024321, &(0x7f0000000100)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r8) 14:14:43 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00x\x0e\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:43 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x7301) 14:14:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000016d400300000000003506000001ed00005d040000000000006f460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], 0x0}, 0x48) 14:14:43 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbe62506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:43 executing program 5: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") creat(&(0x7f0000000180)='./file1\x00', 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x107) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, 0x0) [ 514.387949] netlink: 'syz-executor0': attribute type 28 has an invalid length. [ 514.414587] binder: 4083:4089 unknown command 1869770799 14:14:43 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x80fe) 14:14:43 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000440)={0xb, 'syz0\x00', 'syz0\x00', 'syz0\x00', 0x44, 0x579, 0x6, 0x7fffffff, 0x3, 0x6, "2e4de2b4e79f5c61052933ebf1d742928422ebde09b139eb31f46a4de79e711f9b9358b0658f97016773f3cf0b51c3c2eac6eb508518cd63ece36a3fd57c736d5966b9df"}, 0x15c) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00000005c0)=0x7) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x10000, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) write$nbd(r0, &(0x7f0000000340)={0x67446698, 0x0, 0x0, 0x2, 0x4, "4c1f6b40d309e29e41381594d985f6b7b1bc99bb367cf402fbc59987fa08537e23620c3c54a7709141bf5c04b26fec37ea291bb0b5943bf8cbc93ffe9ffe3e811ade2ba909a08bc1c1f824a81984cd4f6582c5ab72b4a81ee373459a6b79c0fb44e9454b7ceb12f2e829543e9b6c7c48f021982e08495a8b00893220b1c1c5cd0a143a8b30a2c99b730c7115f7abb5e2a7a0349531518dd31a74b4246bf36c963fe8209683f3cc8b0cbebeec5fe3ab60caeac5906e5f64d39303ff8750d0c4b78c5690a0cfa275dd4bb4e00c5fb25a0a46596f50656c5852f87a056cd95534dc7784e4672aaf830a0cc54ac6c860"}, 0xfe) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000002c0)={'nat\x00', 0x0, 0x3, 0xb2, [], 0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/178}, &(0x7f00000000c0)=0x78) [ 514.455350] binder: 4083:4089 ioctl c0306201 20000000 returned -22 [ 514.550382] netlink: 'syz-executor0': attribute type 28 has an invalid length. 14:14:43 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xe000) 14:14:43 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\x80\x0e\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:43 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fb9bbddd85b6ededf1682000080013000900000008000100030000a5"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:43 executing program 3: socket$inet6(0xa, 0x1040000020800a3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) setsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000100)="6c91058638ead60ca8621812184ab5645428a095a98f9791385806da79edd93b2790d3cad458809bef85c0fc7ccd014d089f88b15f519c5af4c499f5b20278bc36e77f40945823584e814afe0b0c724f1740762919bba41d370a485eeed7163d2e61c4234780948cb635a56c1efbe918e6ffd1757f2ea3ad57b546154a090905641f9db42c94fc1c757dac6ecb61416e21c67cbea4fc777b8d84cc819c448c939677c0ba0d7f660921f929", 0xab) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) [ 514.748378] binder: 4121:4122 unknown command 1869770799 14:14:43 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x10) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x3406, &(0x7f00000000c0)=0x2) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video36\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x2000, 0x91, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000200)=""/141) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 514.793625] binder: 4121:4122 ioctl c0306201 20000000 returned -22 [ 514.803896] binder: 4121:4138 unknown command 1869770799 [ 514.825397] binder: 4121:4138 ioctl c0306201 20000000 returned -22 14:14:44 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xe803) 14:14:44 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\x88\x0e\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 515.058624] binder: 4161:4173 unknown command 1869770799 [ 515.098295] binder: 4161:4173 ioctl c0306201 20000000 returned -22 14:14:44 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300), 0x10}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7, 0x20000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b009000200080001000300a9d60bd0bbaaabbc0f97cfc3e4a5bea304c787f599bba7ace8e58cb53e5184a59b9b583d1c491af45d1a89fa61eb9773bd2c2aa350f523ebcedf21aec8cd41ae7192ae6b762a5bc9f1f2fa2e3e00fb68f813bac919f777d88c0990691247fc85ee763925f26962de7b651614a29d0ec23416b0e68a7459de"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0xfffffffffffffffc, 0x211977ba, 0x9}) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001c00841aef76", 0x24) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) r5 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) ioctl$CAPI_GET_ERRCODE(r5, 0x80024321, &(0x7f0000000100)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r8) 14:14:44 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0xfed8, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x6}}, 0xffffffffffffff55) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) [ 515.121577] binder: 4161:4178 unknown command 1869770799 [ 515.138454] binder: 4161:4178 ioctl c0306201 20000000 returned -22 14:14:44 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000140)={"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"}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000580)={0x6, 0x118, 0xfa00, {{0x8, 0x3, "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", 0xbb, 0x0, 0x7, 0x1, 0x8, 0x3, 0xfffffffffffffffe, 0x1}, r2}}, 0x120) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000080)={0xffffffff, 0x2, 0x100000000, 0x7fffffff}) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:44 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:44 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xf000) 14:14:44 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\x90\x0e\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 515.360443] binder: 4199:4207 unknown command 1869770799 [ 515.398019] binder: 4199:4216 unknown command 1869770799 [ 515.435246] binder: 4199:4207 ioctl c0306201 20000000 returned -22 14:14:44 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@generic={0x2, 0x0, 0x2}) 14:14:44 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xf401) [ 515.479005] binder: 4199:4216 ioctl c0306201 20000000 returned -22 [ 515.503578] netlink: 'syz-executor5': attribute type 28 has an invalid length. 14:14:44 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x4, 0x4, 0xb16, 0x3638, 0x9, 0x1, 0xfff, 0xf0f}, &(0x7f0000000100)={0x558, 0x4, 0x4, 0x9, 0x7, 0x40000000000000, 0x9, 0xffff}, &(0x7f0000000140)={0x2, 0xd3, 0x4, 0x4, 0x1ff, 0x4, 0x4, 0x1}, &(0x7f00000001c0)={r7, r8/1000+30000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:44 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xfe80) 14:14:44 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\x98\x0e\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:44 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="0001742a0000fbbddf2506b0000014080200080001000900000008000100e65dbe209a5e9603000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) [ 515.677012] binder: 4240:4248 unknown command 1869770799 [ 515.700895] binder: 4240:4248 ioctl c0306201 20000000 returned -22 [ 515.765591] binder: 4240:4256 unknown command 1869770799 [ 515.801004] binder: 4240:4256 ioctl c0306201 20000000 returned -22 14:14:44 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="f18c6dc700000000000000000000000000", @ANYRES16=r3, @ANYBLOB="010128bd7000fbdbdf25160000003400020008000200e800000008000200c2000000080001000100000008000100ff01000004000400040004000800010004000000140009000800020002000000080002000100000044000200040004000800020000000000040004000800020002000000080001000000000008000100000001000400040008000200080000000800010000000080040004002c000100100001007564703a73797a30000000001800010069623a76657468305f746f5f7465616d00000000740104000c00010073797a31000000000c00010073797a30000000000c00010073797a30000000004c00070008000300000400000800030007000000080004000300000008000400000400000800030006000000080003000300000008000400ff7f0000080003000300000008000300000000004c0007000800040081000000080003000300000008000400020000000800030004000000080004000700000008000100030000000800020007000000080002000200000008000300020000001400010062726f6164636173742d6c696e6b00001c00070008000400030000000800020006000000080004007f0000002c000700080004000900000008000200030000000800030008000000080004000100000008000300050000001400010062726f6164636173742d6c696e6b000044000700080002000000000008000400060000000800020000000000080002000700000008000400000200000800010000000000080004000800000008000400ffffffff4400090008000200ab0900000800020002000000080001000300000008000200f5010000080002000100010008000200e10c0000080001000600000008000200080000003800060008000100050000000800010008000000080001005c00000008000100000000400400020004000200080001000001000004000200"], 0x2bc}, 0x1, 0x0, 0x0, 0x4040}, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:45 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x34000) 14:14:45 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x200000, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x4, @sdr={0x38414762, 0x1}}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000080)={0x2, 0x1, [0xcf3, 0x8, 0xa7, 0x100000001, 0x1, 0x8, 0x81, 0x9]}) 14:14:45 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\xa0\x0e\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 516.069322] binder: 4282:4292 unknown command 1869770799 [ 516.097111] binder: 4282:4292 ioctl c0306201 20000000 returned -22 [ 516.108193] binder: 4282:4295 unknown command 1869770799 [ 516.117544] binder: 4282:4295 ioctl c0306201 20000000 returned -22 14:14:45 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x40000) 14:14:45 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001e59c604350c79b2706b000001408020008000100090000000800010203000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) accept$netrom(r1, &(0x7f0000000140)={{0x3, @rose}, [@default, @null, @rose, @remote, @null, @default, @null]}, &(0x7f00000001c0)=0x48) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) read$FUSE(r0, &(0x7f0000000cc0), 0x1000) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 14:14:45 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x3, 0x1, 0x81, 0x0, 0x7f, 0x8, 0x6}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:45 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b00000e2b5a062163c7266090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) [ 516.273680] binder: 4311:4314 unknown command 1869770799 14:14:45 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3fffffffc00) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) [ 516.318373] binder: 4311:4314 ioctl c0306201 20000000 returned -22 [ 516.351696] binder: 4311:4321 unknown command 1869770799 14:14:45 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\xfe\x80\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:45 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4140, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x98, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x2, 0x3}, @enter_looper, @release, @acquire={0x40046305, 0x2}, @request_death, @exit_looper, @acquire_done={0x40106309, r2, 0x1}, @reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, &(0x7f00000000c0), &(0x7f0000000140)=[0x30, 0x28, 0x78]}, 0x699}}], 0xb6, 0x0, &(0x7f0000000240)="a9ceb9c90eb9f940190d1057b2d130abb350ef6bd1eee5edaf0d400f6818cea4b1feee33dcb532ef2c2e0dcba1ec2786f97ccc3dd78ffe5763e755f0d7d62fa1d0b24b24279a679e776a681661a1a062a23c088694bb0effc2442c8f227782a969e09436b3e1c4b87f6493e70682c2e9306a4c254ac2ddc3321f3cee0b6967c2851765fec11819d5f1f6340af3a8939c082b6436a224b75151ccc7b2c1d2a202b30c818efaac6736ecacb5f6162bdaefcd25981ccd38"}) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 516.386730] binder: 4311:4321 ioctl c0306201 20000000 returned -22 14:14:45 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x100000) 14:14:45 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x40000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:45 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x170, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8fb5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd7}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78cd810c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8a}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffe00}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6000000}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 516.589163] binder: 4344:4352 unknown command 1869770799 [ 516.619620] binder: 4344:4352 ioctl c0306201 20000000 returned -22 14:14:45 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="7a1628cc75e302fd6bd74fd29676bb0b4a498139046ae16c99dd128f68152eca24ab26ec5d0c79f246bef797d6d897bce299b615716f298bac4303c4d9f03ebbaf80d25f58882f638d66337dfb8503f43f250808309e7abef9f94a53e6d5f60ce8bbc4cb9327af44172a980aecbe89d2912e8b4ea63d7b3cc35bad270a937e30e68fdaa1fdc967bb28419fc701ac3fb91cbf0ed42d298ebe9d6237ec5f5ba4cf01d4e45f18bd3b25af17e299316fe08c4f464873248845d18c24c8e6956da7ea8b6046cbfc2b5b5b99529e30467e8cbd941d", 0xd2}, {&(0x7f0000000440)="42369df9f630743d2fbd9f6dedfa2619eb1083aaf798fcab9b8d4ea1405001027799201e3de4069768fb82f5a0322cba11254bfc0241c5f9c0b2f5167505ff8232a9d27bd1f9cea96f44c0bd9d7a2f296c261217e1ebed1942", 0x59}, {&(0x7f00000004c0)="55788c67664c7731377fd073f8c37fa1169309bfd686a9b2e76be9bb049a06c321c045ddfc42e3d880c943162b3b8dc4b34e9947d33ee7cc84bd438af06486f86fda27f2758ba9f53281d83e0e63cc73395da019811ec05bc75ba02ad583bf69ef2c", 0x62}], 0x3, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000100)=0x4) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:45 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x400300) 14:14:45 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x80000000, 0x8, 0x4, 0x2000400, {0x0, 0x7530}, {0x4, 0x0, 0x1, 0x59, 0x8001, 0x2, "122ec73a"}, 0x8, 0x3, @userptr=0x7fffffff, 0x4}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0xd, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0001742adffffadf2506b000001408020008000100010003000000b99762430df2c6c42944a1c77cd0fad3793fbfde"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:45 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\xfe\xc0\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:46 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x80000000, &(0x7f00000000c0)=0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 516.869893] binder: 4369:4384 unknown command 1869770799 [ 516.902408] binder: 4369:4384 ioctl c0306201 20000000 returned -22 14:14:46 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xf0ffff) 14:14:46 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000c80)={0xb, 0x1a4, 0xfa00, {&(0x7f0000000100), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:46 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x02\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 517.064877] binder: 4412:4417 unknown command 1869770799 14:14:46 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000), 0x4) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) socket(0xc, 0x2f41688b07f66a9a, 0x3) 14:14:46 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) finit_module(r0, &(0x7f0000000100)='/dev/loop-control\x00', 0x3) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008060100090000000800010003000000d8cdf43f823534289e36d8894d7b456fcd33e6a2f8069bdd3a3275a112176b3904fd78711b383b5f54348cc193a646505387f161d0ee7af4a1455b9b2497445df71af6d94cfee293ab9a8bfd413658631c3b728903fdfd37cb0f6464203a84e2d82a5ff4554a026c4c532ba7296e043a402331126ddffacf7f9572c9ad0a95206bfd61572bf6e0aa3f1ca9c084e94d4317ff40f3d936dfca9f73ad4731b64242d0d4a1cfd97b490b75a508082d3dfe80ee46"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x800, 0x2000000000010280) [ 517.105469] binder: 4412:4417 ioctl c0306201 20000000 returned -22 [ 517.106419] binder: 4412:4421 unknown command 1869770799 14:14:46 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x1000000) 14:14:46 executing program 1: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x800000000000, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x691f, 0x7fffffff, 0x8, 0x1, 0x9, 0x9, 0x4, 0x10, 0x5, 0x101}, 0xb) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000140)={0xd96a98706e45d47e, 0x0, [], @raw_data=[0x2, 0x8, 0x9, 0xeca, 0x40, 0x3, 0x81, 0x68, 0x2, 0x8, 0x0, 0x8, 0x1ff, 0xfffffffffffffffe, 0x5624, 0x7f, 0x0, 0x401, 0xb49, 0xff, 0x8, 0x800, 0x10001, 0x10000, 0x5, 0x8f27, 0x6, 0x0, 0x8, 0xfffffffffffffffe, 0x1ff, 0xffffffffffffff01]}) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 517.183342] binder: 4412:4421 ioctl c0306201 20000000 returned -22 14:14:46 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x03\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:46 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x2000000) 14:14:46 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x7c, &(0x7f00000003c0)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="000174272506b000001408020008000100001028e0807ceafe4900000054899089924bc9a6a6bba802a28bb68867b22c55b5e907d7b85cb3cabc0cd4e41b9036"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:46 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000140)=0x54) [ 517.457785] binder: 4452:4463 unknown command 1869770799 [ 517.474412] binder: 4452:4463 ioctl c0306201 20000000 returned -22 14:14:46 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x3000000) 14:14:46 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) getcwd(&(0x7f0000000100)=""/164, 0xa4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800170003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:46 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:46 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) waitid(0x2, r2, &(0x7f0000000140), 0x8, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000280)=0xb) pwritev(r1, &(0x7f0000001400)=[{&(0x7f0000000340)="960d1de3d6251fa45c9dfdda816ae32d7dbd1fe1dfe494bcdb924d0e1ef61f9f9e46dbc0e7490877e2bbf259ea9c3bf6f9112efbd67d04cc39bc2a681403d63aab390c1b3caf79f364a9179e289d7ea60c", 0x51}, {&(0x7f00000003c0)="e7a0e5606c8469e53851995b124eccc3c135775c23", 0x15}, {&(0x7f0000000400)="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", 0x1000}], 0x3, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={r4, 0x80000, r0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 517.629030] binder: 4483:4486 unknown command 1869770799 [ 517.657130] binder: 4483:4486 ioctl c0306201 20000000 returned -22 14:14:46 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x4000000) 14:14:46 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x04\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:47 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) write$P9_RSTATFS(r0, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x0, 0x5, 0x6, 0x0, 0x28, 0x3f, 0xf88, 0x3, 0x9}}, 0x43) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000080)={0x5, 0x0, [{0x80000001, 0x100, 0xffffffffffffff01, 0x7, 0x7}, {0x80000007, 0x4, 0x7, 0xfffffffffffffc01, 0x7}, {0xd, 0x3f, 0x1, 0xbc0}, {0x80000007, 0x3, 0x5, 0xe66f, 0x8001}, {0x6, 0xffff, 0x1eb, 0x800, 0x7fff}]}) [ 517.827344] binder: 4512:4513 unknown command 1869770799 [ 517.848047] binder: 4512:4513 ioctl c0306201 20000000 returned -22 14:14:47 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x4, 0x62e, 0x40, 0x8, 0x80000000}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000440)={r2, @in={{0x2, 0x4e20, @empty}}}, 0x84) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x14d000, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b0000014080200080000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r8) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:47 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x5000000) 14:14:47 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@deltclass={0x90, 0x29, 0x408, 0x70bd2c, 0x25dfdbfc, {0x0, r5, {0xe, 0x2}, {0xffff, 0x9}, {0xb, 0x5}}, [@TCA_RATE={0x8, 0x5, {0x2, 0x5}}, @TCA_RATE={0x8, 0x5, {0xfffffffffffff800, 0x7}}, @TCA_RATE={0x8, 0x5, {0xe900, 0x7}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x8, 0x5, 0x80000000}}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x2}}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_MASK={0x8, 0x4, 0x30}}}, @TCA_RATE={0x8, 0x5, {0x200, 0x3}}, @TCA_RATE={0x8, 0x5, {0x2, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000081}, 0x8004) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:47 executing program 5: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x7, 0x0) [ 517.977853] binder: 4535:4537 unknown command 1869770799 14:14:47 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x1000, 0x1, &(0x7f0000000180)=[{&(0x7f00000004c0)="080a18bfa0c2e9dee5a632749d226b67ed39a62d28268ca51c42f920c242b12cafc6c10ebcc2428926af1c5e12307e10d6e8502db711654ae299a9b16a7e211d64236913e6ce38571dd8db527e7c6e899ed4e4180f36cd88bc08cd136d6ebc0efabd9b68fa7579c1707d748e9eaa6e598d3ee5417d833a87837ff593e20170267a3dd1d8", 0x84, 0x2, 0x1000000}], 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) fallocate(r3, 0x0, 0x0, 0x0) r4 = syz_open_dev$dspn(0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000480)=""/60) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x3000, 0x4000}) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000000000000003, 0x0, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000200)) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000f07000)}, 0x10) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000240)=0x200000) fsetxattr$security_evm(r1, &(0x7f0000000180)='security.evm\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 518.027008] binder: 4535:4537 ioctl c0306201 20000000 returned -22 14:14:47 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x06\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:47 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506f8c2001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) timer_create(0x7, &(0x7f0000000000)={0x0, 0xd, 0x2, @thr={&(0x7f0000000100)="368766ef86da28c081ed441db076818b3237820439891c3bfee8f0679152a623bb7112fd4cd73411a90da1cd9afc4b9d2a9fb55b87544b24b5fea3f8a467e2d5be71fc298be18ee14e9dd68534ecfdd69bb02c15c995ab2f0ffc9260a1528349f6a23d3c21bc20766f29013652ac8b17b2ffd928e86b29babd94e05dbfc61acedee3396644d7bfc1a488", &(0x7f0000000440)="fbd0401129b9ea18a09a7762ae4e27bf89a1be39aea1c21c9754540f3af1a2f2799a4c95f9b33f357be9da620447aa888809c8e5878dd969ab06bbf9f75c8c21646c68da94f1f1eabf8910a8048f42b1eec3c9db8fb7ae6a9f5df3a9f880b1b28438b3d291769bf6c4f22f10558815b0cee93b74cf40d23134b51d6fc083f14aa5c35cf14c5f54b4baf36ff09490aafe45da68ece80e"}}, &(0x7f00000001c0)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:47 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x6000000) 14:14:47 executing program 3: r0 = socket$inet6(0xa, 0x40000020800a3, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xfffffe44) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x5e, 0x1000b) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742506b000001408000048000100030000000000000000000c7ee7327b7567563db29d3e20f98c9f8e0212cd48bbac3be244c2a0c9f200b57137c72c00f01f2465cba6787258909f0897b44cef6cf809d187f2f266dceb4a80f4cc9cdefab389bf811c5c77f715fc54cdcee501fb1d8b47783fc19306adc409a856ec25a46062253a4def54463401b550d76f90978bd5d34346596c9648c20a672ab93162cd924317ea01779e43ce71311c264f70222ddb2c94cd61db3646a1bab6caf8aa918dd9ccec2d990d310b4fc0ee35a2a773ec5c4cfc5df2017f5e2bec93e77f5f4aaec0ce8828130bae89122b5f5d77ccd8a63d2799daf8536dcc1b2cf67530cf9fff3be3516f40cdd35d3994cf730313302f07bcfa82b35c1e0f"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x23d, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) socket$caif_stream(0x25, 0x1, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x2, 0x10001, 0x1, 0x1}, 0x47) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:47 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000180)=[0x4], 0x2) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x500050}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x5e8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000080) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x10000000000000) accept4(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000000)=0x80, 0x800) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400), 0x13f, 0x4}}, 0x20) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) [ 518.348330] binder: 4563:4572 unknown command 12288 14:14:47 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x7000000) [ 518.401608] binder: 4563:4572 ioctl c0306201 20000000 returned -22 [ 518.461544] binder: 4563:4595 ioctl 80404525 20000480 returned -22 [ 518.483086] binder: 4563:4594 ioctl 40106436 0 returned -22 14:14:47 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\b\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 518.529915] binder: 4563:4572 ioctl 541b 200000c0 returned -22 [ 518.558536] binder: 4563:4594 ioctl 4010ae67 20000040 returned -22 [ 518.576254] binder: 4563:4572 ioctl 400445a0 20000240 returned -22 14:14:47 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a00000300df2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:47 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x8000000) 14:14:47 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) semget$private(0x0, 0xffffffffffffffff, 0x0) 14:14:47 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000100)=[0x40, 0x3, 0x5, 0x81, 0x0, 0x1, 0x4, 0x7, 0xbc9, 0x8], 0xa, 0xfffffffffffffff8, 0x2, 0x80, 0x400, 0x2, {0x3ff, 0x800, 0x4, 0x2, 0x0, 0x1000, 0x0, 0x8, 0x7, 0x6, 0x2000000000000, 0x0, 0x10000, 0x4, "acd6d3f8b9c1aafa75fde4b1e24efbacc3146f3ef27230ba3ad5aed2b2f17f0c"}}) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0001742a0100fbdbdf2506b0000014030000007087f2322267633591bcc00cd46fdb40006fb83cf04a37d9b5b16d46fd3b0b09d4537f39290624b26a0f07385048608bf6f305b4263e87545e941129e241206e6d98b0a22ac768f46821352a894bbe3731"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) [ 518.820528] binder: 4637:4639 unknown command 1869770799 [ 518.829836] binder: 4637:4641 unknown command 1869770799 [ 518.846171] binder: 4637:4641 ioctl c0306201 20000000 returned -22 14:14:48 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x9000000) 14:14:48 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) readahead(r1, 0x0, 0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x1) socket(0x1e, 0x805, 0x0) 14:14:48 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x16\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 518.876416] binder: 4637:4639 ioctl c0306201 20000000 returned -22 14:14:48 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:14:48 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x17\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:48 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="00017400fbdb0000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:48 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xa000000) 14:14:48 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408990008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) [ 519.193860] binder: 4674:4685 unknown command 1869770799 [ 519.215388] binder: 4674:4689 unknown command 1869770799 [ 519.227399] binder: 4674:4685 ioctl c0306201 20000000 returned -22 14:14:48 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:48 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010300000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) [ 519.251242] binder: 4674:4689 ioctl c0306201 20000000 returned -22 14:14:48 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xe000000) [ 519.408391] binder: 4707:4716 unknown command 1869770799 14:14:48 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x4, 0x10, 0x4040000000000000, 0x100000001}, &(0x7f0000000180)=0x18) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x802) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e22, 0x9, @ipv4={[], [], @empty}, 0x2}}, 0x101, 0x8f0b}, 0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:48 executing program 5: r0 = socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0xb, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x5, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000680)=0x1, 0xffffffffffffffc0) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:48 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x18\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 519.480688] binder: 4707:4716 ioctl c0306201 20000000 returned -22 14:14:48 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)=0x0) io_destroy(r2) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100)="f7ab04c0f6f47e86b9d89c3f9c1c3ba60b13b82b6581ec2995d3cef4a09f026ee00f7550e97b57788e7011d575eb44d1d844027442cf421f960320", 0x3b) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:48 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x10000000) 14:14:48 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa8100, 0x171) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x4410016f, 0x5, 0x2708, 0x3, 0x2, 0xf1}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x100, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r2, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="000100000000fbdbdf25000100090000000800010003000000000000000000000000dd875fa343078765a6e96162b98a"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000140)={0x3, 0xfc}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000100)=0x3, 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) [ 519.668601] binder: 4740:4747 unknown command 1869770799 [ 519.698760] binder: 4740:4747 ioctl c0306201 20000000 returned -22 14:14:48 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b`\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 519.741752] binder: 4740:4755 unknown command 1869770799 [ 519.766765] binder: 4740:4755 ioctl c0306201 20000000 returned -22 14:14:49 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="58c2eca27aea63a10192062cb62d95980f1a0fe6a71fd8e305464901ae8ea5a9bd651839ae004411b3e24a7c6957be886b6023d6e47fe2c2d034fcd4165a83f88419730592cdf0cf4354aa08b1ae1580018d7892f324cf", 0x57, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001580)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20201}, 0xc, &(0x7f0000001540)={&(0x7f0000001340)={0x1e0, r4, 0xb04, 0x5, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaa2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd96}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x495}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x348800000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4836}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xfffffffffffff888}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, [], 0x1b}, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xb5, @empty, 0x59fc}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x81}, 0x4000801) 14:14:49 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x11000000) 14:14:49 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b00000140802000800010009000000080001c6a2c7088c"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:49 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x101) [ 520.033214] binder: 4784:4793 unknown command 1869770799 [ 520.047856] binder: 4784:4793 ioctl c0306201 20000000 returned -22 [ 520.061628] binder: 4784:4800 unknown command 1869770799 14:14:49 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000080)={0x2, &(0x7f0000000100)=""/204, &(0x7f0000000040)=[{0xbb0, 0xff, 0x3b, &(0x7f0000000200)=""/255}, {0x2, 0xfd, 0xea0, &(0x7f0000000300)=""/253}]}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_nodeonn\x00\x00\x00\x00\x00', 0x2, 0x0) getpeername$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000440)=0x1c) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:49 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}) [ 520.082352] binder: 4784:4800 ioctl c0306201 20000000 returned -22 14:14:49 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x1c000000) 14:14:49 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\xe8\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:49 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x200}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/\xb1x\x06\x00q\x133Enet/itv4/vs/pm', 0x2, 0x0) clone(0x3fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x1, 0x2, 0x7, 0x4, 0x3, "8c0be9ccb55dec827fd28e059161efb403dc51f6f213b2633c0461beea0def521e9b5c46a2b8391bd347acbcb023fa7c08abd2cb33a0a51dfa9265528508d8", 0x8}, 0x60) 14:14:49 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x20000000) 14:14:49 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x101) 14:14:49 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\xfc\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:49 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001292a0000fb5977962253a142b0a3a36e198e"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x400800) 14:14:49 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b0f373fbf016fd99d06fe5a200003ae800000800010009000000080001000300000027647f6a53da9d7f496148b278d4dd536431f6ed1d5351ae5fff43"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) ioctl$TIOCSTI(r1, 0x5412, 0x800) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000001c0)={0x2, &(0x7f0000000940)=[{}, {}]}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000180)=0x4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:49 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x8, 0x0, 0x20, &(0x7f0000ffc000/0x1000)=nil, 0x200}) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x3, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x28, 0x48, &(0x7f00000001c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x1, 0x3}], &(0x7f0000000200)=[0x20, 0x78, 0x68, 0x48, 0x0, 0x0, 0x38, 0x40, 0x28]}}, @release={0x40046306, 0x950}], 0x0, 0x0, 0x0}) [ 520.535987] binder: 4852:4859 unknown command 1752458614 [ 520.573934] binder: 4852:4859 ioctl c0306201 20000000 returned -22 14:14:49 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x3f000000) 14:14:49 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) select(0x40, &(0x7f0000000280)={0x9, 0x5, 0x4, 0xc6e6, 0x100000000, 0x5, 0x8, 0x101}, &(0x7f00000002c0)={0x80000001, 0x7, 0x3f, 0x2, 0x8, 0x4, 0x9, 0x9}, &(0x7f0000000300)={0x1000, 0xfffffffffffffffc, 0x0, 0x20, 0x100000000, 0x8, 0x0, 0xfff}, &(0x7f0000000380)={r1, r2/1000+30000}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$KDSKBLED(r3, 0x4b65, 0x3) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x8, 0x400, 0x2, 0xfffffffffffffbff, 0x4, 0x7fff, 0x1953, 0xfffffffffffffffd, 0xff, 0x7}) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f00000000c0)={0x5, 0x2, 0x3, 0x3, 0x101}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000140)={0xffffffff, 0x8001, 0x4, 0x2, [], [], [], 0x8000, 0x1f, 0x40, 0x7, "0f491360b89f14b39395aac777183d78"}) 14:14:49 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\xfd\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:49 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}) 14:14:50 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x40000000) 14:14:50 executing program 0: r0 = socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x1000000c, &(0x7f00000003c0)=0x0) io_destroy(r3) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b0000014080200080001000900000008000100030000001b25afd7be7ab8ee337cef2cef2616f46bfb390521eade7b6b84f35af70e09ffd6394a6a0e037c8ab41f8ae311f048527c8c3d14c32c36d4d7994fb79a3770973bd475effe8321f1dc08444d6f31"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) fallocate(r0, 0x8, 0x5, 0x1) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000004060501ff040400fb00000000000400000c000200000022ff02f10000"], 0x2c}}, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r7, 0x1}}, 0x18) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r9 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) [ 520.994927] binder: 4904:4905 unknown command 1869770799 [ 521.022295] binder: 4904:4905 ioctl c0306201 20000000 returned -22 14:14:50 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:50 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b0000014080200080001000900000008000100030000007410cfcbd67be1b1c8e29628f9ff8ae5b82053cf13d57e4eb433ba2e552ba70800273775c8b572b015340b918299821953bf6385c49bacd2ff0211bd98f0429ce9b0b0c18a3665ecc8e89ef72b925e"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:50 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x73010000) 14:14:50 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b&\x02\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 521.229524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor0'. 14:14:50 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xe0000000) [ 521.286369] binder: 4938:4943 unknown command 0 14:14:50 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001292a0000fb5977962253a142b0a3a36e198e"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x400800) 14:14:50 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) flistxattr(r0, &(0x7f0000000140)=""/142, 0x8e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 521.319364] binder: 4938:4943 ioctl c0306201 20000000 returned -22 [ 521.385712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor0'. 14:14:50 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="da8b3cc3660001742a0000fbdbdf2546b000f0c73a060000000005000040"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', r4}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000100)=0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:50 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)=0x0) io_destroy(r2) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0001742a0000fbe82a48446b000100010009000000080001000300000014293c032eb22ba596dca2b919fd07d3cf721f76da091d1035f20eeac1b7a662"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r7, 0x1}}, 0x18) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x22, 0x805, 0xfffffffffffffffd) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) r10 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) r11 = shmget(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getuid() getresgid(&(0x7f0000000200), &(0x7f00000003c0)=0x0, &(0x7f0000000440)) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000480)=0x0) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000004c0)=0x0) shmctl$IPC_SET(r11, 0x1, &(0x7f0000000580)={{0x8001, r12, r13, r14, r15, 0x10, 0x5}, 0xde7, 0x9, 0x2, 0x10001, r16, r17, 0x1}) 14:14:50 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xe8030000) 14:14:50 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b6\x02\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:50 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x600000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffff2a65}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r3, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0x8}, &(0x7f0000000200)=0x90) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 14:14:50 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xeffdffff) 14:14:50 executing program 5: r0 = socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x1000000c, &(0x7f00000003c0)=0x0) io_destroy(r3) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b0000014080200080001000900000008000100030000001b25afd7be7ab8ee337cef2cef2616f46bfb390521eade7b6b84f35af70e09ffd6394a6a0e037c8ab41f8ae311f048527c8c3d14c32c36d4d7994fb79a3770973bd475effe8321f1dc08444d6f31"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) fallocate(r0, 0x8, 0x5, 0x1) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000004060501ff040400fb00000000000400000c000200000022ff02f10000"], 0x2c}}, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r7, 0x1}}, 0x18) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r9 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:50 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x109002, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "d88f08c9b3fa37393e14e8234f0931267e626bfa"}, 0x3a7, 0x1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xfffffffffffffffe, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x400001, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000001c0)={0xfffffffffffffff9, 0x3, 0x4}) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x10000) r4 = socket$netlink(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="24000000260077000000000000007701000000ff010000000000000affffffff0100ff10", 0x24) r5 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000000)) stat(&(0x7f0000003a80)='./file0\x00', &(0x7f0000003ac0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003b40), &(0x7f000000a900)=0xc) socket$netlink(0x10, 0x3, 0xd) gettid() getresuid(&(0x7f0000003bc0), &(0x7f0000003c00), &(0x7f0000003c40)) getgid() syz_open_dev$sndctrl(&(0x7f0000003c80)='/dev/snd/controlC#\x00', 0x6, 0x800) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000006040)) stat(&(0x7f0000006080)='./file0\x00', &(0x7f00000060c0)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000006180)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000061c0)={{{@in6=@local, @in6=@initdev}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000062c0)=0xe8) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00009fe000/0x600000)=nil, 0x600000}, 0x2}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000006300), &(0x7f0000006340)=0xc) getpid() getresuid(&(0x7f0000006380), &(0x7f00000063c0), &(0x7f0000006400)) lstat(&(0x7f0000006440)='./file0\x00', &(0x7f0000006480)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000006500)) geteuid() 14:14:51 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b>\x02\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:51 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20004020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x8, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x3ff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sync_file_range(r0, 0xffffffffffffffc1, 0x2, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:14:51 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xf4010000) 14:14:51 executing program 3: r0 = socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x800, @ipv4={[], [], @local}, 0x80000001}}, 0x10001, 0x8, 0x2, 0x2, 0x40}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)={r1, 0x401, 0x79, "348570ed6f10466dee71879837f5a4904c3c1236196a44bf0d010a83f8e83ec5fdefa134b7ffb773b592bf8fa80f56f285ac2faaecb61f33e0fc84ee092f89499a2035f316104bc43e644b8b509f970832e81019fe631ffe45818487f4192fff04ab5618448164c4bdbf23313155cdd9a918df949c504de003"}, 0x81) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r2, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r6 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r7, 0x1}}, 0x18) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r9 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:51 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2000000000007fc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 522.005511] netlink: 24 bytes leftover after parsing attributes in process `syz-executor5'. 14:14:51 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xf5ffffff) 14:14:51 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x0, @rand_addr=0x9, 0x4e24, 0x1, 'fo\x00', 0x20, 0x5f, 0x7c}, {@multicast1, 0x4e20, 0x0, 0x3, 0x100000000, 0xa}}, 0x44) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/100) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:51 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x80\x02\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:51 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001292a0000fb5977962253a142b0a3a36e198e"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x400800) 14:14:51 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b0000014080200080001000900000008000100030000000abb65440588550366c5b68dc6f182ca28e5361e1932c30a9f42f189d9950145bb45231c1036d10a4b4e2842d927048ed532ee9f33301bc43fd281d9722acec7287b4acf7f793f22152531a5416e02aec0d871b315814076b05e85fc5e0c2a95256f99da"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:51 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xfe800000) 14:14:51 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:51 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b00949b100ed23b6fd8e0000000000400000000000000082018e8edb7073c3b3c82c98ca3dec65950f7cc7e1e865f2c432be837ff6c386b6e54860566111af96316d18288068a11f9bc5978cc389ef050502ff4ed5271dae8e5bcc214f1a88c9e84f5d0ca60a6f1b519682400fbd7d00892fc1c63e02826f165d8496d811c3653e7e7595ca9be1f479e0c4f5476a7dc28ea7087c36af34b974bb772c522509636115496187abeb7a4620265d99ed8aa8150c20608228f05c13d680c99a9fd16ac17a0c43896bee29e77738049801"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x1e, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x4, 0x5, 0x963, 0x1, 0x81}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x4, 0x1000, 0x8, 0x4, 0x5, 0x6, 0x6, {0x0, @in6={{0xa, 0x4e21, 0x38d, @ipv4={[], [], @empty}, 0x1e60000000}}, 0x6, 0x3f, 0x100000000, 0x9, 0x8}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000980)={r9, 0xb9f5, 0xfff, 0x81, 0x7, 0x6, 0x38000000, 0x8000, {r10, @in={{0x2, 0x4e20, @multicast1}}, 0x6, 0x9, 0xac, 0x6, 0x5b}}, &(0x7f00000003c0)=0xb0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:51 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xffff0000) 14:14:51 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\xc2\x02\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:51 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b00000140802000800010009000000080001c6a2c7088c"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:51 executing program 0: r0 = socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x4, 0x0, 0x4}}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000100), 0x0, r1}, 0x68) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000170800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:51 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x03\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:51 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xfffff000) 14:14:52 executing program 3: r0 = socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)={r0, 0x0, 0x0, "beb3b5403fa0e6776e9e2835093736618e0e0961cd6e3857e2a68fe1e8d6fc40277015a85ef0e895656d4134f89c77a060f114d9ba5cc42d14b63aae8cbea80b8ed2a8626ed1cd1eeff107aef9108c2a5ee0592f4f61c5e5cc8f7dc283a2c88cf117b2bc3a3b04fddff4f2901e514fe917efc7eacfa7fbb26b6c264516da96b91ab4434dc1b1d947872942f30c3dd72b551332b1900b49d3c47133e3de844f391dd918446b9b97"}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:52 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xfffffdef) 14:14:52 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)=0x0) io_destroy(r2) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="0001742a0800fbdbdf25063e79ea65285cd3c8f967799e87b79ab00000140802bed5000100090000008d4ee0000300000059f7f0d18417d27599b25b37a51cc27c5bfd2494054afb760d448fe95a69e136f8b0a4bd36a5849df1c8f2a4ed7961ced40289ba03eebd1e370b440b6f56c79627f8d83d314aac1fdf4a3737056a910b531ba2"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000)=0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r8 = request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='TIPCv2\x00', 0xfffffffffffffffe) r9 = add_key(&(0x7f0000000a40)='pkcs7_test\x00', &(0x7f0000000a80)={'syz', 0x0}, &(0x7f0000000cc0)="aa0b3477057db7bdc58d36796823b28666181041c00065c1a4d005ab6d4f3cc7761cfb75f3e444d0fa85cd70ac3db3205c345db1d409b40d231fefcbab1797aecbfab41f680120116009666bbe846567a0e1190929249a20b271fca5ea3a892fe2ea1d77bc93c53ad6e4f17883912e3a4edb2a6b43785c1dfca9db8b245da23b5a6aa4002f350de0a40c196639ceca77d7fb819271165004461effd8d03cdb9d901c3d7b1cedb931ec116ab2c1450f98adee4c0fb96d891339a4aacff50ccbc5ad6e3364600b60c76e8568cd76fe7873ad71916f995a2b590f76b23e247b73af5d89057cee2c3e1a8c63f8451d5b8523e9980b26904f57c6ec5531dbd42a0180d4bf82f63cc2749dee7609240b20ab54b62bf5ba238c0290fcc4afabdec3d0b386b6b9911a8bc5144b2ad8a73c71b537266c80e8a8bfab3c51819e97f62a320a70c03b90ef9f13cae963a1b49fb2d6decd30543627be7e0d30d69443666e4f665b51af89746c588c64bee1ac2cb28c7f51cba6a9a13f37f21533c74f5694000dc248e1888698f0b3460e1371ae369eb699407fd8ed1b17d15bdcb5015373e5596a4561ea7b6fd1768309815562f1a8c625068edba82074ad9b033a799f0182da5b6e2561b49b1ef5d0e0e7d2049d956c76a8f6318a184918300a395ef177c46cd57cd0cc0f1dfa73a08566d943f6cfe686e4ae9e6b540ee202634e63ab8369de22d6413fad8494737026a8bfefacfec6cdd3606a83232e62fbd2743364b6c91b7e995b8aa1e996997035f84b7de6db413592734529b03d98021f8970ac8acf53b5180e61453850372e218baeef71b724726de90bc46f67d112feeffc1cadfb81ea02a75ab4de7c439a6650fd6719f5b67e6c936f8ada2dfc5c6a694efb697a029c4c40998ee6103177e3a3738d09b45d421ffab6923ba614d236d9bf8946e46ab14e5fe8d90d2c78dbc2487385b9db853a834e8a0f168f83e780ae6b90ec218ab0427e4a6f6e5a4b918c7cbd0bcd3cd0b585d969da11b81a9eab6c0c30a7d8efd71aa9256697f8ed254a71722cbcee9c68570e41e25f2140919f5e36161f935f02c360ca8b2485fbf46d1510a8bb1b17cc6fe6faac3698ce181af59eccbb71ab350137c176e4ea9de8649fea32dc2a768d1009f5e4cd43a51023731cc6f09538ca3b0f617168cacafbfb64a7cb32adb9ebc03e9eb09dfe3c8d60fd60d8f1f28be4f46325ce390c55471c23fa1dc702b2ade0bccae6b66e780849112ec138cc7b6c37fdadfa50ee79263411a5c0b1a0a06f1c34e958392361b2167a9a9dc014251d7db0e955a606907874eb79725f24b19a058486a7571b5d4f7005aee2d51f36d7e90dc3f667a2f442c82cdb1e1c6c725656ec208aa660707e59dcd2510bdaff18970e6002cac4ff29b21d1b43ce5e712f57f296417e6953cada4bc5e6121558e1c9428ab1b4d5a54912f5c128bee5b866919f08eb00d221ff2ee6b5112a957786f2d19b96cb2b68af00ecfa3b6127e8542c32c2d9c0fd1ba721c39161f649fff35ddc1812de40e32b76fcb61396d71b1c78d97bb57f4bcd2d4a5e0f2a3510d08f2c00eb2245106f62351fec0dd6b7c05f445fe749fd9b0828bc5088b1e6e3814b086a5db47d50dfad01958e159c79020ee07c275d38e9f198b0a4bd2f900456b97d7d7a22a87152833ec4690c55e4879307887459bd78188f687008276ee10fb4425f3864239bb5c39f6e6dc7d78b9da26a59979d2464fe5eab172845981f08bf97ef7a069ad8d85322cd6adc06691c1e134da19ca9df97360271a66227380fbf8f3fcca46ef74416134ed17ec1984fdc305351a04138bd25f87e86ad4a4895fbe4db0e77464b64ae7becf2824dfa4afc605cabac4fe6ca141b0d1ca11351ff02fd529959d1ad23651993ef4d5092b157019fbf78341fd1838aac12d6a6f6d9df7d43649f3b7b3f3b435a06ca454ddd3f7527ac22ba13298958d3eca87f82ecc19605d5cc349a836dc8a78264dc5d719154fd4e2af8236002211e5b7faad5433d1d41ee8f2803e4edfc5770efdd49f017f71c2e1721e5feb2809f9c5afee1c87cf72d57ad6613c035b2638dd029208eef700d46efd39ca4ffd5ce2fa59453f8d5a01854e88b9e8b337050d8d9e5398e24f48048b32afc8aeecebc6b2af12c869acffca347a239570b217be30687d9d3154415e724bfcb47b51bc130a79df76f39eaf34ab843357a8552d49ca219bd9febe80566b5d8b7cabd8b4d3dfe5d4c13e10bc05e76704f0f7c313750ebff858156f5949318c32478feb1de790262a9737a998b51734ed969e4794bd5d0bb5f5d6a7e852e65715c7a6e22f86b3160bcd3d01110bd784d23c22976530f4ecf67d718f459de95ca4f42a530590979aedc50cf6d6d102d6adb4fd6ffd831f256c6f2bc1699f66ddaf6302f4c0c81a6ffadd91c17e33f7328904733d26dac7312bf400cdcdf7654496e3b7c863a1474b3aa6b9759cdc2c340b24aa69464e4cb1e9661d852c7768dd17d363bd82d8068dd3bf20ca26fa3f1257c80c9b238c8c00e78bf8e23445560bfbbc8bf7b29a351e8968d16757d7a0ac0748fe723888907333b9ada9382906f1c4294259c7a1935c2227c36db620b008db00aec8af52a44677a6b262fac5d0755078512eed89977240f451095c138020f073b8c4c835c3b9ab286a3ceea2c92ab0bff6262fff81f19515b42468dfd75b1d50af55a147ab92baab9342cbcbd0d5e1837de3693f4239fce69d46a8db2b043edb55b3920a6590b5f33526e2de6444c3b5fd98311aed8e830a66fff7b3831e81a31748953d7c7f4ddec4e44c306fa87511aa007be152bf5ff80d712b1abaaeecddb0323099ff0d1253cc095a8f8bae7a0b46bc4f0e38ea062d47f1a40579e90b66a3392491d5db1cd52ea28d086c4d6232e00684e93c7a2d7f4b6bb7af2bc747ff17a2209f9cd727785fd23bb6d4da7647464b5522e1e5b2b103af3e76a1c0da77604767453ff6e504670b7241636fd189ed9a9f51f1b70ee143b23d2f4ff40ad13a78ed2de2051f8248a257ce6f7ce56bd564d7c2af9320aec709719a270c826915236ffa212dcb83c4347ac42d52c7b9395439812d8063f8cc5f48b332e5c6e956916877ff4a820255f68fea576d5bceb6639b32209037fdaccdec0a0341eb61fd82458e26a37459a25f52de0aa8e6389536cf5843784c8adfe5f023c531d4a7b91f3160ce592cc187530f14775fa31720c5d2c824dcc22f4aa2da5d563953676b343f6e23a55931eea1811ae3295c1e5b64014ef1d0a8aea6acd6743af551e57006e14c2a586e3e4d09532ce3c2ab0fb77b5377ead77dd0edfcbe57fad00f10a08c99a1e4cb5bc04630269743b9944e24e31f6dd313b615ce9df5a153bb27de1511172b62e942f7c37807933b3ba096d8fd03124c7b7de0e9907a087a66c5e3de0dfd7845d35cde57ff22788bfb35c4b2ecc5035643459ef18a552add08536671d8b6ddd79527265bb7152928936e1808442b0fea303ee30bb20a101b57d104837e995eebcbc8923a9b60b524c401e1882d71c78fcbb9287e1b2f2a291809958e467e7afafe23efcd9ba1c0f9a6c5528b224e839abb4fca18302e3a18b63af8cab2c04868ead007463d713ea229ff50ffac5f2cecb6afb021d665143974cc6356e0918dbe4faf7d92f2ed462cb016fbf5ebf833fb7a507baf68241ddbd0906b31f8055284fd2b49ea487c49f664db45ccff8ac29beae893c1fa45a0804f1047775974f548efe8e4b85b9661eeb5fe17e49a0a439580589e638b17235a733ac849099cafe963e3ddc325574ee2e0be1c3f3330df6df894508d8665d4495662960c1a3204fa4b57bcaa63cbc89aae824101113ab894d6766ae898d6551d33649890e5621d0509c287856380799cf0c3b6696b4148f21c6a9fabac2597b1a72d1704f817a2e54b4f7d5ce8df5c8ce0d132f9b7c7abfb6ee6e03f065ee4a6c0801bf3f39a4dde2cbd95b0a81a85976484e16c65f4e0e890d87cc5223774808d9becd3352a85c06100520f74b47fcd1fad51aa1648d5060aca8f539316a287f157c00b275cb69d284bd7cebe7cab7d7ee7c13114c03a2f572c75ecc495d27359dc4689fc6dbe67e51cd745530528c9dc5d7bbb88a876c5f19e8f819edfd16730ab6e2ec5d624ac03cea5a7c6a80af60572f2339c8177876744c1ca817d422ee1f16e98c8d515aab9c8ea90b41db99deda497792b880518b051264aa0051f83c28c9752183c9d91d7de39e2e02c1190cdda4d8593f7be8872faac17ff6bfad062d491b466e3971c4eeab28ece24a182f77bdff3c9fb7de63aea3107b213ac54d057531ba0959f31228542a7542f777804e898601ef3847e1d1fc947cab825dd7869086005c4d0bca123030825d75c38827f141a550cba4179998e6d3eaeed97c6a52b98289133d329ea881b055410594d53d2f259baf771dce25407fcf89551a877b283f15d29150f5e62a35df3480c62bacbe2e9194a6517a54eadba673e9d863fb46c4d0656b6757f31726ed4fc818e3c914a1709d1aefc7f6e0ddbe483eb8670b4ea48ff0664b2a13f0a46db73b6fa37ce6e238b6100935d9ad4d654adf8be252bf0fe10d0f4f1950971d111f3d571da71315c5bd22dfa7641b4fa137694cb8613471243d1226c40cdd17f4e5eeb9e7f03d4f546419fb0af7848f4a26e07f58d77fa25def5b93df784a4c38abe5ad721586446592a75b78d7deb8da94cbaecad797dd22bf88e4094952cc8344526912ed273b14ec6ed1730cebf2dcd99036599740c31f7f1f590f6f6773c8b2bde69099ee36fc49c92ca1a199e69fa0ad0d96947c68c9789243f62a30c22729ff9e699d41878e235b9fd7c2394dad283d5985f8e011d6ee9bb7569a4b3622a244e4ae7e9daa5221c6170f4d2c499015cfdd94e37c896dd9709eac44e2c8a775202c347a1d9aa732e6d91288df3a0194edd8340c1cacbe1f3562d6aa2edda0f1e7a5629d0a49964e6c2938116a851b2793480d009471780f7d5ec901e086d05098c17cdc9bfc889cb38773e1b4f5eb16d30ecfd17ccba0af10b689b402c56ae304bac9d06a3823ae7a61a543234a9e30e70e77e837090e3fb0243e1706e079f4a1a853a330d6580a47b78ecbc9498c314b80b32e33957486b05d7d9cf9cd3df40808f459d4df7afee2cefd1fea88ae8e00c35bc154f890ef5bf281cb16dcde1721fb961c956ba0115a633f8ba6db458500852eef9d9ed499ee6ed0084596c371b0644ac69e30dc7a05344f3d6d3524fc1faf37680026bd905464bf91fe828a95a9a41bc4091839e4f73fc4ecc3b152fd90a7a85cb9326d3882dcbf3cbebf6f825b1885f23aae416471afb6c185d4518aca4ba0a862dbaf01b5c41c503857d4e33f761121a1040e92ff4455aade9fce0e09ffcdca802aedefe7de9a648522ac2786778ab6b3b582b1b8468f360167104a6ee70c88df4b4532fe94b23d61346adc8705b58afefdc6301f58885a66a718e3415909871455146a300cc46ce2be2e7aea3271f17d88fa8e81bb54012b44f41d7460df73fc31cfd691c147476c2334933b72d9e206ba8b374bd4c95f83f170aac5ecd22ef9b82b29f563ad9257292097ef1373562bb28a426a627bbbfb217053a70afb8a8abeaffcd414a4b6b036e7e1e2af48269efc6f87bdf50558789d2338a34038982cd391cb27ed69f4aeeadb519bf945eae44756c9d85a9ef8896ce7acdbe1116504119cdc1bc74a02f7a877956e78c93d53b5fc7518c411489a", 0x1000, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r8, &(0x7f0000000580)=[{&(0x7f0000000440)="e3ff0e76ff940049f698354ff087615a8341fa111066a90b62b73b4a3c1ee4e1356e94d2c9f305a637e7296554b0ca86d8a67711061fc312dcb080a6d7b861e015d6ca3ba966f5f755cacb0a6d81dcd6daa9339f964c22103a011ff388ff95a27eb7edd8a9e665c022d3df03980ae978d338c70400688c69c6459204dfd105f0dfa1a7451884", 0x86}, {&(0x7f0000000980)="a584d9900a72bec381d58bfa8d33ed6ef9365bc83f0bc91aaa0546ce1af813f2411c25b8c10f7ec642466c80e985ac8685d93eff2274655aac000050a180d8cac4ae8a8508a1910466fb5ef664ed33cbc6f7808618ca857df4574f6406333dca0915db3f82c5d406bf471e64598108557cec1f768bdcfab0cb01f4b1cd706b4334f1440c70af87c852f621e9bb8c2a83a32cdb5ce25edd116edf88fa065e1b55", 0xa0}, {&(0x7f00000001c0)="126a96221140135de51533ecece2c47b38a8e7ed3a178ef36d6569e9febb257fc363568a216bea8876", 0x29}, {&(0x7f0000000200)="0487f46a16280eec3f3dcac3c13715a5e2b16cbca7432834a788a0b0fb88fd25b73eb7699bb3f52400c6f461", 0x2c}, {&(0x7f00000003c0)="9f839f474776ef2704d25472d6862498ee66e2a4e8d6eb6a65650e58ffeca83387f4451caa3a538e14d7d4c44dfea0e88de76bed5ee4fd2a3fab", 0x3a}, {&(0x7f0000000500)="e23094e6c60a96e038339cd1071770810bbc8b9896b2d2eed35f97044d5d9d7ef2a2e05d90918cf1d0", 0x29}], 0x6, r9) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:52 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000140)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000000)={0x2, 0x9, 0x6, 0xac42, 0xfffffffffffffff7, 0x4}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) mq_open(&(0x7f0000000200)='\x00', 0x40, 0x0, &(0x7f0000000380)={0x0, 0x4, 0x1f, 0xffffffffffffffc0, 0x7, 0x101, 0x10000000000}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x0, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x7, 0xde, 0x1, 0x2, 0x0, 0x7, 0x208, 0x2, 0x25e669ed, 0x2, 0x8, 0x2, 0x4, 0x375f, 0x401, 0x0, 0x0, 0x5, 0x80000001, 0x8, 0x6, 0xff, 0xcb, 0xe2d0, 0x1, 0x10000, 0x3, 0xff, 0x0, 0x3e, 0x7fff, 0x2a24000000, 0x9, 0x3, 0x7, 0x200, 0x0, 0x80000000, 0x0, @perf_config_ext={0xffffffffffff9400, 0x2}, 0x800, 0x5, 0x7ff, 0x7, 0x5, 0x2, 0x5}, 0x0, 0x9, r1, 0x3) socket(0x1e, 0x805, 0x0) 14:14:52 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xffffff7f) 14:14:52 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="00017476dbd7e45a6c2a0000fbdbdf2506b08f03045200001408020008000100090000000800d900ec9f383b9fe8fe74893816785b9b64cf6a04bc92cad1348f3f5fc4e8a43e709d9f2eeccb793ec11c3456b445333a5dce04cde4eb2f6679"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000180)=0x4) socket(0x1e, 0x805, 0x0) 14:14:52 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x06\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:52 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000080)) 14:14:52 executing program 3: r0 = socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b0000014080200f2ff000009000000080001000300000063079648db6ac110dae53be458b1f06ebb3ccc45416681bb568477c539d71fb3da0254590ffa84ccf43ecc59e1882637634a66e8a4738256e3f39b3a39228d9c7ed272e166ebf6487041ae315677790f4446157d97bdcf0b967bca74c45555ba768c24f63691081166fbb235003a1658b8fafaae8203935b51a3a0439c4a70ed76379a952c554d15b278be944171e28c708fef61bc79"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:52 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)=0x0) io_destroy(r2) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="0001742a0800fbdbdf25063e79ea65285cd3c8f967799e87b79ab00000140802bed5000100090000008d4ee0000300000059f7f0d18417d27599b25b37a51cc27c5bfd2494054afb760d448fe95a69e136f8b0a4bd36a5849df1c8f2a4ed7961ced40289ba03eebd1e370b440b6f56c79627f8d83d314aac1fdf4a3737056a910b531ba2"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000)=0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r8 = request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='TIPCv2\x00', 0xfffffffffffffffe) r9 = add_key(&(0x7f0000000a40)='pkcs7_test\x00', &(0x7f0000000a80)={'syz', 0x0}, &(0x7f0000000cc0)="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", 0x1000, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r8, &(0x7f0000000580)=[{&(0x7f0000000440)="e3ff0e76ff940049f698354ff087615a8341fa111066a90b62b73b4a3c1ee4e1356e94d2c9f305a637e7296554b0ca86d8a67711061fc312dcb080a6d7b861e015d6ca3ba966f5f755cacb0a6d81dcd6daa9339f964c22103a011ff388ff95a27eb7edd8a9e665c022d3df03980ae978d338c70400688c69c6459204dfd105f0dfa1a7451884", 0x86}, {&(0x7f0000000980)="a584d9900a72bec381d58bfa8d33ed6ef9365bc83f0bc91aaa0546ce1af813f2411c25b8c10f7ec642466c80e985ac8685d93eff2274655aac000050a180d8cac4ae8a8508a1910466fb5ef664ed33cbc6f7808618ca857df4574f6406333dca0915db3f82c5d406bf471e64598108557cec1f768bdcfab0cb01f4b1cd706b4334f1440c70af87c852f621e9bb8c2a83a32cdb5ce25edd116edf88fa065e1b55", 0xa0}, {&(0x7f00000001c0)="126a96221140135de51533ecece2c47b38a8e7ed3a178ef36d6569e9febb257fc363568a216bea8876", 0x29}, {&(0x7f0000000200)="0487f46a16280eec3f3dcac3c13715a5e2b16cbca7432834a788a0b0fb88fd25b73eb7699bb3f52400c6f461", 0x2c}, {&(0x7f00000003c0)="9f839f474776ef2704d25472d6862498ee66e2a4e8d6eb6a65650e58ffeca83387f4451caa3a538e14d7d4c44dfea0e88de76bed5ee4fd2a3fab", 0x3a}, {&(0x7f0000000500)="e23094e6c60a96e038339cd1071770810bbc8b9896b2d2eed35f97044d5d9d7ef2a2e05d90918cf1d0", 0x29}], 0x6, r9) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:52 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xfffffff5) 14:14:52 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x16\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:53 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) [ 523.831120] device bridge_slave_1 left promiscuous mode [ 523.843536] bridge0: port 2(bridge_slave_1) entered disabled state 14:14:53 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x1000000000000) 14:14:53 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000140)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:53 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf000100030000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) [ 523.919110] device bridge_slave_0 left promiscuous mode [ 523.962677] bridge0: port 1(bridge_slave_0) entered disabled state 14:14:53 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000000), 0xfffffffffffffffc}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) [ 524.196948] device hsr_slave_1 left promiscuous mode [ 524.251609] device hsr_slave_0 left promiscuous mode [ 524.299919] team0 (unregistering): Port device team_slave_1 removed [ 524.313164] team0 (unregistering): Port device team_slave_0 removed [ 524.333364] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 524.387730] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 524.483811] bond0 (unregistering): Released all slaves [ 524.584095] IPVS: ftp: loaded support on port[0] = 21 [ 524.703013] chnl_net:caif_netlink_parms(): no params data found [ 524.734246] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.740650] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.747680] device bridge_slave_0 entered promiscuous mode [ 524.754498] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.760870] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.767760] device bridge_slave_1 entered promiscuous mode [ 524.837375] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 524.847364] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 524.862635] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 524.869721] team0: Port device team_slave_0 added [ 524.875501] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 524.882893] team0: Port device team_slave_1 added [ 524.888212] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 524.895777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 524.954808] device hsr_slave_0 entered promiscuous mode [ 524.992459] device hsr_slave_1 entered promiscuous mode [ 525.042716] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 525.049609] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 525.070753] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.077133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.083782] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.090124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.146251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.161788] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 525.178721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.187279] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.199314] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.218195] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 525.225442] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.240426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.249197] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.255567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.284747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.293138] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.299473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.307181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 525.315249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 525.323221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.334838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.345660] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 525.351675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 525.359430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 525.366929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.379441] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 525.400606] 8021q: adding VLAN 0 to HW filter on device batadv0 14:14:54 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000140)=0x1) tee(r1, r0, 0x7, 0x4) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x101, 0x8, 0x7fff, 0x2, 0x0, 0xfffffffffffffffd, 0x48, 0x0, 0x4, 0x3f, 0x6, 0xd07, 0x1, 0x4, 0x1, 0x4, 0x0, 0x3, 0x3, 0x7ff, 0x9, 0x6820, 0xffffffff, 0x82ac, 0x2, 0x4, 0x0, 0xb23, 0xfffffffffffffffb, 0x7, 0x5164, 0x8001, 0x0, 0xffff, 0x5, 0x20, 0x0, 0x8743, 0x7, @perf_config_ext={0xffffffffffffff5e, 0x101}, 0x100, 0xfffffffffffffc01, 0xff, 0xb, 0x5, 0x1}, r3, 0x0, r1, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:54 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:54 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="000106000000fbff7f0000b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:54 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000cc0)={0x1, 0x0, 0x2080, {0x1, 0x10000, 0x2}, [], "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", "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"}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008400100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:54 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x4000000000000) 14:14:54 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x17\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:54 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x10000000000000) [ 525.631563] binder: 5302:5307 unknown command 1869770799 [ 525.665504] binder: 5302:5307 ioctl c0306201 20000000 returned -22 14:14:54 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f0000000140)=0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000001c0)={'tunl0\x00', {0x2, 0x4e23, @local}}) ioctl$RTC_PIE_OFF(r1, 0x7006) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0xf2, 0x4, 0x1, 0x3}, &(0x7f0000000240)=0x10) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000280)=0x65) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="3c386294b48bf88620f2ae7a452ede2fb4f539aa01b9e93ef7549361fb7f0ab98eed8402a4c7ca4fa7ec4c0470d7015ffd9b7487b7d18ff1241885f22d29038ed606c87c9d47869e4afd2204516119e6c6fa7d1f9a75", @ANYRESDEC], &(0x7f00000000c0)=0x4) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x1b) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8) 14:14:54 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x18\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:54 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000200)={0xfffffffffffffffb, 0x20}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0001742a0000fbdbdf2fee78dfb4388b77daa122f060d8f02506b0000014080200080001000008000100030000000e48d6bbdff257cc6b6ffd0fd7e4793d2ca421d4a891cb811508c91e321d60f7fcf1fe0e917c6e83acfa718bfb723aa58797c1c3a2d7e09b46435f98cd1a207ef7430824a2b6763b7ba4c4eb3de882f5cba300f195d15d5e99145c94f41619725b8961c5652366e9a9d2a0c0143c0b3d96197e634e0b"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:54 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000140)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) [ 525.850587] binder: 5335:5338 unknown command 1869770799 14:14:55 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x40030000000000) 14:14:55 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000100)={{0x80000001, 0x6, 0x4, 0x0, 0xf0, 0x8}, 0x1}) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) signalfd4(r1, &(0x7f0000000000)={0x4}, 0x8, 0x80000) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) [ 525.927682] binder: 5335:5348 unknown command 1869770799 [ 525.956507] binder: 5335:5338 ioctl c0306201 20000000 returned -22 14:14:55 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000001c00)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 526.020038] binder: 5335:5348 ioctl c0306201 20000000 returned -22 14:14:55 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xf0ffffffffffff) 14:14:55 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00 \xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:55 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x7) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000180)) socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f00000001c0)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0001742a000030f0d47106b00000cec00209004c68635cacb8b90905ef7f5ae7d398e61e206101650fc0a23caec8"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0xffffffffffffffff, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fd, 0x10282) 14:14:55 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:55 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1207ef7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5a7ef65a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8c4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe707}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb582}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9471}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000440)={0x0, @bt={0x8, 0x5, 0x1, 0x3, 0x5, 0x200, 0xbe17, 0xc329, 0x6e, 0x1, 0x841, 0xcc35, 0x1, 0xffffffff, 0x18}}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:55 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x6, 0x7, 0x12000000000, 0x80, 0x0, 0x5f03, 0x10002, 0x1, 0x2, 0xff, 0x8, 0x81, 0x1000, 0x6fd0, 0x8, 0x54b7, 0x901, 0x1d, 0x36, 0xffffffffffff8000, 0x401, 0x5, 0x7fff, 0xfffffffffffffff7, 0x8, 0xc93d, 0x4, 0x3541ec68, 0x2, 0x73, 0x9, 0x100, 0xffffffff80000001, 0x2a1, 0x200, 0x7cc, 0x0, 0x7ee9fb73, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x20880, 0x8, 0x5, 0xf, 0xa2d4, 0x1000, 0x4}, r4, 0x10, 0xffffffffffffffff, 0x3) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x40000000000000, 0x10280) 14:14:55 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x100000000000000) [ 526.453055] binder: 5398:5406 unknown command 1869770799 [ 526.458665] binder: 5398:5406 ioctl c0306201 20000000 returned -22 14:14:55 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x02&\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:55 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x200000000000000) 14:14:55 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) r2 = shmget(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000140)=""/184) 14:14:55 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000100)={{0x80000001, 0x6, 0x4, 0x0, 0xf0, 0x8}, 0x1}) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) signalfd4(r1, &(0x7f0000000000)={0x4}, 0x8, 0x80000) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:55 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:55 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x300000000000000) [ 526.712948] binder: 5443:5444 unknown command 0 [ 526.732487] binder: 5443:5444 ioctl c0306201 20000000 returned -22 [ 526.770889] binder: 5443:5444 unknown command 1751213433 14:14:55 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x026\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:56 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f00000026c0)={0x0, "c12b8dea2a95299b49efc51d543e23b2aefe390046bc37bb1fc39ea52c237ae9", 0x20, 0x400, 0xff, 0x17, 0x7}) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x9, &(0x7f0000002580)=[{&(0x7f0000000140)="096f170aa1adb6be6be916734ac596d040f2868e3ff9d4e6703f24c46fdef2f4bdc0188d6b2298997b748da99737886073849e2586391b88b5a50cc2cbb586852039fdfc8684f0fd8047892d3b9eee8519ce5041ea792b03c916821366defe3ee4acd1bd927ee4b4ec5aa1144785e36dad0089d3ab35c73883e4be05803e4adfc31a88ce9f7b578ec6383eef5b1827ce96", 0x91, 0x7}, {&(0x7f0000000200)="914751cdeaae", 0x6, 0x4}, {&(0x7f0000000240)="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", 0x1000, 0x4}, {&(0x7f0000001240)="5cab35a7d3", 0x5}, {&(0x7f0000001280)="51caf362a9ed8ee3417419368a91ffc125bb55b2fe00759ab62b99f7abec3907e46f2e42c13263e407351cfe59324afd3d24ad8c3f7e684b096f003165379bcf35bb7c144e51689130bd44d84afeb41c39a87ea85c915b9a69b198262f04ce69b793c40295498ba8a6c3cee764668df1666dd720f04f89f4c5b656a56c1a3712d16101933f430f992c68f76a8e6898a2d0e70999b2d2027ed3f1dc67a001a8e4379eff7db6d072", 0xa7, 0xfff}, {&(0x7f0000001340)="bfdc7d295e6b008a2afcfe43b4571fdbe3a5aa3c07899a234374ca443dc2aabdc551b46aa51da625bbdfe2cfba4f7769ba74f36ac18291e93f59c6087eda5fe197dd13fb304e6ef3ed5a1bf0d9e02fcd4bb2807fd80af329", 0x58, 0x10001}, {&(0x7f00000013c0)="7d17c2e3eadafc8ee1df2f457478e9f49667a7eb9f8579ed9806c01eb80541f4afc432e3975f417d1abe8fc969c9cb9d928337027368553dad4c2a98be784eaf11628c2a9e212c9f3d177b48c083852df703446f0d7a8a734b3896a4939bf069c2170e060ea10445b588f6bf845d1cfc1f109d952a2ccac9f26996fc5b185c4f057c55918a1f32f0bee14fd810d8c599e599c1e63ce97bca3601d9b4648f4adb934f26", 0xa3, 0x6cb}, {&(0x7f0000001480)="5ebe6fbfc3f70f13a581e11f59e07e1ea2a6bf4f6a91f805da69e65ddddd7a1b3fe7545db024773681d25e00d8e11f4114b6d0a17eba2735778d545287230af20582644b1ce0454165e414d8e8eeba14a469b25858ba31d0538142623ea2a9c131f781917441ffc9a18ebd22a5452080ac2c493c364f3a92d9e14ac23428ece96cd2546a0390190fd1772dc9746fc8f33c62d0fa3db8dfd5a9b74294d22a07a966c918a3730c79b98262a1b873a20d4881a84082a90244e5a731b60d42e382de9a7f609705d8406af2a83a61b4e22909819b40a9ac4f1bfd76363aca23cfcd982b4d18cc1acba6fa1c50ef3497", 0xed, 0x24a1}, {&(0x7f0000001580)="d7532c625d30dd82cd47dea096e56f787d90f823ce07963cdfc42b46dfb44798086a3838c4c5fab6307407c0e3aad5089e07d1dec86b4513bd10ce5df663f779b554c33a6779e2c7254b54d01e358b9974df4359438c084d4bc45fe1757b4b45cc90e0121c9c45d9f0870e5d945f43cbf496f60ca67c65547ff74935fc1a5ea6ef5d6d9ff25f9497e967a03da6f7d1cb7b183b10cbb3034cca04b0686633df8703bed149b94d4ff8c08715517916c3d2ffa7dfc38841995d5509462f6556f754b6104481e7b9178532753fa82a95a1ca5e95cabccd609c881f8f2f24c9e970a0ab70c3f8f07e4bf3d41f2dc3e0aec28352b3e386f5bc8d45e6da5f7b594569c827bc8d06b0dfebd1115a08705cfd03cdcc4a9e65f902c37873360af5ae9df4107cc246811a8d8bf458dbe43ce374de7463d25ca1cec1211313807984157535f53a8fc6b22da07b1ed857f5681edd9fe1f57f8bc5141cdd721101dfa4f60a0a75cec9c5e589f27a670bba8322d9858ef0c7aeaf3af39bbbe880afd778ef8d651d35dbf4d3e92197a53bd355fa5a7350e0794d5d468111a1a94eba081ef7cd2d4959d06bc334d5a608ce2f50cd48ab75446c1797ba387362f36173df6e0babe6165442091d653202ca55d79bbb71652098e37333e9c60839c4b17bb275f864277baba857fee5ba4a085b74fa32b5e3f84117d9393867b8728756a4196b7cbf846c3b9548b6b1fc65f30ffe7ed288d3feeb2ac87401a8bd286c7a52ddb272a1e3abff8258e1487be05ef8d4ce0fceef07e7b9b724fb6344960d8f9985908bff7155aa9e9c80719c594c612b4c9450bc6f514529c45dde7b2da92f456f845e711f763421e2e9f6f19faabaf0a2768a66828805c7ed94ec1f2e592b370163d6211e965bffe673ffed51ec5c8870ba23c495042506b9bc3f2f3454b509304c5d51ed05343d88c5c064d9c7f5a38b27548267a1289c29ae4f3d23f2cd2e10c64894f042d44d2ab4577e4c537b6fd073ce4e77dbac4a4eb099cb8682c29e0c97d5cf0b10f6511325495ba0232b51b8586cca30a394e7b922b2e806150d0bdd6065946bfb00e922f285b7b0330e6bf593813f9284131a58d1f74a59bbfd552ee4297f27b4fc6f495cbac0425ae2b9fb0748146b4140c93f2642e50400ed27f898f93e90b2577daf1579ae376a2dbd5d663f4d83c4088e24913cfee13f27c0a7a6d9ba85960dd330743cc94d3f0338b6cc81613fecc1d386dbecba6a12e1c5e550147f76ff4b4c480821781487341073e5d7b5958268b7a1b4342101646cd60d862f58bacf93ebb9e75dbb4d0dacab724f29fd32e284c0029ce19dd6ebc8d54781315ef7366bee82b3a0caa42ead5051ea4cd784b7f084871d4f1266cd0352e8c001346cacb6a01e38d23070c2561798660b25af845d53989437ea04eede3470b0269a138973ffaaedf858f1d5445dd8250bdbd9d81398a35a65e8ab12a6eeda013e6856e6c61d37be03fa15ae9398109f494a180b282f591065f384f4d6942ff36c6f9017ea97c824e08dee5f74e759ae7bf180a78c90b517cdec358d0f4628d926c3babe595044d58da2f2f13da6932f79d7a5b05e82d4d8316536c892e0ea296d640c3e6e19b5cf57cc1862e7afd4b4401b6630b66f47ac4cb785a321baa0fee4490a3f20053712518d6e6290b96b5d439ea900f8574898638a647d521c2fd0c14874670466aaf88d804891db6a4cd2e7b4e6fdfd58826fd3cf23cf66aeb3270b6a6ee0b7d7f8870ba0fec355730c0b85963892b3705d5d68078526cb8763f6b8f82be4c1e51858f911b1fa91695bc4328d3b3b269daefa2a1b4abe03552321bafc1dae253d4cfbd9b23b26827762a850b644023115cdd1898a7dd74d9f30e66f555a0e5c3b55a26b0516af458eed9cbd9d1325ffa4ba7a0de6a3fb6b5148bf42e6ed8191ae833bce7e1f44f905daaa18b847ced8b2223c1fe75def466c8abdafa18ca21fa8df8e9974bf18828de7323ed9a64c08ae3ff8b55bcd068adf47cdf2d0cebead6684c15a8322b2607e20df4c670d13ce4497731133cd9623375f4417c835b7d328cb8562b1c967b509e8b1310034363b8a4296b2f8932956c1bb60515eb431494660a3e7e75758dfd9938bdda1edd697588c2ca90c056b9a62fa3c633f65cb7d6d57ba18b61432d23ed68cf4eadbb0a5c482f9f6d0fd7acfd8ea8c222ac4a729a8504fc4cf4af70f54406ff93fb30e32ad5a9b0d407f3f786a3763dcbc62faa34f4d9f02fa4cd3eee6063b0b1fdab861f4d08d8d70f3f5e3b53f1336d0278625a992b3d3febce7584477539b1cbe00193509e8237991c532d30619136e9f0eeb107025363495f088570cd407c7acb4d178b844821d6895adb18154a2cef091e4d0d22085a3bb42eee48ec2bf73785a4e637d52ad901131f9895746a306266764121a251603240b3cb766d81cbd78933aa701fdea98795b479f3255163e3fa34ff05a9963cb5b7ad92b75fc7bb78e6ba191f3ad5b6d8a781280d878d5e8e10ddccf6bddba176f952405c03ddb0d3f5e22c505bb447d33674e020e98d56952df174fbc107a3e61d9e51babd1410928c2ffab18231fe79eb0a6c27c4cda671f6ae52a34653c0c03d5b38476bcf9154f166b00acb6a68720185a51ddbe3437039c9d7a4dca9f3e6a845e3e7a71a1720c4d24d3a4bdcf1ebcc03d7c66314fb8cae43e6530e39b5f9f133d957c56cf5771d023b8e1f9afb30ce390b83d7b2a62d609f0271b244999cdae249a4d3ef1b5f4ef359f4be007289e269336a4d1a9adf40909d19e4cd1ccd40a36d43470ffead4fe19864e3a0c74f36a77c7751679a85f973c19369b72aab1fbe82fd2712fbd8a47518fe80ff430d1e55a20f968cc49753cd226524d317d20ebf6325f24e0e3fbaf5273437d1088ad93cd8449d80510c51287ee4a676c0ee4e97036b33f980a9f8d6a59e56f080d68b89ba17cfc30f63b7209604fff0a763f7e8a3a4e5aedc73eb6c37157dd7241779d37adc1dafc5fe0cc83c2bbc56cbab9f35630ddd1a910e7a9602074439a9db93a5d48cb9d9c661936f67423698c1a15cb157eeb5f7003c6fd9199013e231a9f177d74f85913325215207158e3f3fb86fac996f4499a051a38fdc1b5a8943c8eb06464ae830f183c1999c8531edec310f76b0b8a3fed67ae0d3e12bac2c5629107de3ced47df9ff9c00f8aac856ea2657bc2839b7cde265d3110f45db9b8da405eac6a8474401f4e6f1824b06db2b072bfcae8e3b8db44a3c49f4f78ffdd42af19754d78022b064a60c26c9859803493ea4a345c66967ea4ffba89eb3500e5692c89a38cc97dd8adef7dc4f2493a638741e3109df7b4be62dc03fc0eaa6d95ee52ff62b22342ced51a862f4e12f5e1d79ca3f8ea9ce83bbd0391897d0043a02208f564c8b33bfbf0fef81d30ee82fb769e56081a0da7c52819e20e9742512bcbbc8e91cac6c6906eac28c5fe3d4b26f0529cf431f26e6248bd15cd27ff6b1413e14ba75529809ea1b8b24b8b55e6ffc1ecefded650f61b6660ed3e85223d9b834e74d13ddaf8b84cec736ef556226575cf9d5a93bc9f50701c79f0835b397b85f534ffffc5dfb42f4d592b18a753858865f9faa8752a340f840f6405b79651d706f66eb98d66d04dac963e9c49cbb24de6eda9be78ed000464e611a7a5cd749f0bb1bf4ad60ff616e018f1245ddfb1e0525c5b14bb870820ff7f66d4e77a0b49e262dc7969412afb340255493f288d80e5845e8792073e7e288ecaac5f9ba374a420edd0f0adad4e44f1dcf0ea0e2789923ea8a461bdda885a58de8c39fbeab3113fd2054a04e237317a310ea2b891a955f6ddebb78d0446321e80a3717fc3c428ff5ece2d514f2ecc80d19394ba25086a112979fe3a674702d8268f25f29f3a1e35bb7b72b60f525dd510a7113c526798cc5f30aedebfb5dd8575ad1971c17df34495b4a6eff165908ed1d47757c0754f8c294899cbf9ed2d0e0fd3ade4e236ecc9a77db88e674da94c6283e37ba749421281ada7f514de8cbf510062ac5dba2b23dbf19d17e6c013ee9296154832f0618f4c3c28fc6c2826d576abdc3820108dbce0d054dbd57839242fd48797eccb14cb469555aee4ee9b847b542782d8a7f633fd61b298519e409527232d932e8dbfd97d53676e51ac09cddd12f0cf77541236cb72223a6bc9061f4a28c69d832c9722dccab90966bf3a2d88dc7c37a7e3a8b7a8012e86631fcd626d929953575f6820eafab6690f52c055fed1d634dc2dfdcedadcb4f92a66402009151120683e90274fc92237de29346c6d52f83d080ff62a9725f73e4c6bdda384b3f840611319e77588220938af7b5db6d0408c6ba1c1f6e153c8386cb1a0789a64baaca5ce26cb9ff774d3f5c83ae7d285c07ffff5bd13505ba65f410152fab5a722c7212c5786b69790ed8703390472eed091cd2825608e121bdd2bba8152ee1efe62c18509876555fa89ea5a889d29e76ad96ef3c28284d4fb25fc9185da20c51fdacfbe959ff1754fb39db684513cccf1a1333a3f7e2353635d8432c5faf23af1a2b0cab06e4b86f92a5a6b486cf331a2d2e7668f749b460be3059bc28f77c80409b88c67073f3b086c048bad970ecc2d3dc7fb8055f1daa864b754439d46e8dffdbe6f6ca6723c998e8285be1fac4210fbd47a7d632c9acd056e10a3657b0f0a89e65d05d3164fb3fc857f895d47f633bb04891377b5a3da7137042f4df04a8a6594d5b3ea70df8d307f6f8ac707bf565ae7c404e24711ad8325529d4b8ee4c213e697c11d44fe3965141e86c7a8ce18e4441470ed3a5d87825317920bd9ea4591061db44ea928dd15ca58c990269b02e098ae4eb1051de462d693a6ea200d621122b10643302bc910038851d6da82717d94fbe170918e8d3574b1a517e85214249294c98cbb4c50cf85ab083ca6ce7311b23d86903ea061cfa3939078407bc98f9efb31d609f1f4f0d2a01f3de49f4adcb1aebf6469f1d35a0a4520d4bb3c605ccb87d4fda85849fa10c02220af37b75752d0a537199476055788a4094773df94286c9c5a2de5a334c4a93d2b42f747b26c8f15add544d5161b52e1f6f0e0498a1a6ca9fd726c0de9c3f85a2d1ec67e679292a48ec724d9b897c08f93dc18e0bf9977eb54ab6a498cad5abe0a9d8721ca22ddc259433b3d86d0f2c10b7aa00e79f75efce6755d66bf31cf7548dc1977b133c71496a272604ac76bd163f5e148a8afbf79eda879f1d92a117b796fe18c6107e0c4569fd68b0a115583077dfd4a92a9eb819708217c1439aeb61705b8e3e24cb7f5589ed62a7b8a07fdf65aa5313497bcc5ece639294c292b31b95fab543783607db5aa0517f182577a400204791a9b464eb0dab8a571108f965da1acde93960a06f8510bb6cd2cd6bb145ba1d96821023ef0bd13bfd170a0f5983aea45c6fab7e038a039c9a8cf8739b5f34701ff3ed49754e8ddb1daa2c9eaefc31e1e11869bc29bd81bd0c43d0795a116fdc43dd6fe3816cb61b25c3d56e03cd6ec14b53917db18ee796fb89c50bf3a19a811082727b0d8a8f737c2055a500901ae5b13020ad6b2894fcf9ec4611c6692677f0c87e7b2847630a3e0ba5132d8224b3b2f6db4a1c0ff56fd172bc75c0a5d32f473f9c9fe0854d93ba029971d2bd695e28fa719d8bcf48fa3d02cccb98f024b4ae90001059f807cecf4d4539824915d85c9e2e56dcb09ca9b00e0d01652c7c2bd77e889a4aee173151b79d32d55c374810d157cb7df3f67ee1922b6a6", 0x1000, 0x4}], 0x1000000, &(0x7f0000002680)='\\#\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 526.831516] binder: 5443:5444 ioctl c0306201 20000000 returned -22 14:14:56 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x2000000000010, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x10000200007, &(0x7f0000000040), &(0x7f0000000080)=0x207) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:56 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x400000000000000) 14:14:56 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000001400)={'\x00', {0x2, 0x4e20, @multicast2}}) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$nbd(r1, &(0x7f0000001340)={0x67446698, 0x0, 0x0, 0x1, 0x2, "bc224144915f0c93eba398cbe50fd9eda4ff4e195b4fd59fa21496a979fd7db11597a811e0c7b360a5b68d05da0535895cd31545faa4c6115b4a85335424c457addf43846d7d2671fddbaa530d072af9"}, 0x60) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000001300)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/65, 0x41}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000200)=""/172, 0xac}], 0x3, &(0x7f0000000300)=""/4096, 0x1000}, 0x1) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f00000013c0)=0x6, 0x4) [ 526.988531] binder: 5470:5477 unknown command 1869770799 [ 527.016247] binder: 5470:5477 ioctl c0306201 20000000 returned -22 14:14:56 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000100)={{0x80000001, 0x6, 0x4, 0x0, 0xf0, 0x8}, 0x1}) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) signalfd4(r1, &(0x7f0000000000)={0x4}, 0x8, 0x80000) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:56 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14, 0x49, 0x2, {0xc7, 0x1, 0x6}}, 0x14) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0001742a0000fbcedf2506b00300140802000800010009004d00080001000300ff0043497497f05ef178ac8dffd7ab5b2f31b55b62f987fa8c25c25d5c1278495c361f27a86587d173dba1b34a416a2aed6b6a7dcd7899c7a5bba27c2dcbee664b2c04287b06fca81b3a33e9aa6de25d67693f9810d6ebcb73f9f22a7ee2ff503cca31f9caeb7a982afe6c1fc21ab00efa0142c001c692d4bdc227df0cf190b4a64fe91cbe52c7805b445dcc790910e1e8453d16c6acf216e22163632f763e8aa257e38b30421f9bd19414de5fec14ca372929e1292c40d17cf1e60da8a5a641a21ec517e68b"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:56 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x02>\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:56 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x500000000000000) [ 527.257246] binder: 5504:5511 unknown command 1869770799 [ 527.302630] binder: 5504:5511 ioctl c0306201 20000000 returned -22 [ 527.354304] binder: 5504:5511 unknown command 1869770799 [ 527.396406] binder: 5504:5511 ioctl c0306201 20000000 returned -22 14:14:56 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800000003000000642a6a5a4f3c93ccc2acf07fc779b88abc0648bab2be6ab1252c00211054f972138210d25759e01e0b8771af1b52bea426d90c694e989fd09f45c8e31488b5058eb5db9e55ee385335691c94bb8e0f0373c917e3ac3bf08b86f6516c6cff5cf68ca9e11607e5e5cb7a5f82efaca85aeb"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:56 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000a3845748400d967b29bdb3008c407c3112263ec07ac76d10b64bc394290313973718766fbd7dbce2bbf62825582059b0b28e1419431d7a66d7fda51f6a356e951795bcced110bcae0d31e55e4128eb6a5909e56d5fe5a6085220d14eb201b90bd0fef992cf48efee1a4c53fb01fce80f926018a46f6d268aa6114db65aa6caaec6da81cf"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x100000001) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:56 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x600000000000000) 14:14:56 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4000000000, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x7fffffff, 0x3, 0x929f, 0x1f, 0x0, 0x3, 0x7, 0x8, 0x800, 0x80000000}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x2000000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000140)=""/240, &(0x7f0000000080)=0xf0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x45, 0x0, &(0x7f0000000240), 0x356, 0x0, 0x0}) 14:14:56 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0xfffffffffffffd7c) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) socket$inet6(0xa, 0x6, 0x7) 14:14:56 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00?\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:56 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x700000000000000) [ 527.695995] binder: 5548:5554 unknown command 0 [ 527.728208] binder: 5548:5554 ioctl c0306201 20000280 returned -22 14:14:57 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x800000000000000) 14:14:57 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf25069000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) capset(&(0x7f0000000180)={0x19980330, r9}, &(0x7f00000001c0)={0x4, 0x4, 0x0, 0x100000000, 0x4, 0x4}) 14:14:57 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b00000140802000800010081a87dbe4c40219d2f71ea36"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:14:57 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000100)=@hopopts={0x96, 0x1e, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x30, {0x7fff, 0xa, 0x6, 0x6, [0x4, 0x8000, 0x3, 0x56d, 0x4]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfff}, @generic={0x4, 0x66, "6ba966560010098c4f55facb3653fc59c09cbcaa69c465886e5b47682b09f6f45c6d7832c89fcbb67a0036a9aff0b48d1971028c7c3c8acd8a135f3691fa893373eef7511afe2bf35c8bbabd770e452b1f9e8dd175815506e696dc85557eff250dfd60a7259f"}, @calipso={0x7, 0x38, {0xffffffff80000000, 0xc, 0x4, 0x9, [0x1, 0x9b22, 0x8, 0x7056, 0x2, 0x7fffffff]}}, @pad1]}, 0x100) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1d, 0x805, 0x0) 14:14:57 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00@\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:57 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x105000) sendmmsg$inet_sctp(r0, &(0x7f0000003900)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x1, @ipv4={[], [], @rand_addr=0x5e51}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000140)="084fa58ba9f48168d0f8817c991e2dbd38b18463f1b9db9abdca8ddee630b6379d4552ba4bdda4e9813b9edf2485e8edc3ab055c007f1f19f33ca2db6d3bb0dded7ba60551fef235d0f5237adf728a5f988a", 0x52}, {&(0x7f00000001c0)}], 0x2, &(0x7f0000000240)=[@authinfo={0x18, 0x84, 0x6, {0xce1}}], 0x18}, {&(0x7f0000000280)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000002c0)="8b30d77b9b8a7874baa60238daf1f519a9ad3c0179d0e1d7c27198738d085c1f4627ed8240659008f0a835727c43da1a5d8c6f8976cf63587832564cfd201e611387b24847ce694bb825def17e9d79beed0e7520d87c8f32c5f635b9cb3a23afdadd425dc1ef61caeaa070dde315b0ccf278471c4eee82ba5f68f625b43f18daaf97fac67ccca0926226f4964f0f8b5243206c639e7a2b", 0x97}, {&(0x7f0000000380)="114af5ff2eaeb6d5ce197838c49770699f97d0c2674203", 0x17}, {&(0x7f00000003c0)="e918cba6272a1cd55f6237d2652b7230292ccdfd5bca6c0143cdd4044f6fdfa9f8cecd2acc9e6c638e41a2fd2abff807a7b729dea237aa6c55e48748b32781b67d535c0e913cf1f7d9871d7e89badc7a2e1955479d49dab2072bde0d469fe8c3a9e4d62f94f9f80cf0ece5936d9324e6f0bb88224b45584aa90422a98b3a8c5795170f6a8389ba2aeff838dc2870cf36c3f48afee8e87b89", 0x98}], 0x3, &(0x7f00000004c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}], 0x30, 0x80}, {&(0x7f0000000500)=@in6={0xa, 0x4e24, 0x10001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000003800)=[{&(0x7f0000000540)="3de940e21ecce9b3de4b0b99acd87e1a6f79d0761ae0338486086d1b8f61f44fa9ccbf555db2b1e653b01539d079649248c3ae", 0x33}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="51e33b53ae45d51564eb3cbf8c800ad4a2bf94ea609b6de444791ea4789a4d35a947593ecf5aa1817f9c9836b516f6dedf6c312bd3c6b2dc7ab94f96fa9deca37902177d0860ba554c8c1e0e8a029e17159736fe97a897de37a83011a7c854119eb74815ada30a99705ad249b95c1fd97714955878df5331edeea5a9a3f110889515de01e717d9a0edd8c01e3d2276ebe2c337de32f3dbdcffb45bf36f54f73f84d1abb35db49642fcb0a12a1740d63031d26ce3e0b70cd7765473909ada0fc615b96e72dee9757757c684c93eba5113ff", 0xd1}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="3dff6b21242ec65ac41a3d5180df2d6aad82ae7d5edd1faa8d1614ca7d78cb0ee85280c6b985eeebdc2f14b8555dfef5b449e8358fc97513b3bbc862448f53c2a20f17ced32e3198d19ce7550a1ce9b03d5486808382a3cbf030da97e02e5d6b717e73a9c2d4595bf00ccf30b10c7c14d18e95629d8081edb3831d25c56e97078d1d4a1fc37b780f107100cac19c4b8e13554584b8d33776ffc8cd0cb5761bdc01fd55833ad683ac987193e62885874adb62fee9d084bf33a57cce05232114b2596d5532bcd2d08648180f5b3a3a2cffb94ec68845e4", 0xd6}, {&(0x7f0000002780)="ebdee0b6a855c2c803358edbac0f06e6fa689d59c290277ccfcf3a82863074ecf1793295b11f39c79230be5bcc8594c5d33e2db6bc8f2733ce2aaf7be57062be60", 0x41}, {&(0x7f0000002800)="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", 0x1000}], 0x7, &(0x7f0000003880)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7}}], 0x68, 0xb255346c1233384d}], 0x3, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:57 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x900000000000000) [ 528.129155] capability: warning: `syz-executor3' uses 32-bit capabilities (legacy support in use) 14:14:57 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00`\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 528.247927] binder: 5620:5633 unknown command 1869770799 14:14:57 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xa00000000000000) [ 528.306249] binder: 5620:5633 ioctl c0306201 20000000 returned -22 [ 528.351627] can: request_module (can-proto-0) failed. 14:14:57 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742afb23ce3289a269f57e6b887bb4dbdb0906b00000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:57 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) r2 = msgget$private(0x0, 0x8) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/105) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b00000140802000800010009000000fb85b3216cac2661b06182b730415ed30800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:57 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1082000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:57 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) r8 = msgget$private(0x0, 0x2) msgrcv(r8, &(0x7f0000000100)={0x0, ""/219}, 0xe3, 0x3, 0x0) 14:14:57 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xe00000000000000) 14:14:57 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x02\x80\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 528.617384] binder: 5665:5675 unknown command 1869770799 [ 528.688485] binder: 5665:5675 ioctl c0306201 20000000 returned -22 14:14:57 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x1000000000000000) 14:14:57 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x107, 0xfffffffffffffffc) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r4, 0x0, 0x2, &(0x7f0000000180)='-\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0xffffffffffffffff, 0x4c8, 0x8, 0xffffffffffffffff, 0x0, 0x2, 0x4008, 0x2, 0x6, 0x7ad, 0x10000, 0x3, 0x0, 0x3, 0x8, 0x2, 0x100, 0x6, 0x0, 0xfffffffffffffff8, 0x3e15, 0x2, 0x8000, 0x9, 0x5, 0x1, 0x2, 0x9, 0x9, 0xfffffffffffffffb, 0x7, 0x1f, 0x17, 0x0, 0x1e11, 0x2, 0x0, 0x5, 0x5, @perf_config_ext={0x80000001, 0x5df4}, 0x1009, 0x1, 0x51, 0x6, 0x2, 0x7f, 0x80}, r8, 0xf, r1, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:57 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\xfe\x80\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:57 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000200)="2d2e95eaff56bb600381b2d6f6e1b4ee0458c9664c4f043f2e4ee021a1a94c5f997e9f8d853f27495577dd", 0x2b, 0x10000}, {&(0x7f00000003c0)="8370057d72586306b41d5dfc6336fdf3b3", 0x11, 0x80000000}, {&(0x7f0000000440)="e89cfe35fb1f8c6adba59a13367a642e3fba1685e143368cca3ae09719f51c7f59d52deb3e34ce24abb121879a22d8a6715002f9912aa1aa6fa981badb319520d4569666ea0473785f9bd65593dbd0411f44c796fe7919b624f816054fdcfc5df57eab29a2385446f9838c43bc1348ff177da67a7f7a52dada546ec326ae89346955d63466def78bfdf168e15df46423379f6b0a3121c8b9792f72bb0c50e463e58775d7dec7f9ffe6d843040b810e0ec409db5eab38dce9612baccdc6ff489ccbbade5adf54d3eee41fac5da811ca44c739", 0xd2, 0x1}], 0x400, &(0x7f0000000cc0)=ANY=[@ANYBLOB="636173655f73656e7369746976653d6e6f2c6572726f72733d636f6e74696e75652c64697361626c655f7370617273653d7965732c646d61736b3d3030303030303030303030151694bf97b65cb2303031302c756d61736b3d30303030303030303030303030303030303030303030372c64697361626c655f7370617273653d7965732c64697361626c655f7370617273653d6e6f2c736d61636b66736861743d2c007a590b11e89c29e8a6bb29275bce2302af91b663dbe00e9eee7997b2b55128bb15c4dabcfcb61778f972e55fff6370feb9457ca0040eddfc96c482359f"]) r7 = getpid() ptrace$setregset(0x4205, r7, 0x202, &(0x7f0000000000)={&(0x7f0000000100)="2a49048a978bfc41d284743b3a4dc307acf1e0d34f45488c551c72195af203ca0d6073e3d168dc24a90fb8233bac0c97b0d6fc3cecd5912cc6c63085eef39e92c368611d37dcd16b9b9a5cd9e12d568ecfa8215024dbc5ca78fa", 0x5a}) socket(0x1e, 0x805, 0x0) 14:14:58 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f00000001c0)) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 528.931757] binder: 5705:5706 unknown command 1869770799 [ 528.941456] binder: 5705:5706 ioctl c0306201 20000000 returned -22 14:14:58 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x1100000000000000) 14:14:58 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4000, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/14, 0xe}], 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000001c0)={0x1f, 0x7fff, 0x8}) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x43, 0x5, 0x400, "687492f0160752e2235af4fae0418332103614b92f0b51d0ba8fe157f48854bb5fb413dbb2b0f368c2dccface807920afa123d56ba5d20500867cc80c3b12a292e91d8"}) 14:14:58 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x1c00000000000000) [ 529.094371] binder: 5715:5721 unknown command 1869770799 [ 529.120637] binder: 5715:5726 unknown command 1869770799 [ 529.121087] binder: 5715:5721 ioctl c0306201 20000000 returned -22 [ 529.159900] binder: 5715:5726 ioctl c0306201 20000000 returned -22 14:14:58 executing program 1: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3f, 0x8000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 529.286994] binder: 5744:5747 unknown command 1869770799 [ 529.292671] binder: 5744:5747 ioctl c0306201 20000000 returned -22 14:14:58 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x107, 0xfffffffffffffffc) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r4, 0x0, 0x2, &(0x7f0000000180)='-\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0xffffffffffffffff, 0x4c8, 0x8, 0xffffffffffffffff, 0x0, 0x2, 0x4008, 0x2, 0x6, 0x7ad, 0x10000, 0x3, 0x0, 0x3, 0x8, 0x2, 0x100, 0x6, 0x0, 0xfffffffffffffff8, 0x3e15, 0x2, 0x8000, 0x9, 0x5, 0x1, 0x2, 0x9, 0x9, 0xfffffffffffffffb, 0x7, 0x1f, 0x17, 0x0, 0x1e11, 0x2, 0x0, 0x5, 0x5, @perf_config_ext={0x80000001, 0x5df4}, 0x1009, 0x1, 0x51, 0x6, 0x2, 0x7f, 0x80}, r8, 0xf, r1, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:58 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x3, 0xec}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:58 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\xfe\xc0\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:58 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x2000000000000000) 14:14:58 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7bff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800011203000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x13d, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000100)={{0x9, 0x8f90000000, 0x425, 0xb2ce, 0x9, 0xdd1a}, 0x4, 0x3, 0x3f, 0xe1ce, 0x400, "2e62a69c4c6777e132c6207f0b9d06a4dd8dc3d9007e0fdb8eb7b578e74a3fbdbb0dd48c629b64ec93d53e014708ed150c613851335f45eeb2f63e51ebe7ed02f5a713922198835e680b08ab54e7f452c4674a3710ea11061e8a0f607a1f0d04c88f30c0384f55da989ae4584820cdbaf47c30972dc0df5ca4dd44d4a8833052"}) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x915, 0x1c0fff) 14:14:58 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000200)="2d2e95eaff56bb600381b2d6f6e1b4ee0458c9664c4f043f2e4ee021a1a94c5f997e9f8d853f27495577dd", 0x2b, 0x10000}, {&(0x7f00000003c0)="8370057d72586306b41d5dfc6336fdf3b3", 0x11, 0x80000000}, {&(0x7f0000000440)="e89cfe35fb1f8c6adba59a13367a642e3fba1685e143368cca3ae09719f51c7f59d52deb3e34ce24abb121879a22d8a6715002f9912aa1aa6fa981badb319520d4569666ea0473785f9bd65593dbd0411f44c796fe7919b624f816054fdcfc5df57eab29a2385446f9838c43bc1348ff177da67a7f7a52dada546ec326ae89346955d63466def78bfdf168e15df46423379f6b0a3121c8b9792f72bb0c50e463e58775d7dec7f9ffe6d843040b810e0ec409db5eab38dce9612baccdc6ff489ccbbade5adf54d3eee41fac5da811ca44c739", 0xd2, 0x1}], 0x400, &(0x7f0000000cc0)=ANY=[@ANYBLOB="636173655f73656e7369746976653d6e6f2c6572726f72733d636f6e74696e75652c64697361626c655f7370617273653d7965732c646d61736b3d3030303030303030303030151694bf97b65cb2303031302c756d61736b3d30303030303030303030303030303030303030303030372c64697361626c655f7370617273653d7965732c64697361626c655f7370617273653d6e6f2c736d61636b66736861743d2c007a590b11e89c29e8a6bb29275bce2302af91b663dbe00e9eee7997b2b55128bb15c4dabcfcb61778f972e55fff6370feb9457ca0040eddfc96c482359f"]) r7 = getpid() ptrace$setregset(0x4205, r7, 0x202, &(0x7f0000000000)={&(0x7f0000000100)="2a49048a978bfc41d284743b3a4dc307acf1e0d34f45488c551c72195af203ca0d6073e3d168dc24a90fb8233bac0c97b0d6fc3cecd5912cc6c63085eef39e92c368611d37dcd16b9b9a5cd9e12d568ecfa8215024dbc5ca78fa", 0x5a}) socket(0x1e, 0x805, 0x0) [ 529.538148] binder: 5759:5764 unknown command 1869770799 [ 529.576555] binder: 5759:5772 unknown command 1869770799 14:14:58 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x3f00000000000000) [ 529.592524] binder: 5759:5764 ioctl c0306201 20000000 returned -22 [ 529.638154] binder: 5759:5772 ioctl c0306201 20000000 returned -22 14:14:58 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x44001, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000300)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x0, 0x200, 0x7ff, 0x4, 0xf11d, 0x5, 0x7fffffff, {0x0, @in={{0x2, 0x4e24, @multicast2}}, 0xfffffffffffffffd, 0x80000001, 0x10001, 0x3, 0xa2}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000340)={r1, 0x2c, "23578f13fb6c4b7e8462baac14d4783dc820b033f1de20e6b843a2b45dd9087b896f60000cd8ceff7416c11a"}, &(0x7f0000000380)=0x34) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e24, 0xf2, @rand_addr="ebd975940691cd06a9080c0e511d61c6", 0x3}}, 0xd0, 0x6, 0x2, 0x1, 0x8}, &(0x7f00000000c0)=0x98) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000002c0)={{0x7, @name="fd273ab1c83f41da85e14ba3745bff882f67ef014cd9fd7595e7a4b984ce9dc1"}, 0x8, 0x8, 0x10001}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:58 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x02\xc2\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:58 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x4000000000000000) 14:14:58 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000200)="2d2e95eaff56bb600381b2d6f6e1b4ee0458c9664c4f043f2e4ee021a1a94c5f997e9f8d853f27495577dd", 0x2b, 0x10000}, {&(0x7f00000003c0)="8370057d72586306b41d5dfc6336fdf3b3", 0x11, 0x80000000}, {&(0x7f0000000440)="e89cfe35fb1f8c6adba59a13367a642e3fba1685e143368cca3ae09719f51c7f59d52deb3e34ce24abb121879a22d8a6715002f9912aa1aa6fa981badb319520d4569666ea0473785f9bd65593dbd0411f44c796fe7919b624f816054fdcfc5df57eab29a2385446f9838c43bc1348ff177da67a7f7a52dada546ec326ae89346955d63466def78bfdf168e15df46423379f6b0a3121c8b9792f72bb0c50e463e58775d7dec7f9ffe6d843040b810e0ec409db5eab38dce9612baccdc6ff489ccbbade5adf54d3eee41fac5da811ca44c739", 0xd2, 0x1}], 0x400, &(0x7f0000000cc0)=ANY=[@ANYBLOB="636173655f73656e7369746976653d6e6f2c6572726f72733d636f6e74696e75652c64697361626c655f7370617273653d7965732c646d61736b3d3030303030303030303030151694bf97b65cb2303031302c756d61736b3d30303030303030303030303030303030303030303030372c64697361626c655f7370617273653d7965732c64697361626c655f7370617273653d6e6f2c736d61636b66736861743d2c007a590b11e89c29e8a6bb29275bce2302af91b663dbe00e9eee7997b2b55128bb15c4dabcfcb61778f972e55fff6370feb9457ca0040eddfc96c482359f"]) r7 = getpid() ptrace$setregset(0x4205, r7, 0x202, &(0x7f0000000000)={&(0x7f0000000100)="2a49048a978bfc41d284743b3a4dc307acf1e0d34f45488c551c72195af203ca0d6073e3d168dc24a90fb8233bac0c97b0d6fc3cecd5912cc6c63085eef39e92c368611d37dcd16b9b9a5cd9e12d568ecfa8215024dbc5ca78fa", 0x5a}) socket(0x1e, 0x805, 0x0) 14:14:58 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000813dc7a371e2837ccd1eb4a3354cf2528d934ab040355ffd0ebeccf72d257a52fb1aaa0017b39825a9a37c84d9862fc31a0dc865ab1642b55d5246663cf528a5c53f2916a58fcf42572675314352ebf888a1e160ef706a4bbc2a09f4bc6c1acdc1d3436bc7cb841180fc79f6b6e3eecfde9b254d2ec3cb72a32d452686434124e76437b85ab04662f9fa17b266291765a55cd253fddd5a899034e8d798de574c3cc8b53994fb761f1534fced4677579affd6c172dbf7"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:58 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x107, 0xfffffffffffffffc) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r4, 0x0, 0x2, &(0x7f0000000180)='-\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0xffffffffffffffff, 0x4c8, 0x8, 0xffffffffffffffff, 0x0, 0x2, 0x4008, 0x2, 0x6, 0x7ad, 0x10000, 0x3, 0x0, 0x3, 0x8, 0x2, 0x100, 0x6, 0x0, 0xfffffffffffffff8, 0x3e15, 0x2, 0x8000, 0x9, 0x5, 0x1, 0x2, 0x9, 0x9, 0xfffffffffffffffb, 0x7, 0x1f, 0x17, 0x0, 0x1e11, 0x2, 0x0, 0x5, 0x5, @perf_config_ext={0x80000001, 0x5df4}, 0x1009, 0x1, 0x51, 0x6, 0x2, 0x7f, 0x80}, r8, 0xf, r1, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:59 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x7301000000000000) 14:14:59 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\xe8\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:59 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xe000000000000000) 14:14:59 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x200) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x101000, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000180)) 14:14:59 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000200)="2d2e95eaff56bb600381b2d6f6e1b4ee0458c9664c4f043f2e4ee021a1a94c5f997e9f8d853f27495577dd", 0x2b, 0x10000}, {&(0x7f00000003c0)="8370057d72586306b41d5dfc6336fdf3b3", 0x11, 0x80000000}, {&(0x7f0000000440)="e89cfe35fb1f8c6adba59a13367a642e3fba1685e143368cca3ae09719f51c7f59d52deb3e34ce24abb121879a22d8a6715002f9912aa1aa6fa981badb319520d4569666ea0473785f9bd65593dbd0411f44c796fe7919b624f816054fdcfc5df57eab29a2385446f9838c43bc1348ff177da67a7f7a52dada546ec326ae89346955d63466def78bfdf168e15df46423379f6b0a3121c8b9792f72bb0c50e463e58775d7dec7f9ffe6d843040b810e0ec409db5eab38dce9612baccdc6ff489ccbbade5adf54d3eee41fac5da811ca44c739", 0xd2, 0x1}], 0x400, &(0x7f0000000cc0)=ANY=[@ANYBLOB="636173655f73656e7369746976653d6e6f2c6572726f72733d636f6e74696e75652c64697361626c655f7370617273653d7965732c646d61736b3d3030303030303030303030151694bf97b65cb2303031302c756d61736b3d30303030303030303030303030303030303030303030372c64697361626c655f7370617273653d7965732c64697361626c655f7370617273653d6e6f2c736d61636b66736861743d2c007a590b11e89c29e8a6bb29275bce2302af91b663dbe00e9eee7997b2b55128bb15c4dabcfcb61778f972e55fff6370feb9457ca0040eddfc96c482359f"]) r7 = getpid() ptrace$setregset(0x4205, r7, 0x202, &(0x7f0000000000)={&(0x7f0000000100)="2a49048a978bfc41d284743b3a4dc307acf1e0d34f45488c551c72195af203ca0d6073e3d168dc24a90fb8233bac0c97b0d6fc3cecd5912cc6c63085eef39e92c368611d37dcd16b9b9a5cd9e12d568ecfa8215024dbc5ca78fa", 0x5a}) socket(0x1e, 0x805, 0x0) 14:14:59 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x107, 0xfffffffffffffffc) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r4, 0x0, 0x2, &(0x7f0000000180)='-\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0xffffffffffffffff, 0x4c8, 0x8, 0xffffffffffffffff, 0x0, 0x2, 0x4008, 0x2, 0x6, 0x7ad, 0x10000, 0x3, 0x0, 0x3, 0x8, 0x2, 0x100, 0x6, 0x0, 0xfffffffffffffff8, 0x3e15, 0x2, 0x8000, 0x9, 0x5, 0x1, 0x2, 0x9, 0x9, 0xfffffffffffffffb, 0x7, 0x1f, 0x17, 0x0, 0x1e11, 0x2, 0x0, 0x5, 0x5, @perf_config_ext={0x80000001, 0x5df4}, 0x1009, 0x1, 0x51, 0x6, 0x2, 0x7f, 0x80}, r8, 0xf, r1, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:59 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x29, &(0x7f0000000180)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da46d1bac0f67c31fbce464260b25350d8724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d49506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="00c2050fc3080001000900ffe7080001f80200020000200100000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) [ 530.288675] binder: 5853:5857 unknown command 1869770799 [ 530.315784] binder: 5853:5861 unknown command 1869770799 [ 530.344860] binder: 5853:5857 ioctl c0306201 20000000 returned -22 [ 530.377518] binder: 5853:5861 ioctl c0306201 20000000 returned -22 14:14:59 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\xfc\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:14:59 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xe803000000000000) 14:14:59 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2004}) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:14:59 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x4000000000802) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000240)=0xfffffffffffffffd, 0x4) fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x0, r3}) r4 = mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000000, 0x10950, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00634040020000000000000004000000000000000000000010000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a627301010000", @ANYRES64=r4, @ANYBLOB="e6ffffffffffffff"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 530.582949] binder: 5885:5896 unknown command 1869770799 [ 530.599294] binder: 5885:5896 ioctl c0306201 20000000 returned -22 [ 530.600601] binder: 5885:5900 unknown command 1869770799 [ 530.611399] binder: 5885:5900 ioctl c0306201 20000000 returned -22 14:14:59 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0xec) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101000, 0x100) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x100, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000180)={@nfc={0x27, 0x0, 0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r1, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x4000000000000005, 0x8) setsockopt$inet6_int(r6, 0x29, 0x0, &(0x7f0000000100)=0x26e, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r7, 0x1}}, 0x18) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r9 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:59 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0xe00000000000000, 0x7, 0xba1, 0x8000, 0x46b}, 0x14) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:14:59 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742e0000fbdbdf2506b0000014080200fb0a99eb06fd794e8300000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000440)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x1008026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000cc0)=""/4096) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x9, 0x805, 0xffffffffffffffee) 14:14:59 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xeffdffff00000000) 14:14:59 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\xfd\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 530.817389] binder: 5913:5919 got transaction to invalid handle [ 530.840528] binder: 5913:5919 transaction failed 29201/-22, size 24-8 line 2896 14:15:00 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 530.883367] binder: undelivered TRANSACTION_ERROR: 29201 14:15:00 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xf401000000000000) [ 530.985903] binder: 5937:5944 unknown command 1869770799 [ 531.000706] binder: 5937:5949 unknown command 1869770799 14:15:00 executing program 0: r0 = socket$inet6(0xa, 0x40000020800a3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r2, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b0000014080200080001000900000008000100c0cffbd803000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) ppoll(&(0x7f0000000100)=[{r2, 0x110}, {r2, 0x1000}, {r4, 0x10}, {r0, 0x4100}, {r4, 0x2}, {r0}, {r0, 0x4200}], 0x7, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)={0x10000}, 0x8) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r6, 0x1}}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:15:00 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b00062148c52adc8000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x3, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:15:00 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xf5ffffff00000000) [ 531.029552] binder: 5937:5944 ioctl c0306201 20000000 returned -22 [ 531.051452] binder: 5937:5949 ioctl c0306201 20000000 returned -22 14:15:00 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000180)) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz1', "1e49859bd99f54acd178298a605c9c0b70cf51cb8f05915ec56b00c5dedc5231d9a18f70e26e7ad504a5a06bf414e7aa94c4f84c177de34b2d9f49000992b3aaba68eb3fd9ebd1b35e68b320412d5963784e34e3a3b801e9a49f32998d"}, 0x61) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000280)={0x2, 0x2, 0x5}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:15:00 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x80\xfe\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:15:00 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) r7 = getpgid(0xffffffffffffffff) ptrace$setregs(0xf, r7, 0x401, &(0x7f0000000100)="db164429cd23c11fd229e51f05cdbbfe00c69df763df2743dc0dc09d5485d0cdf06b4846de02af673f0874a6ba55820260dd662f9095b69d9a53ab7cf6241635925870f6c2f9701621bc151ba3cb01e2bd5d5740d62784a690c70ae52b8510b7cc7419c1deedfd5eb56e22dc836a0eeec200801f1e6dccdef97e889cd472a95344d0e967f1a48d0633bffba09146b6dae02487296d18dbc6f83d564d025b1902545f9c05017ea1f629857795f60774bd4836d1407bc5734e235d8cb72150caba1d5c53d841502ce3adcb4928e7feb5a816ef430e2301c21f3e65b840f51ad1") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:15:00 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xfe80000000000000) [ 531.301100] binder: 5964:5970 unknown command 1869770799 [ 531.346810] binder: 5964:5970 ioctl c0306201 20000000 returned -22 14:15:00 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xffff000000000000) 14:15:00 executing program 3: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010102}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000000080001000300000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x1000000000000004) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000100)=""/103) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:15:00 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x5, 0x3, 0xea, 0xd3d, 0x0, 0x3, 0x404, 0x2, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x1f, 0x8001, 0xffffffff80000001, 0x5, 0x1, 0xbd2, 0x8, 0x9, 0x6, 0x3, 0x1, 0x8000, 0x9, 0xd239b48, 0xfffffffffffff195, 0xab, 0x5, 0x3ff, 0x0, 0x8, 0x7, 0x5e2, 0x0, 0x50, 0x6, @perf_bp={&(0x7f0000000040), 0x8}, 0x40, 0x1000, 0x0, 0xc5b09c03de7c7b07, 0x1000, 0x6740, 0x7}, r1, 0xb, r0, 0xa) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000080)={0x7, 0x3}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:15:00 executing program 0: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0xc0189436, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r4, 0x1}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) 14:15:00 executing program 5: socket$inet6(0xa, 0x40000020800a3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300)}, 0xa0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x802c560a, &(0x7f00000000c0)={0x52, 0x10, &(0x7f0000000840)="8486fef4da0b392fe0674e7c4d726812e44d743d614150992a7da48724b662e0f1e45037cb5dea652ebae36cff741ad53fd6b60eb9a30415cbf2034f9d01dd36540818cafd08aa33a6f815eebac57aaaf0189af4a6406069ee0ffc3a46369de008777a8455096892c086a46a44898f78f2fb3e994927dd9d4d56ae74d4abf224c5d442b6b8566e8bd1b7af2d4b506a3f8c956633c9909ef8c40d79f016a989593f1297becdaa690700b299ec22", {0x14f, 0x3ff, 0x36315f4f, 0x7, 0xb6c, 0x8, 0x7, 0x8}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x22010106}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0001742a0000fbdbdf2506b000001408020008000100090000000800010003000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, r3) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000900)={0x3, 0x777c}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000680)=0x100000001, 0x4) r4 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000000005, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000c40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000c80)={0xb, 0x10, 0xfa00, {&(0x7f0000000b80), r5, 0x1}}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff29) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10280) 14:15:00 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\xc0\xfe\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 531.618758] binder: 6008:6010 unknown command 0 14:15:00 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xffffff7f00000000) [ 531.669274] binder: 6008:6010 ioctl c0306201 20000000 returned -22 14:15:00 executing program 3 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:00 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)={0x6, 0x0, [{0x816, 0x0, 0x180000000000}, {0x633, 0x0, 0xff}, {0xc0000bfd, 0x0, 0xfffffffffffffffd}, {0xa65, 0x0, 0x7fff}, {0xfff, 0x0, 0x8}, {0x0, 0x0, 0xfffffffffffffffd}]}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18}, 0x18) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4007ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x400) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) getrandom(&(0x7f0000000200)=""/44, 0x3b, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:15:00 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xffffffff00000000) [ 531.815106] FAULT_INJECTION: forcing a failure. [ 531.815106] name failslab, interval 1, probability 0, space 0, times 0 [ 531.917113] CPU: 1 PID: 6032 Comm: syz-executor3 Not tainted 5.0.0-rc3 #36 [ 531.924168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.933526] Call Trace: [ 531.936128] dump_stack+0x1db/0x2d0 [ 531.939774] ? dump_stack_print_info.cold+0x20/0x20 [ 531.944819] should_fail.cold+0xa/0x15 [ 531.948727] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 531.953856] ? ___might_sleep+0x1e7/0x310 [ 531.958019] ? arch_local_save_flags+0x50/0x50 [ 531.962616] __should_failslab+0x121/0x190 [ 531.966848] should_failslab+0x9/0x14 [ 531.970640] __kmalloc_track_caller+0x2d8/0x740 [ 531.975303] ? strncpy_from_user+0x4e0/0x4e0 [ 531.980212] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 531.985750] ? strndup_user+0x77/0xd0 [ 531.989545] memdup_user+0x26/0xb0 [ 531.993077] strndup_user+0x77/0xd0 [ 531.996699] ksys_mount+0x3c/0x150 [ 532.000232] __x64_sys_mount+0xbe/0x150 [ 532.004207] do_syscall_64+0x1a3/0x800 [ 532.008087] ? syscall_return_slowpath+0x5f0/0x5f0 [ 532.013006] ? prepare_exit_to_usermode+0x232/0x3b0 [ 532.018014] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 532.022855] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.028030] RIP: 0033:0x458099 [ 532.031211] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 532.050097] RSP: 002b:00007fe646612c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 532.057794] RAX: ffffffffffffffda RBX: 00007fe646612c90 RCX: 0000000000458099 14:15:01 executing program 0 (fault-call:9 fault-nth:0): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 532.065049] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000020000000 [ 532.072307] RBP: 000000000073bf00 R08: 0000000020000300 R09: 0000000000000000 [ 532.079563] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6466136d4 [ 532.086819] R13: 00000000004c3e03 R14: 00000000004d6dd8 R15: 0000000000000004 14:15:01 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\xff\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 532.227687] FAULT_INJECTION: forcing a failure. [ 532.227687] name failslab, interval 1, probability 0, space 0, times 0 [ 532.254793] CPU: 1 PID: 6055 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 532.261838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.271193] Call Trace: [ 532.273797] dump_stack+0x1db/0x2d0 [ 532.277456] ? dump_stack_print_info.cold+0x20/0x20 [ 532.282508] should_fail.cold+0xa/0x15 [ 532.286411] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 532.291541] ? ___might_sleep+0x1e7/0x310 [ 532.295699] ? arch_local_save_flags+0x50/0x50 [ 532.300293] ? print_usage_bug+0xd0/0xd0 [ 532.304367] __should_failslab+0x121/0x190 [ 532.308612] should_failslab+0x9/0x14 [ 532.312417] kmem_cache_alloc+0x2be/0x710 [ 532.316581] ? __lock_acquire+0x572/0x4a30 [ 532.320822] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 532.326469] mmu_topup_memory_caches+0x97/0x490 [ 532.331154] kvm_mmu_load+0x21/0x1200 [ 532.334961] ? mark_held_locks+0x100/0x100 [ 532.339201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.344805] ? vmx_get_nmi_mask+0x107/0x180 [ 532.349138] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 532.354682] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 532.359215] vcpu_enter_guest+0x3f0e/0x6520 [ 532.363544] ? debug_smp_processor_id+0x1c/0x20 [ 532.368219] ? perf_trace_lock_acquire+0x138/0x7d0 [ 532.373156] ? emulator_read_emulated+0x50/0x50 [ 532.377814] ? perf_trace_lock+0x750/0x750 [ 532.382037] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.387563] ? check_preemption_disabled+0x48/0x290 [ 532.392573] ? __lock_is_held+0xb6/0x140 [ 532.396628] ? lock_acquire+0x1db/0x570 [ 532.400592] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 532.405603] ? lock_release+0xc40/0xc40 [ 532.409570] ? kvm_gen_update_masterclock+0x380/0x380 [ 532.414752] ? rcu_sync_dtor+0x170/0x170 [ 532.418809] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 532.423642] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 532.428711] kvm_vcpu_ioctl+0x558/0x12d0 [ 532.432766] ? kvm_vcpu_block+0x1010/0x1010 [ 532.437076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.442604] ? lock_downgrade+0x910/0x910 [ 532.446739] ? kasan_check_read+0x11/0x20 [ 532.450878] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 532.456143] ? rcu_read_unlock_special+0x380/0x380 [ 532.461072] ? __fget+0x499/0x710 [ 532.464518] ? iterate_fd+0x4b0/0x4b0 [ 532.468313] ? kvm_vcpu_block+0x1010/0x1010 [ 532.472626] do_vfs_ioctl+0x107b/0x17d0 [ 532.476594] ? wait_for_completion+0x810/0x810 [ 532.481165] ? ioctl_preallocate+0x2f0/0x2f0 [ 532.485564] ? __fget_light+0x2db/0x420 [ 532.489529] ? fget_raw+0x20/0x20 [ 532.492973] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 532.498501] ? fput+0x128/0x1a0 [ 532.501768] ? do_syscall_64+0x8c/0x800 [ 532.505729] ? do_syscall_64+0x8c/0x800 [ 532.509691] ? lockdep_hardirqs_on+0x415/0x5d0 [ 532.514268] ? security_file_ioctl+0x93/0xc0 [ 532.518667] ksys_ioctl+0xab/0xd0 [ 532.522110] __x64_sys_ioctl+0x73/0xb0 [ 532.525987] do_syscall_64+0x1a3/0x800 [ 532.529864] ? syscall_return_slowpath+0x5f0/0x5f0 [ 532.534784] ? prepare_exit_to_usermode+0x232/0x3b0 [ 532.539792] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 532.544633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.549823] RIP: 0033:0x458099 [ 532.553024] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 532.571912] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.579614] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 532.586873] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 532.594130] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 532.601388] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 [ 532.608659] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 14:15:01 executing program 5 (fault-call:11 fault-nth:0): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:15:01 executing program 3 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:01 executing program 0 (fault-call:9 fault-nth:1): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 532.786119] FAULT_INJECTION: forcing a failure. [ 532.786119] name failslab, interval 1, probability 0, space 0, times 0 [ 532.822481] CPU: 1 PID: 6074 Comm: syz-executor3 Not tainted 5.0.0-rc3 #36 14:15:01 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x02\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 532.829523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.838878] Call Trace: [ 532.841484] dump_stack+0x1db/0x2d0 [ 532.845130] ? dump_stack_print_info.cold+0x20/0x20 [ 532.850159] ? add_lock_to_list.isra.0+0x450/0x450 [ 532.855097] ? perf_trace_lock+0x750/0x750 [ 532.859352] should_fail.cold+0xa/0x15 [ 532.863251] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 532.863275] ? ___might_sleep+0x1e7/0x310 [ 532.872500] ? arch_local_save_flags+0x50/0x50 [ 532.872517] ? lock_downgrade+0x910/0x910 [ 532.872531] ? lock_release+0xc40/0xc40 [ 532.872553] __should_failslab+0x121/0x190 [ 532.889445] should_failslab+0x9/0x14 [ 532.893237] __kmalloc_track_caller+0x2d8/0x740 [ 532.897904] ? strncpy_from_user+0x4e0/0x4e0 [ 532.902309] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 532.907837] ? strndup_user+0x77/0xd0 [ 532.911632] memdup_user+0x26/0xb0 [ 532.915161] strndup_user+0x77/0xd0 [ 532.918781] ksys_mount+0x7b/0x150 [ 532.922315] __x64_sys_mount+0xbe/0x150 [ 532.926805] do_syscall_64+0x1a3/0x800 [ 532.930686] ? syscall_return_slowpath+0x5f0/0x5f0 [ 532.935607] ? prepare_exit_to_usermode+0x232/0x3b0 [ 532.940620] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 532.945463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.950640] RIP: 0033:0x458099 [ 532.953823] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 532.972710] RSP: 002b:00007fe646612c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 532.980411] RAX: ffffffffffffffda RBX: 00007fe646612c90 RCX: 0000000000458099 [ 532.987666] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000020000000 [ 532.994928] RBP: 000000000073bf00 R08: 0000000020000300 R09: 0000000000000000 [ 533.002182] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6466136d4 [ 533.009441] R13: 00000000004c3e03 R14: 00000000004d6dd8 R15: 0000000000000004 [ 533.046472] FAULT_INJECTION: forcing a failure. [ 533.046472] name failslab, interval 1, probability 0, space 0, times 0 [ 533.092928] CPU: 1 PID: 6081 Comm: syz-executor5 Not tainted 5.0.0-rc3 #36 [ 533.099964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.109321] Call Trace: [ 533.111928] dump_stack+0x1db/0x2d0 [ 533.115577] ? dump_stack_print_info.cold+0x20/0x20 [ 533.120616] should_fail.cold+0xa/0x15 [ 533.124522] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 533.129648] ? ___might_sleep+0x1e7/0x310 [ 533.133809] ? arch_local_save_flags+0x50/0x50 [ 533.138424] ? print_usage_bug+0xd0/0xd0 [ 533.142494] __should_failslab+0x121/0x190 [ 533.146724] should_failslab+0x9/0x14 [ 533.150517] kmem_cache_alloc+0x2be/0x710 [ 533.154655] ? __lock_acquire+0x572/0x4a30 [ 533.158878] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 533.164446] mmu_topup_memory_caches+0x97/0x490 [ 533.169113] kvm_mmu_load+0x21/0x1200 [ 533.172905] ? mark_held_locks+0x100/0x100 [ 533.177126] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 533.182653] ? vmx_get_nmi_mask+0x107/0x180 [ 533.186962] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 533.192490] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 533.196980] vcpu_enter_guest+0x3f0e/0x6520 [ 533.201290] ? debug_smp_processor_id+0x1c/0x20 [ 533.205949] ? perf_trace_lock_acquire+0x138/0x7d0 [ 533.210873] ? emulator_read_emulated+0x50/0x50 [ 533.215533] ? perf_trace_lock+0x750/0x750 [ 533.219756] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 533.225282] ? check_preemption_disabled+0x48/0x290 [ 533.230296] ? __lock_is_held+0xb6/0x140 [ 533.234348] ? lock_acquire+0x1db/0x570 [ 533.238313] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 533.243337] ? lock_release+0xc40/0xc40 [ 533.247301] ? kvm_gen_update_masterclock+0x380/0x380 [ 533.252480] ? rcu_sync_dtor+0x170/0x170 [ 533.256539] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 533.261393] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 533.266421] kvm_vcpu_ioctl+0x558/0x12d0 [ 533.270476] ? kvm_vcpu_block+0x1010/0x1010 [ 533.274790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 533.280320] ? lock_downgrade+0x910/0x910 [ 533.284456] ? kasan_check_read+0x11/0x20 [ 533.288593] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 533.293861] ? rcu_read_unlock_special+0x380/0x380 [ 533.298790] ? __fget+0x499/0x710 [ 533.302239] ? iterate_fd+0x4b0/0x4b0 [ 533.306033] ? kvm_vcpu_block+0x1010/0x1010 [ 533.310354] do_vfs_ioctl+0x107b/0x17d0 [ 533.314326] ? wait_for_completion+0x810/0x810 [ 533.318904] ? ioctl_preallocate+0x2f0/0x2f0 [ 533.323304] ? __fget_light+0x2db/0x420 [ 533.327270] ? fget_raw+0x20/0x20 [ 533.330711] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 533.336235] ? fput+0x128/0x1a0 [ 533.339502] ? do_syscall_64+0x8c/0x800 [ 533.343464] ? do_syscall_64+0x8c/0x800 [ 533.347529] ? lockdep_hardirqs_on+0x415/0x5d0 [ 533.352104] ? security_file_ioctl+0x93/0xc0 [ 533.356504] ksys_ioctl+0xab/0xd0 [ 533.359948] __x64_sys_ioctl+0x73/0xb0 [ 533.363833] do_syscall_64+0x1a3/0x800 [ 533.367713] ? syscall_return_slowpath+0x5f0/0x5f0 [ 533.372634] ? prepare_exit_to_usermode+0x232/0x3b0 [ 533.377647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 533.382484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 533.387663] RIP: 0033:0x458099 [ 533.390845] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 533.409736] RSP: 002b:00007f220ac59c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.417433] RAX: ffffffffffffffda RBX: 00007f220ac59c90 RCX: 0000000000458099 [ 533.424693] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 533.431949] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 533.439206] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f220ac5a6d4 [ 533.446463] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000008 [ 533.460069] FAULT_INJECTION: forcing a failure. [ 533.460069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.471888] CPU: 1 PID: 6094 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 533.478897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.488239] Call Trace: [ 533.490821] dump_stack+0x1db/0x2d0 [ 533.494447] ? dump_stack_print_info.cold+0x20/0x20 [ 533.499470] should_fail.cold+0xa/0x15 [ 533.503356] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 533.508464] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 533.514052] ? rcu_read_unlock+0x16/0x60 [ 533.518106] ? find_held_lock+0x35/0x120 [ 533.522167] ? rcu_read_unlock+0x16/0x60 [ 533.526229] should_fail_alloc_page+0x50/0x60 [ 533.530716] __alloc_pages_nodemask+0x323/0xdc0 [ 533.535382] ? lock_downgrade+0x910/0x910 [ 533.539524] ? kasan_check_read+0x11/0x20 [ 533.543666] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 533.548935] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 533.553963] ? ___might_sleep+0x1e7/0x310 [ 533.558108] ? trace_hardirqs_off+0xb8/0x310 [ 533.562511] cache_grow_begin+0x9c/0x8c0 [ 533.566563] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 533.572094] ? check_preemption_disabled+0x48/0x290 [ 533.577109] kmem_cache_alloc+0x645/0x710 [ 533.581248] ? __lock_acquire+0x572/0x4a30 [ 533.585488] mmu_topup_memory_caches+0x97/0x490 [ 533.590155] kvm_mmu_load+0x21/0x1200 [ 533.593944] ? mark_held_locks+0x100/0x100 [ 533.598170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 533.603700] ? vmx_get_nmi_mask+0x107/0x180 [ 533.608010] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 533.613540] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 533.618030] vcpu_enter_guest+0x3f0e/0x6520 [ 533.622346] ? debug_smp_processor_id+0x1c/0x20 [ 533.627014] ? perf_trace_lock_acquire+0x138/0x7d0 [ 533.631944] ? emulator_read_emulated+0x50/0x50 [ 533.636604] ? perf_trace_lock+0x750/0x750 [ 533.640830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 533.646369] ? check_preemption_disabled+0x48/0x290 [ 533.651394] ? __lock_is_held+0xb6/0x140 [ 533.655453] ? lock_acquire+0x1db/0x570 [ 533.659419] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 533.664434] ? lock_release+0xc40/0xc40 [ 533.668421] ? kvm_gen_update_masterclock+0x380/0x380 [ 533.673617] ? rcu_sync_dtor+0x170/0x170 [ 533.677678] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 533.682513] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 533.687536] kvm_vcpu_ioctl+0x558/0x12d0 [ 533.691595] ? kvm_vcpu_block+0x1010/0x1010 [ 533.695907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 533.701441] ? lock_downgrade+0x910/0x910 [ 533.705581] ? kasan_check_read+0x11/0x20 [ 533.709722] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 533.714990] ? rcu_read_unlock_special+0x380/0x380 [ 533.719920] ? __fget+0x499/0x710 [ 533.723379] ? iterate_fd+0x4b0/0x4b0 [ 533.727175] ? kvm_vcpu_block+0x1010/0x1010 [ 533.731489] do_vfs_ioctl+0x107b/0x17d0 [ 533.735546] ? wait_for_completion+0x810/0x810 [ 533.740127] ? ioctl_preallocate+0x2f0/0x2f0 [ 533.744533] ? __fget_light+0x2db/0x420 [ 533.748499] ? fget_raw+0x20/0x20 [ 533.751945] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 533.757475] ? fput+0x128/0x1a0 [ 533.760748] ? do_syscall_64+0x8c/0x800 [ 533.764716] ? do_syscall_64+0x8c/0x800 [ 533.768679] ? lockdep_hardirqs_on+0x415/0x5d0 [ 533.773264] ? security_file_ioctl+0x93/0xc0 [ 533.777668] ksys_ioctl+0xab/0xd0 [ 533.781117] __x64_sys_ioctl+0x73/0xb0 [ 533.785003] do_syscall_64+0x1a3/0x800 [ 533.788884] ? syscall_return_slowpath+0x5f0/0x5f0 [ 533.793808] ? prepare_exit_to_usermode+0x232/0x3b0 [ 533.798825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 533.803673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 533.808859] RIP: 0033:0x458099 [ 533.812275] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 533.831168] RSP: 002b:00007fcc92cd1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.838870] RAX: ffffffffffffffda RBX: 00007fcc92cd1c90 RCX: 0000000000458099 [ 533.846126] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 533.853385] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 533.860646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cd26d4 [ 533.867903] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 14:15:03 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0xfffffffffffff000) 14:15:03 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x03\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:15:03 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x8852, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x9c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12634840030000000000000004000000000000000000000010000000000000000000000058000000000000001000000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="0101000004000000000000670b033800c17fd800000000004500000001000000", @ANYRES64=r2, @ANYBLOB="0400000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000100000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="050000000000000009631040", @ANYRES64=r2, @ANYBLOB="040000000000000009631040", @ANYRES64=r2, @ANYBLOB="03000000000000000d6300000c6300000f630c400400000002000000000000001063084001000000000000000b630000"], 0x0, 0x0, 0x0}) 14:15:03 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:15:03 executing program 3 (fault-call:4 fault-nth:2): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:03 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0xfffffffffffffffd, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x608400, 0x14) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000300)={"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"}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000700)={'U-', 0xffff}, 0x28, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:03 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x04\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 534.246364] FAULT_INJECTION: forcing a failure. [ 534.246364] name failslab, interval 1, probability 0, space 0, times 0 [ 534.309747] CPU: 0 PID: 6118 Comm: syz-executor3 Not tainted 5.0.0-rc3 #36 [ 534.316800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.326172] Call Trace: [ 534.328788] dump_stack+0x1db/0x2d0 [ 534.332451] ? dump_stack_print_info.cold+0x20/0x20 [ 534.337492] ? add_lock_to_list.isra.0+0x450/0x450 [ 534.337524] IPVS: ftp: loaded support on port[0] = 21 [ 534.342455] should_fail.cold+0xa/0x15 [ 534.342486] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 534.342519] ? ___might_sleep+0x1e7/0x310 [ 534.360810] ? arch_local_save_flags+0x50/0x50 [ 534.365396] ? lock_downgrade+0x910/0x910 [ 534.365437] __should_failslab+0x121/0x190 [ 534.365462] should_failslab+0x9/0x14 [ 534.365478] kmem_cache_alloc_trace+0x2d1/0x760 [ 534.365497] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 534.365512] ? _copy_from_user+0xdd/0x150 [ 534.365540] copy_mount_options+0x5c/0x440 [ 534.377833] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 534.392162] ksys_mount+0xa7/0x150 [ 534.401915] __x64_sys_mount+0xbe/0x150 [ 534.401944] do_syscall_64+0x1a3/0x800 [ 534.409428] ? syscall_return_slowpath+0x5f0/0x5f0 [ 534.409452] ? prepare_exit_to_usermode+0x232/0x3b0 [ 534.418260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 534.418296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 534.428100] RIP: 0033:0x458099 [ 534.428119] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 534.428131] RSP: 002b:00007fe646612c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 534.455399] RAX: ffffffffffffffda RBX: 00007fe646612c90 RCX: 0000000000458099 [ 534.455412] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000020000000 [ 534.455428] RBP: 000000000073bf00 R08: 0000000020000300 R09: 0000000000000000 [ 534.484889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6466136d4 [ 534.492159] R13: 00000000004c3e03 R14: 00000000004d6dd8 R15: 0000000000000004 14:15:03 executing program 2: memfd_create(0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0xfffffffffffffffc) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x6, 0x42000) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000000c0)={0x5, 0x4}) ioctl(r0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=@random={'os2.', 'vmnet0\x00'}, &(0x7f0000000340)='/dev/v4l-subdev#\x00', 0x11, 0x3) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:03 executing program 0 (fault-call:9 fault-nth:2): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:15:03 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x2, 0x0) 14:15:03 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 534.621427] device bridge_slave_1 left promiscuous mode [ 534.643096] bridge0: port 2(bridge_slave_1) entered disabled state 14:15:03 executing program 3 (fault-call:4 fault-nth:3): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) [ 534.698978] device bridge_slave_0 left promiscuous mode [ 534.717740] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.742923] FAULT_INJECTION: forcing a failure. [ 534.742923] name failslab, interval 1, probability 0, space 0, times 0 [ 534.770918] FAULT_INJECTION: forcing a failure. [ 534.770918] name failslab, interval 1, probability 0, space 0, times 0 [ 534.782340] CPU: 0 PID: 6145 Comm: syz-executor3 Not tainted 5.0.0-rc3 #36 [ 534.789370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.798720] Call Trace: [ 534.801327] dump_stack+0x1db/0x2d0 [ 534.804966] ? dump_stack_print_info.cold+0x20/0x20 [ 534.810332] ? kernel_text_address+0x73/0xf0 [ 534.814754] should_fail.cold+0xa/0x15 [ 534.818646] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 534.823756] ? ___might_sleep+0x1e7/0x310 [ 534.827905] ? arch_local_save_flags+0x50/0x50 [ 534.832483] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 534.837578] ? kasan_kmalloc+0x9/0x10 [ 534.841371] ? kmem_cache_alloc_trace+0x151/0x760 [ 534.846212] ? __x64_sys_mount+0xbe/0x150 [ 534.850354] ? do_syscall_64+0x1a3/0x800 [ 534.854422] __should_failslab+0x121/0x190 [ 534.858658] should_failslab+0x9/0x14 [ 534.862457] kmem_cache_alloc+0x2be/0x710 [ 534.866604] ? fs_reclaim_acquire+0x20/0x20 [ 534.870918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 534.876450] ? should_fail+0x1e6/0xd22 [ 534.880337] getname_flags+0xd6/0x5b0 [ 534.884142] user_path_at_empty+0x2f/0x50 [ 534.888303] do_mount+0x162/0x3330 [ 534.891838] ? rcu_pm_notify+0xd0/0xd0 [ 534.895732] ? copy_mount_string+0x40/0x40 [ 534.899966] ? rcu_read_lock_sched_held+0x110/0x130 [ 534.904979] ? kmem_cache_alloc_trace+0x354/0x760 [ 534.909822] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 534.915353] ? _copy_from_user+0xdd/0x150 [ 534.919504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 534.925037] ? copy_mount_options+0x30e/0x440 [ 534.929537] ksys_mount+0xdb/0x150 [ 534.933078] __x64_sys_mount+0xbe/0x150 [ 534.937055] do_syscall_64+0x1a3/0x800 [ 534.940944] ? syscall_return_slowpath+0x5f0/0x5f0 [ 534.945873] ? prepare_exit_to_usermode+0x232/0x3b0 [ 534.950894] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 534.955745] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 534.960929] RIP: 0033:0x458099 [ 534.964116] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 534.983010] RSP: 002b:00007fe646612c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 534.990711] RAX: ffffffffffffffda RBX: 00007fe646612c90 RCX: 0000000000458099 [ 534.997976] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000020000000 [ 535.005239] RBP: 000000000073bf00 R08: 0000000020000300 R09: 0000000000000000 [ 535.012514] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6466136d4 [ 535.019780] R13: 00000000004c3e03 R14: 00000000004d6dd8 R15: 0000000000000004 [ 535.047677] CPU: 1 PID: 6140 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 535.054715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.064064] Call Trace: [ 535.066641] dump_stack+0x1db/0x2d0 [ 535.070281] ? dump_stack_print_info.cold+0x20/0x20 [ 535.075310] should_fail.cold+0xa/0x15 [ 535.079190] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 535.084310] ? ___might_sleep+0x1e7/0x310 [ 535.088447] ? arch_local_save_flags+0x50/0x50 [ 535.093023] __should_failslab+0x121/0x190 [ 535.097248] should_failslab+0x9/0x14 [ 535.101061] kmem_cache_alloc+0x2be/0x710 [ 535.105205] ? __lock_acquire+0x572/0x4a30 [ 535.109436] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 535.114983] mmu_topup_memory_caches+0x97/0x490 [ 535.119651] kvm_mmu_load+0x21/0x1200 [ 535.123438] ? mark_held_locks+0x100/0x100 [ 535.127657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.133181] ? vmx_get_nmi_mask+0x107/0x180 [ 535.137487] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 535.143021] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 535.147530] vcpu_enter_guest+0x3f0e/0x6520 [ 535.151846] ? debug_smp_processor_id+0x1c/0x20 [ 535.156508] ? perf_trace_lock_acquire+0x138/0x7d0 [ 535.161432] ? emulator_read_emulated+0x50/0x50 [ 535.166087] ? perf_trace_lock+0x750/0x750 [ 535.170305] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.175829] ? check_preemption_disabled+0x48/0x290 [ 535.180837] ? __lock_is_held+0xb6/0x140 [ 535.184883] ? lock_acquire+0x1db/0x570 [ 535.188852] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 535.193868] ? lock_release+0xc40/0xc40 [ 535.197840] ? kvm_gen_update_masterclock+0x380/0x380 [ 535.203029] ? rcu_sync_dtor+0x170/0x170 [ 535.207083] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 535.211909] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 535.216917] kvm_vcpu_ioctl+0x558/0x12d0 [ 535.220967] ? kvm_vcpu_block+0x1010/0x1010 [ 535.225296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.230828] ? lock_downgrade+0x910/0x910 [ 535.234969] ? kasan_check_read+0x11/0x20 [ 535.239114] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 535.244381] ? rcu_read_unlock_special+0x380/0x380 [ 535.249312] ? __fget+0x499/0x710 [ 535.252759] ? iterate_fd+0x4b0/0x4b0 [ 535.256549] ? kvm_vcpu_block+0x1010/0x1010 [ 535.260856] do_vfs_ioctl+0x107b/0x17d0 [ 535.264817] ? wait_for_completion+0x810/0x810 [ 535.269390] ? ioctl_preallocate+0x2f0/0x2f0 [ 535.273784] ? __fget_light+0x2db/0x420 [ 535.277746] ? fget_raw+0x20/0x20 [ 535.281192] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 535.286716] ? fput+0x128/0x1a0 [ 535.290021] ? do_syscall_64+0x8c/0x800 [ 535.293994] ? do_syscall_64+0x8c/0x800 [ 535.297962] ? lockdep_hardirqs_on+0x415/0x5d0 [ 535.302535] ? security_file_ioctl+0x93/0xc0 [ 535.306934] ksys_ioctl+0xab/0xd0 [ 535.310390] __x64_sys_ioctl+0x73/0xb0 [ 535.314291] do_syscall_64+0x1a3/0x800 [ 535.318175] ? syscall_return_slowpath+0x5f0/0x5f0 [ 535.323112] ? prepare_exit_to_usermode+0x232/0x3b0 [ 535.328147] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 535.333010] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 535.338204] RIP: 0033:0x458099 [ 535.341404] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 535.360310] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.368019] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 535.375277] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 535.382532] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 535.389788] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 [ 535.397044] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 14:15:04 executing program 0 (fault-call:9 fault-nth:3): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:15:04 executing program 3 (fault-call:4 fault-nth:4): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) [ 535.516668] FAULT_INJECTION: forcing a failure. [ 535.516668] name failslab, interval 1, probability 0, space 0, times 0 [ 535.539743] FAULT_INJECTION: forcing a failure. [ 535.539743] name failslab, interval 1, probability 0, space 0, times 0 [ 535.542492] CPU: 0 PID: 6159 Comm: syz-executor3 Not tainted 5.0.0-rc3 #36 [ 535.557955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.557964] Call Trace: [ 535.557990] dump_stack+0x1db/0x2d0 [ 535.558017] ? dump_stack_print_info.cold+0x20/0x20 [ 535.578560] ? save_stack+0x45/0xd0 [ 535.578582] ? kmem_cache_free+0x86/0x260 [ 535.578614] should_fail.cold+0xa/0x15 [ 535.590288] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 535.595414] ? ___might_sleep+0x1e7/0x310 [ 535.595438] ? arch_local_save_flags+0x50/0x50 [ 535.595467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.595500] __should_failslab+0x121/0x190 [ 535.595526] should_failslab+0x9/0x14 [ 535.595545] kmem_cache_alloc+0x2be/0x710 [ 535.595563] ? putname+0xef/0x130 [ 535.614040] alloc_vfsmnt+0xb8/0x990 [ 535.614059] ? refcount_sub_and_test_checked+0x1fe/0x2f0 [ 535.614081] ? m_stop+0x20/0x20 [ 535.614101] ? refcount_inc_not_zero_checked+0x2e0/0x2e0 [ 535.614124] ? __get_fs_type+0x9a/0xd0 [ 535.614146] ? find_held_lock+0x35/0x120 [ 535.614168] ? __get_fs_type+0x9a/0xd0 [ 535.614191] ? lock_acquire+0x1db/0x570 [ 535.629285] ? lock_downgrade+0x910/0x910 [ 535.629303] ? lock_release+0xc40/0xc40 [ 535.629336] vfs_kern_mount.part.0+0x84/0x570 [ 535.651405] ? may_umount+0xb0/0xb0 [ 535.651431] ? _raw_read_unlock+0x2d/0x50 [ 535.651451] ? __get_fs_type+0x9a/0xd0 [ 535.651488] do_mount+0x58e/0x3330 [ 535.671899] ? rcu_pm_notify+0xd0/0xd0 [ 535.671934] ? copy_mount_string+0x40/0x40 [ 535.671968] ? kmem_cache_alloc_trace+0x354/0x760 [ 535.671992] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 535.691012] ? _copy_from_user+0xdd/0x150 [ 535.691043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.691062] ? copy_mount_options+0x30e/0x440 [ 535.691093] ksys_mount+0xdb/0x150 [ 535.709818] __x64_sys_mount+0xbe/0x150 [ 535.709849] do_syscall_64+0x1a3/0x800 [ 535.709875] ? syscall_return_slowpath+0x5f0/0x5f0 [ 535.709898] ? prepare_exit_to_usermode+0x232/0x3b0 [ 535.731285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 535.731323] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 535.751263] RIP: 0033:0x458099 [ 535.751281] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 535.751293] RSP: 002b:00007fe646612c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 535.751312] RAX: ffffffffffffffda RBX: 00007fe646612c90 RCX: 0000000000458099 [ 535.751325] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000020000000 [ 535.751337] RBP: 000000000073bf00 R08: 0000000020000300 R09: 0000000000000000 [ 535.751349] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6466136d4 [ 535.773422] R13: 00000000004c3e03 R14: 00000000004d6dd8 R15: 0000000000000004 [ 535.783670] CPU: 1 PID: 6157 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 535.803029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.834480] Call Trace: [ 535.837060] dump_stack+0x1db/0x2d0 [ 535.840679] ? dump_stack_print_info.cold+0x20/0x20 [ 535.845693] should_fail.cold+0xa/0x15 [ 535.849573] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 535.854673] ? ___might_sleep+0x1e7/0x310 [ 535.858811] ? arch_local_save_flags+0x50/0x50 [ 535.863394] __should_failslab+0x121/0x190 [ 535.867624] should_failslab+0x9/0x14 [ 535.871414] kmem_cache_alloc+0x2be/0x710 [ 535.875561] mmu_topup_memory_caches+0x97/0x490 [ 535.880229] kvm_mmu_load+0x21/0x1200 [ 535.884017] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.889545] ? vmx_get_nmi_mask+0x107/0x180 [ 535.893854] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 535.899379] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 535.903866] vcpu_enter_guest+0x3f0e/0x6520 [ 535.908187] ? emulator_read_emulated+0x50/0x50 [ 535.912855] ? perf_trace_lock+0x750/0x750 [ 535.917079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.922604] ? check_preemption_disabled+0x48/0x290 [ 535.927613] ? __lock_is_held+0xb6/0x140 [ 535.931666] ? lock_acquire+0x1db/0x570 [ 535.935631] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 535.940639] ? lock_release+0xc40/0xc40 [ 535.944600] ? kvm_gen_update_masterclock+0x380/0x380 [ 535.949778] ? rcu_sync_dtor+0x170/0x170 [ 535.953836] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 535.958667] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 535.963681] kvm_vcpu_ioctl+0x558/0x12d0 [ 535.967737] ? kvm_vcpu_block+0x1010/0x1010 [ 535.972048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.978048] ? lock_downgrade+0x910/0x910 [ 535.982187] ? kasan_check_read+0x11/0x20 [ 535.986338] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 535.991604] ? rcu_read_unlock_special+0x380/0x380 [ 535.996531] ? __fget+0x499/0x710 [ 535.999980] ? iterate_fd+0x4b0/0x4b0 [ 536.003776] ? kvm_vcpu_block+0x1010/0x1010 [ 536.008087] do_vfs_ioctl+0x107b/0x17d0 [ 536.012052] ? wait_for_completion+0x810/0x810 [ 536.016626] ? ioctl_preallocate+0x2f0/0x2f0 [ 536.021022] ? __fget_light+0x2db/0x420 [ 536.024985] ? fget_raw+0x20/0x20 [ 536.028426] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 536.033949] ? fput+0x128/0x1a0 [ 536.037225] ? do_syscall_64+0x8c/0x800 [ 536.041187] ? do_syscall_64+0x8c/0x800 [ 536.045160] ? lockdep_hardirqs_on+0x415/0x5d0 [ 536.049734] ? security_file_ioctl+0x93/0xc0 [ 536.054135] ksys_ioctl+0xab/0xd0 [ 536.057584] __x64_sys_ioctl+0x73/0xb0 [ 536.061462] do_syscall_64+0x1a3/0x800 [ 536.065343] ? syscall_return_slowpath+0x5f0/0x5f0 [ 536.070265] ? prepare_exit_to_usermode+0x232/0x3b0 [ 536.075278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 536.080116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 536.085294] RIP: 0033:0x458099 [ 536.088476] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 536.107365] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.115062] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 536.122318] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 536.129573] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 536.136831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 [ 536.144088] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 [ 536.162248] device hsr_slave_1 left promiscuous mode [ 536.197718] device hsr_slave_0 left promiscuous mode [ 536.249741] team0 (unregistering): Port device team_slave_1 removed [ 536.265379] team0 (unregistering): Port device team_slave_0 removed [ 536.277479] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 536.318052] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 536.429080] bond0 (unregistering): Released all slaves [ 536.570287] chnl_net:caif_netlink_parms(): no params data found [ 536.633829] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.640249] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.647682] device bridge_slave_0 entered promiscuous mode [ 536.657998] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.667777] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.676085] device bridge_slave_1 entered promiscuous mode [ 536.692132] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 536.701535] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 536.719478] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 536.726897] team0: Port device team_slave_0 added [ 536.732405] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 536.739552] team0: Port device team_slave_1 added [ 536.744949] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 536.752304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 536.865094] device hsr_slave_0 entered promiscuous mode [ 536.902488] device hsr_slave_1 entered promiscuous mode [ 536.962735] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 536.969696] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 536.986329] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.992731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.999363] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.005757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.046820] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 537.053196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.062005] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 537.074878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 537.083118] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.090177] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.098451] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 537.117272] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 537.123891] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.133988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.141623] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.148009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.174025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 537.181660] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.188048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.197434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 537.205586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 537.215603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 537.231272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.243441] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 537.249505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 537.257458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 537.265217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 537.285629] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 537.305628] 8021q: adding VLAN 0 to HW filter on device batadv0 14:15:06 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 14:15:06 executing program 3 (fault-call:4 fault-nth:5): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:06 executing program 0 (fault-call:9 fault-nth:4): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:15:06 executing program 2: r0 = memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000300)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x5}]}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4eeb}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000001c0)={r5, 0xfffffffffffffff9, 0x2be5}, 0x10) sync_file_range(r0, 0x7eaf, 0x5, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:06 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x06\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:15:06 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x5421, 0x0) [ 537.361440] binder: 6167:6168 got reply transaction with no transaction stack [ 537.370070] binder: 6167:6168 transaction failed 29201/-71, size 88-16 line 2801 [ 537.387129] binder: 6167:6170 got reply transaction with no transaction stack [ 537.399043] binder: 6167:6170 transaction failed 29201/-71, size 88-16 line 2801 [ 537.450165] FAULT_INJECTION: forcing a failure. [ 537.450165] name failslab, interval 1, probability 0, space 0, times 0 14:15:06 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 537.492402] CPU: 1 PID: 6178 Comm: syz-executor3 Not tainted 5.0.0-rc3 #36 [ 537.499531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.508887] Call Trace: [ 537.511491] dump_stack+0x1db/0x2d0 [ 537.515154] ? dump_stack_print_info.cold+0x20/0x20 [ 537.520186] ? save_stack+0x45/0xd0 [ 537.523825] ? __kasan_slab_free+0x102/0x150 [ 537.528244] ? kmem_cache_free+0x86/0x260 [ 537.532409] should_fail.cold+0xa/0x15 [ 537.536312] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 537.541436] ? ___might_sleep+0x1e7/0x310 [ 537.545600] ? arch_local_save_flags+0x50/0x50 [ 537.550207] ? check_preemption_disabled+0x48/0x290 [ 537.555245] __should_failslab+0x121/0x190 [ 537.559497] should_failslab+0x9/0x14 [ 537.563309] kmem_cache_alloc+0x2be/0x710 [ 537.567641] ? perf_trace_lock_acquire+0x138/0x7d0 [ 537.572585] ? putname+0xef/0x130 [ 537.576060] alloc_vfsmnt+0xb8/0x990 [ 537.579790] ? refcount_sub_and_test_checked+0x1fe/0x2f0 [ 537.585251] ? m_stop+0x20/0x20 [ 537.588539] ? refcount_inc_not_zero_checked+0x2e0/0x2e0 [ 537.594003] ? __get_fs_type+0x9a/0xd0 [ 537.595435] binder: 6184:6189 unknown command 1869770799 [ 537.597895] ? find_held_lock+0x35/0x120 [ 537.597913] ? __get_fs_type+0x9a/0xd0 [ 537.597931] ? lock_acquire+0x1db/0x570 [ 537.597950] ? lock_downgrade+0x910/0x910 [ 537.597965] ? lock_release+0xc40/0xc40 [ 537.623357] vfs_kern_mount.part.0+0x84/0x570 [ 537.627846] ? may_umount+0xb0/0xb0 [ 537.631465] ? _raw_read_unlock+0x2d/0x50 [ 537.635607] ? __get_fs_type+0x9a/0xd0 [ 537.639494] do_mount+0x58e/0x3330 [ 537.643022] ? rcu_pm_notify+0xd0/0xd0 [ 537.646906] ? copy_mount_string+0x40/0x40 [ 537.651148] ? kmem_cache_alloc_trace+0x354/0x760 [ 537.655984] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 537.661510] ? _copy_from_user+0xdd/0x150 [ 537.665649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 537.671173] ? copy_mount_options+0x30e/0x440 [ 537.675660] ksys_mount+0xdb/0x150 [ 537.679192] __x64_sys_mount+0xbe/0x150 [ 537.683159] do_syscall_64+0x1a3/0x800 [ 537.687040] ? syscall_return_slowpath+0x5f0/0x5f0 [ 537.691957] ? prepare_exit_to_usermode+0x232/0x3b0 [ 537.696970] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 537.701809] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 537.706986] RIP: 0033:0x458099 [ 537.710167] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 537.729056] RSP: 002b:00007fe646612c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 537.736758] RAX: ffffffffffffffda RBX: 00007fe646612c90 RCX: 0000000000458099 [ 537.744017] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000020000000 [ 537.751277] RBP: 000000000073bf00 R08: 0000000020000300 R09: 0000000000000000 [ 537.758535] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6466136d4 [ 537.765789] R13: 00000000004c3e03 R14: 00000000004d6dd8 R15: 0000000000000004 [ 537.833692] binder: 6184:6189 ioctl c0306201 20000000 returned -22 14:15:07 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\b\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:15:07 executing program 2: memfd_create(0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000000)={0xa, 0x6, 0x9, 0x5, 'sy4\xa3\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xf7\x00', 0x20000100000000}) sendmmsg(r4, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:07 executing program 3 (fault-call:4 fault-nth:6): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:07 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x5450, 0x0) [ 537.979024] binder: 6184:6189 unknown command 1869770799 [ 538.020889] FAULT_INJECTION: forcing a failure. [ 538.020889] name failslab, interval 1, probability 0, space 0, times 0 [ 538.022599] binder: 6184:6189 ioctl c0306201 20000000 returned -22 [ 538.071290] CPU: 0 PID: 6214 Comm: syz-executor3 Not tainted 5.0.0-rc3 #36 [ 538.078347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.087712] Call Trace: [ 538.090326] dump_stack+0x1db/0x2d0 [ 538.093981] ? dump_stack_print_info.cold+0x20/0x20 [ 538.099038] should_fail.cold+0xa/0x15 [ 538.102970] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 538.108117] ? ___might_sleep+0x1e7/0x310 [ 538.112283] ? arch_local_save_flags+0x50/0x50 [ 538.116881] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 538.122435] ? ida_alloc_range+0x92b/0xcb0 [ 538.126706] __should_failslab+0x121/0x190 [ 538.130963] should_failslab+0x9/0x14 [ 538.134781] __kmalloc_track_caller+0x2d8/0x740 [ 538.139468] ? alloc_vfsmnt+0xb8/0x990 [ 538.143373] ? alloc_vfsmnt+0xb8/0x990 [ 538.147283] ? kstrdup_const+0x66/0x80 [ 538.151193] kstrdup+0x3a/0x70 [ 538.154406] kstrdup_const+0x66/0x80 [ 538.158140] alloc_vfsmnt+0x157/0x990 [ 538.161962] ? m_stop+0x20/0x20 [ 538.165258] ? refcount_inc_not_zero_checked+0x2e0/0x2e0 [ 538.170728] ? __get_fs_type+0x9a/0xd0 [ 538.174630] ? find_held_lock+0x35/0x120 [ 538.178707] ? __get_fs_type+0x9a/0xd0 [ 538.182613] ? lock_acquire+0x1db/0x570 [ 538.186610] ? lock_downgrade+0x910/0x910 [ 538.190768] ? lock_release+0xc40/0xc40 [ 538.194768] vfs_kern_mount.part.0+0x84/0x570 [ 538.199290] ? may_umount+0xb0/0xb0 [ 538.202931] ? _raw_read_unlock+0x2d/0x50 [ 538.207102] ? __get_fs_type+0x9a/0xd0 [ 538.211019] do_mount+0x58e/0x3330 [ 538.214590] ? rcu_pm_notify+0xd0/0xd0 [ 538.218504] ? copy_mount_string+0x40/0x40 [ 538.222770] ? kmem_cache_alloc_trace+0x354/0x760 [ 538.227646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.233198] ? copy_mount_options+0x30e/0x440 [ 538.237722] ksys_mount+0xdb/0x150 [ 538.241286] __x64_sys_mount+0xbe/0x150 [ 538.245287] do_syscall_64+0x1a3/0x800 [ 538.249198] ? syscall_return_slowpath+0x5f0/0x5f0 [ 538.254144] ? prepare_exit_to_usermode+0x232/0x3b0 [ 538.259188] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 538.264077] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 538.269279] RIP: 0033:0x458099 [ 538.272484] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 538.291393] RSP: 002b:00007fe646612c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 538.299113] RAX: ffffffffffffffda RBX: 00007fe646612c90 RCX: 0000000000458099 [ 538.306393] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000020000000 [ 538.313673] RBP: 000000000073bf00 R08: 0000000020000300 R09: 0000000000000000 [ 538.320951] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6466136d4 [ 538.328228] R13: 00000000004c3e03 R14: 00000000004d6dd8 R15: 0000000000000004 [ 538.343620] FAULT_INJECTION: forcing a failure. [ 538.343620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 538.355443] CPU: 1 PID: 6179 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 538.362458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.371816] Call Trace: [ 538.374412] dump_stack+0x1db/0x2d0 [ 538.378070] ? dump_stack_print_info.cold+0x20/0x20 [ 538.383115] should_fail.cold+0xa/0x15 [ 538.387012] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 538.392124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.397673] ? rcu_read_unlock+0x16/0x60 [ 538.401738] ? find_held_lock+0x35/0x120 [ 538.405807] ? rcu_read_unlock+0x16/0x60 [ 538.409877] should_fail_alloc_page+0x50/0x60 [ 538.414363] __alloc_pages_nodemask+0x323/0xdc0 [ 538.419022] ? lock_downgrade+0x910/0x910 [ 538.423173] ? kasan_check_read+0x11/0x20 [ 538.427315] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 538.432587] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 538.437611] ? ___might_sleep+0x1e7/0x310 [ 538.441755] ? trace_hardirqs_off+0xb8/0x310 [ 538.446161] cache_grow_begin+0x9c/0x8c0 [ 538.450223] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 538.455752] ? check_preemption_disabled+0x48/0x290 [ 538.460769] kmem_cache_alloc+0x645/0x710 [ 538.464924] mmu_topup_memory_caches+0x97/0x490 [ 538.469591] kvm_mmu_load+0x21/0x1200 [ 538.473383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.478910] ? vmx_get_nmi_mask+0x107/0x180 [ 538.483224] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 538.488749] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 538.493244] vcpu_enter_guest+0x3f0e/0x6520 [ 538.497574] ? emulator_read_emulated+0x50/0x50 [ 538.502237] ? perf_trace_lock+0x750/0x750 [ 538.506461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.511990] ? check_preemption_disabled+0x48/0x290 [ 538.517010] ? __lock_is_held+0xb6/0x140 [ 538.521097] ? lock_acquire+0x1db/0x570 [ 538.525075] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 538.530090] ? lock_release+0xc40/0xc40 [ 538.534067] ? kvm_gen_update_masterclock+0x380/0x380 [ 538.539253] ? rcu_sync_dtor+0x170/0x170 [ 538.543317] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 538.548149] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 538.553172] kvm_vcpu_ioctl+0x558/0x12d0 [ 538.557233] ? kvm_vcpu_block+0x1010/0x1010 [ 538.561553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.567087] ? lock_downgrade+0x910/0x910 [ 538.571229] ? kasan_check_read+0x11/0x20 [ 538.575371] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 538.580639] ? rcu_read_unlock_special+0x380/0x380 [ 538.585572] ? __fget+0x499/0x710 [ 538.589024] ? iterate_fd+0x4b0/0x4b0 [ 538.592833] ? kvm_vcpu_block+0x1010/0x1010 [ 538.597147] do_vfs_ioctl+0x107b/0x17d0 [ 538.601113] ? wait_for_completion+0x810/0x810 [ 538.605689] ? ioctl_preallocate+0x2f0/0x2f0 [ 538.610093] ? __fget_light+0x2db/0x420 [ 538.614076] ? fget_raw+0x20/0x20 [ 538.617525] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 538.623067] ? fput+0x128/0x1a0 [ 538.626340] ? do_syscall_64+0x8c/0x800 [ 538.630306] ? do_syscall_64+0x8c/0x800 [ 538.634275] ? lockdep_hardirqs_on+0x415/0x5d0 [ 538.638857] ? security_file_ioctl+0x93/0xc0 [ 538.643285] ksys_ioctl+0xab/0xd0 [ 538.646750] __x64_sys_ioctl+0x73/0xb0 [ 538.650631] do_syscall_64+0x1a3/0x800 [ 538.654511] ? syscall_return_slowpath+0x5f0/0x5f0 [ 538.659439] ? prepare_exit_to_usermode+0x232/0x3b0 [ 538.664454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 538.669297] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 538.674476] RIP: 0033:0x458099 [ 538.677663] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 538.696556] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.704255] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 538.711514] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 14:15:07 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:07 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x4) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000080)=0x8, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 538.718778] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 538.726045] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 [ 538.733306] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 14:15:07 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x16\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 538.787238] binder: 6232:6233 unknown command 1869770799 [ 538.864304] binder: 6232:6233 ioctl c0306201 20000000 returned -22 14:15:08 executing program 0 (fault-call:9 fault-nth:5): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:15:08 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000300)={0xffffffffffffffff, 0x3, 0x8000, 0x0, 0xea92}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e21, 0x5, @rand_addr="0721c5cbcce694cd0eacebfc71fe3705", 0xfff}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000480)={0x11, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x90, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c4002000000030000000000000012634840000000000000000000000000000000000000000000000000000000000000000040000000000000001000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000852a747001000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000003000000000000000700000000000000"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00 \x00\x00\x00\x00x\x00\x00\t\x00\x00\x00\x00'], @ANYBLOB="20000000000000000e630c4004000000020000000000000009631040", @ANYRES64=r4, @ANYBLOB="04000000000000000e630c40000000000000000000000000"], 0x23, 0x0, &(0x7f0000000280)="10cc2768943be95a99df15992b9cd264a79a4ecc3ed8575aae9c250260d713c0e867b6"}) 14:15:08 executing program 2: memfd_create(0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(r2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xc5b, 0x80000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x71f}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xff}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={r4, 0x3, 0xfffffffffffffe01, 0x1ff, 0x0, 0x8, 0x86ce, 0x5, {r5, @in6={{0xa, 0x4e22, 0x4, @ipv4={[], [], @loopback}, 0x37f15629}}, 0x6, 0x1f, 0x7, 0xfffffffffffffffc, 0xc86c}}, &(0x7f0000000440)=0xb0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:08 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x5451, 0x0) 14:15:08 executing program 3 (fault-call:4 fault-nth:7): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:08 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x17\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 539.085908] binder: 6260:6261 unknown command 1869770799 [ 539.091418] binder: 6260:6261 ioctl c0306201 20000000 returned -22 [ 539.095450] FAULT_INJECTION: forcing a failure. [ 539.095450] name failslab, interval 1, probability 0, space 0, times 0 14:15:08 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) socket$caif_stream(0x25, 0x1, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x6261b3aaa365b3b9, 0x0) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 539.149066] binder: 6260:6265 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 539.162501] binder: 6260:6265 got reply transaction with no transaction stack [ 539.186217] binder: 6260:6265 transaction failed 29201/-71, size 64-16 line 2801 [ 539.211874] CPU: 0 PID: 6259 Comm: syz-executor3 Not tainted 5.0.0-rc3 #36 [ 539.217924] FAULT_INJECTION: forcing a failure. [ 539.217924] name failslab, interval 1, probability 0, space 0, times 0 [ 539.218905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.218915] Call Trace: [ 539.218938] dump_stack+0x1db/0x2d0 [ 539.218964] ? dump_stack_print_info.cold+0x20/0x20 [ 539.250669] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 539.256217] ? pcpu_alloc+0x160/0x1600 [ 539.257727] binder: 6260:6276 unknown command 1869770799 [ 539.260127] should_fail.cold+0xa/0x15 [ 539.260150] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 539.274614] ? ___might_sleep+0x1e7/0x310 [ 539.278775] ? arch_local_save_flags+0x50/0x50 [ 539.283434] ? __init_waitqueue_head+0x92/0x150 [ 539.288115] ? init_wait_entry+0x1c0/0x1c0 [ 539.292377] __should_failslab+0x121/0x190 [ 539.292595] binder: 6260:6276 ioctl c0306201 20000000 returned -22 [ 539.296623] should_failslab+0x9/0x14 [ 539.296641] kmem_cache_alloc_trace+0x2d1/0x760 [ 539.296661] ? m_stop+0x20/0x20 [ 539.314684] ? refcount_inc_not_zero_checked+0x2e0/0x2e0 [ 539.320157] v9fs_mount+0x5e/0x920 [ 539.323725] mount_fs+0x123/0x43a [ 539.327193] ? emergency_thaw_all+0x260/0x260 [ 539.331700] ? lock_release+0xc40/0xc40 [ 539.335710] vfs_kern_mount.part.0+0xdb/0x570 [ 539.340218] ? may_umount+0xb0/0xb0 [ 539.343851] ? _raw_read_unlock+0x2d/0x50 [ 539.348020] ? __get_fs_type+0x9a/0xd0 [ 539.348218] binder: 6260:6278 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 539.351933] do_mount+0x58e/0x3330 [ 539.351957] ? calibrate_delay.cold+0x47b/0x539 [ 539.366885] ? copy_mount_string+0x40/0x40 [ 539.371127] ? retint_kernel+0x2d/0x2d [ 539.375044] ? copy_mount_options+0x1de/0x440 [ 539.376564] binder: 6260:6278 got reply transaction with no transaction stack [ 539.379543] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 539.379564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 539.379583] ? copy_mount_options+0x30e/0x440 [ 539.401700] ksys_mount+0xdb/0x150 [ 539.404336] binder: 6260:6278 transaction failed 29201/-71, size 64-16 line 2801 [ 539.405249] __x64_sys_mount+0xbe/0x150 [ 539.405275] do_syscall_64+0x1a3/0x800 [ 539.420718] ? syscall_return_slowpath+0x5f0/0x5f0 [ 539.425656] ? prepare_exit_to_usermode+0x232/0x3b0 [ 539.430687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 539.434160] binder: undelivered TRANSACTION_ERROR: 29201 [ 539.435563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 539.435576] RIP: 0033:0x458099 [ 539.435593] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 539.468438] RSP: 002b:00007fe646612c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 539.476153] RAX: ffffffffffffffda RBX: 00007fe646612c90 RCX: 0000000000458099 [ 539.483438] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000020000000 [ 539.490708] RBP: 000000000073bf00 R08: 0000000020000300 R09: 0000000000000000 [ 539.497992] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6466136d4 [ 539.505263] R13: 00000000004c3e03 R14: 00000000004d6dd8 R15: 0000000000000004 14:15:08 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x2, 0x0, {0xffffffffffffffff, 0x84c09adcfda61fa3, 0x4, 0x1, 0x3}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 539.513045] CPU: 1 PID: 6269 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 539.520066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.526552] binder: undelivered TRANSACTION_ERROR: 29201 [ 539.529495] Call Trace: [ 539.529512] dump_stack+0x1db/0x2d0 [ 539.529529] ? dump_stack_print_info.cold+0x20/0x20 [ 539.529553] should_fail.cold+0xa/0x15 [ 539.541179] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 539.541203] ? ___might_sleep+0x1e7/0x310 [ 539.541219] ? arch_local_save_flags+0x50/0x50 [ 539.555186] __should_failslab+0x121/0x190 [ 539.555204] should_failslab+0x9/0x14 [ 539.555217] kmem_cache_alloc+0x2be/0x710 [ 539.576070] mmu_topup_memory_caches+0x97/0x490 [ 539.580773] kvm_mmu_load+0x21/0x1200 [ 539.584572] ? mark_held_locks+0x100/0x100 [ 539.588804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 539.594344] ? vmx_get_nmi_mask+0x107/0x180 [ 539.598671] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 539.604220] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 539.608731] vcpu_enter_guest+0x3f0e/0x6520 [ 539.613067] ? debug_smp_processor_id+0x1c/0x20 [ 539.617738] ? perf_trace_lock_acquire+0x138/0x7d0 [ 539.618367] binder: 6280:6282 unknown command 1869770799 [ 539.622697] ? emulator_read_emulated+0x50/0x50 [ 539.622714] ? perf_trace_lock+0x750/0x750 [ 539.622729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 539.622745] ? check_preemption_disabled+0x48/0x290 [ 539.622768] ? __lock_is_held+0xb6/0x140 [ 539.622786] ? lock_acquire+0x1db/0x570 [ 539.632614] binder: 6280:6284 unknown command 1869770799 14:15:08 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0xcd, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 539.632886] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 539.638791] binder: 6280:6282 ioctl c0306201 20000000 returned -22 [ 539.642632] ? lock_release+0xc40/0xc40 [ 539.642649] ? kvm_gen_update_masterclock+0x380/0x380 [ 539.642668] ? rcu_sync_dtor+0x170/0x170 [ 539.642691] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 539.642705] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 539.642730] kvm_vcpu_ioctl+0x558/0x12d0 [ 539.642747] ? kvm_vcpu_block+0x1010/0x1010 [ 539.642764] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 539.651808] ? lock_downgrade+0x910/0x910 [ 539.651820] ? kasan_check_read+0x11/0x20 [ 539.651835] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 539.666309] ? rcu_read_unlock_special+0x380/0x380 [ 539.666336] ? __fget+0x499/0x710 [ 539.666358] ? iterate_fd+0x4b0/0x4b0 [ 539.666375] ? kvm_vcpu_block+0x1010/0x1010 [ 539.666388] do_vfs_ioctl+0x107b/0x17d0 [ 539.666404] ? wait_for_completion+0x810/0x810 [ 539.675901] binder: 6280:6284 ioctl c0306201 20000000 returned -22 [ 539.676661] ? ioctl_preallocate+0x2f0/0x2f0 [ 539.676678] ? __fget_light+0x2db/0x420 [ 539.676693] ? fget_raw+0x20/0x20 [ 539.709603] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 539.709620] ? fput+0x128/0x1a0 [ 539.709635] ? do_syscall_64+0x8c/0x800 [ 539.709650] ? do_syscall_64+0x8c/0x800 [ 539.728088] ? lockdep_hardirqs_on+0x415/0x5d0 [ 539.728111] ? security_file_ioctl+0x93/0xc0 [ 539.728132] ksys_ioctl+0xab/0xd0 [ 539.728150] __x64_sys_ioctl+0x73/0xb0 [ 539.733655] binder: 6287:6288 unknown command 1869770799 [ 539.735377] do_syscall_64+0x1a3/0x800 [ 539.735397] ? syscall_return_slowpath+0x5f0/0x5f0 [ 539.735413] ? prepare_exit_to_usermode+0x232/0x3b0 [ 539.762558] binder: 6287:6288 ioctl c0306201 20000000 returned -22 [ 539.762897] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 539.762923] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 539.834827] RIP: 0033:0x458099 [ 539.838031] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 539.856916] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:15:09 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0xfffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x3f, 0x4) [ 539.864608] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 539.871862] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 539.879116] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 539.886368] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 [ 539.893706] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 14:15:09 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x5452, 0x0) 14:15:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) [ 539.998786] binder: 6301:6301 unknown command 1869770799 [ 540.017981] binder: 6301:6301 ioctl c0306201 20000000 returned -22 14:15:09 executing program 0 (fault-call:9 fault-nth:6): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:15:09 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x18\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:15:09 executing program 1: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 540.055572] binder: 6298:6301 unknown command 1869770799 [ 540.061172] binder: 6298:6301 ioctl c0306201 20000000 returned -22 14:15:09 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000002004e20e0008001000000000000000000000000000000000000000000000000000000000000000000000000000000091000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e21000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000002004e21ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4c815e441a3faa186f1cccfc6c03ef97c40f57fb25f0000000000"], 0x210) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) eventfd2(0xffffffffffffffff, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:09 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x5460, 0x0) [ 540.226002] FAULT_INJECTION: forcing a failure. [ 540.226002] name failslab, interval 1, probability 0, space 0, times 0 [ 540.280352] CPU: 1 PID: 6318 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 540.287406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.296759] Call Trace: [ 540.299346] dump_stack+0x1db/0x2d0 [ 540.299366] ? dump_stack_print_info.cold+0x20/0x20 [ 540.299379] ? percpu_ref_put_many+0x129/0x270 [ 540.299404] should_fail.cold+0xa/0x15 [ 540.316484] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 540.321602] ? ___might_sleep+0x1e7/0x310 [ 540.325758] ? arch_local_save_flags+0x50/0x50 [ 540.330358] __should_failslab+0x121/0x190 [ 540.334595] should_failslab+0x9/0x14 [ 540.334611] kmem_cache_alloc+0x2be/0x710 [ 540.334627] ? __lock_acquire+0x572/0x4a30 [ 540.334645] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 540.334667] mmu_topup_memory_caches+0x97/0x490 [ 540.334687] kvm_mmu_load+0x21/0x1200 [ 540.334700] ? mark_held_locks+0x100/0x100 [ 540.334713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 540.334731] ? vmx_get_nmi_mask+0x107/0x180 [ 540.365063] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 14:15:09 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00`\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 540.365080] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 540.365099] vcpu_enter_guest+0x3f0e/0x6520 [ 540.365121] ? emulator_read_emulated+0x50/0x50 [ 540.374941] ? add_lock_to_list.isra.0+0x450/0x450 [ 540.374955] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 540.374967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 540.374982] ? check_preemption_disabled+0x48/0x290 [ 540.375002] ? __lock_is_held+0xb6/0x140 [ 540.375018] ? lock_acquire+0x1db/0x570 [ 540.375029] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 540.375046] ? lock_release+0xc40/0xc40 [ 540.375059] ? kvm_gen_update_masterclock+0x380/0x380 [ 540.375074] ? rcu_sync_dtor+0x170/0x170 [ 540.375094] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 540.375107] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 540.375132] kvm_vcpu_ioctl+0x558/0x12d0 [ 540.375148] ? kvm_vcpu_block+0x1010/0x1010 [ 540.375163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 540.465027] ? lock_downgrade+0x910/0x910 [ 540.469158] ? kasan_check_read+0x11/0x20 [ 540.473289] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 540.478550] ? rcu_read_unlock_special+0x380/0x380 [ 540.483469] ? __fget+0x499/0x710 [ 540.486918] ? iterate_fd+0x4b0/0x4b0 [ 540.490710] ? kvm_vcpu_block+0x1010/0x1010 [ 540.495017] do_vfs_ioctl+0x107b/0x17d0 [ 540.498982] ? wait_for_completion+0x810/0x810 [ 540.503574] ? ioctl_preallocate+0x2f0/0x2f0 [ 540.507979] ? __fget_light+0x2db/0x420 [ 540.511944] ? fget_raw+0x20/0x20 [ 540.515382] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 540.520913] ? fput+0x128/0x1a0 [ 540.524185] ? do_syscall_64+0x8c/0x800 [ 540.528174] ? do_syscall_64+0x8c/0x800 [ 540.532149] ? lockdep_hardirqs_on+0x415/0x5d0 [ 540.536722] ? security_file_ioctl+0x93/0xc0 [ 540.541134] ksys_ioctl+0xab/0xd0 [ 540.544573] __x64_sys_ioctl+0x73/0xb0 [ 540.548543] do_syscall_64+0x1a3/0x800 [ 540.552423] ? syscall_return_slowpath+0x5f0/0x5f0 [ 540.557338] ? prepare_exit_to_usermode+0x232/0x3b0 [ 540.562343] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 540.567173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 540.572345] RIP: 0033:0x458099 [ 540.575525] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 540.594582] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.602276] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 540.609540] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 540.616789] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 540.624038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 14:15:09 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x4) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000080)=0x8, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffe84, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) [ 540.631291] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 14:15:09 executing program 1 (fault-call:3 fault-nth:0): r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0xffffffeb}, {}], 0x30) 14:15:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='\n27.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) [ 540.691752] binder: 6345:6346 unknown command 1869770799 [ 540.728651] binder: 6345:6346 ioctl c0306201 20000000 returned -22 14:15:09 executing program 2: memfd_create(0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0xc0001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x8, [0x8, 0x1, 0xff, 0x3, 0xffff, 0x4, 0xf4, 0xffffffffffff4e85]}, 0x14) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000300)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:09 executing program 0 (fault-call:9 fault-nth:7): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:15:10 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\xe8\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:15:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='.27.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:10 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x40049409, 0x0) 14:15:10 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0xffffffeb}, {}], 0x30) [ 540.953994] FAULT_INJECTION: forcing a failure. [ 540.953994] name failslab, interval 1, probability 0, space 0, times 0 [ 541.019033] CPU: 1 PID: 6368 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 541.026098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.035456] Call Trace: [ 541.038052] dump_stack+0x1db/0x2d0 [ 541.041689] ? dump_stack_print_info.cold+0x20/0x20 [ 541.046711] ? percpu_ref_put_many+0x129/0x270 [ 541.051322] should_fail.cold+0xa/0x15 [ 541.051344] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 541.051366] ? ___might_sleep+0x1e7/0x310 [ 541.064466] ? arch_local_save_flags+0x50/0x50 [ 541.064493] __should_failslab+0x121/0x190 [ 541.064510] should_failslab+0x9/0x14 [ 541.064523] kmem_cache_alloc+0x2be/0x710 [ 541.064537] ? __lock_acquire+0x572/0x4a30 [ 541.064551] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 541.064569] mmu_topup_memory_caches+0x97/0x490 [ 541.095694] kvm_mmu_load+0x21/0x1200 [ 541.099493] ? mark_held_locks+0x100/0x100 [ 541.103735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.103751] ? vmx_get_nmi_mask+0x107/0x180 [ 541.103763] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 541.103774] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 541.103791] vcpu_enter_guest+0x3f0e/0x6520 [ 541.113615] ? emulator_read_emulated+0x50/0x50 [ 541.113628] ? add_lock_to_list.isra.0+0x450/0x450 [ 541.113643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.113656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.113671] ? check_preemption_disabled+0x48/0x290 [ 541.113691] ? __lock_is_held+0xb6/0x140 [ 541.113709] ? lock_acquire+0x1db/0x570 [ 541.113723] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 541.113741] ? lock_release+0xc40/0xc40 [ 541.148666] ? kvm_gen_update_masterclock+0x380/0x380 [ 541.148685] ? rcu_sync_dtor+0x170/0x170 [ 541.148708] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 541.148725] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 541.157779] kvm_vcpu_ioctl+0x558/0x12d0 [ 541.193909] ? kvm_vcpu_block+0x1010/0x1010 [ 541.198242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.203790] ? lock_downgrade+0x910/0x910 [ 541.207944] ? kasan_check_read+0x11/0x20 [ 541.212099] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 14:15:10 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x4004ae8b, 0x0) [ 541.217384] ? rcu_read_unlock_special+0x380/0x380 [ 541.222328] ? __fget+0x499/0x710 [ 541.222348] ? iterate_fd+0x4b0/0x4b0 [ 541.222371] ? kvm_vcpu_block+0x1010/0x1010 [ 541.222385] do_vfs_ioctl+0x107b/0x17d0 [ 541.222418] ? wait_for_completion+0x810/0x810 [ 541.222439] ? ioctl_preallocate+0x2f0/0x2f0 [ 541.246910] ? __fget_light+0x2db/0x420 [ 541.250891] ? fget_raw+0x20/0x20 [ 541.254353] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 541.259907] ? fput+0x128/0x1a0 [ 541.263189] ? do_syscall_64+0x8c/0x800 [ 541.267159] ? do_syscall_64+0x8c/0x800 [ 541.271129] ? lockdep_hardirqs_on+0x415/0x5d0 [ 541.275736] ? security_file_ioctl+0x93/0xc0 [ 541.280134] ksys_ioctl+0xab/0xd0 [ 541.283578] __x64_sys_ioctl+0x73/0xb0 [ 541.287454] do_syscall_64+0x1a3/0x800 [ 541.291331] ? syscall_return_slowpath+0x5f0/0x5f0 [ 541.296244] ? prepare_exit_to_usermode+0x232/0x3b0 [ 541.301251] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 541.306084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 541.311286] RIP: 0033:0x458099 [ 541.314465] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 541.333351] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.341043] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 541.348294] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 541.355545] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 541.362801] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 [ 541.370055] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 14:15:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='027.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:10 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\xfc\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:15:10 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0xffffffe9}, {}], 0x30) 14:15:10 executing program 2: memfd_create(0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000000c0)=0x101) sendmsg$nfc_llcp(r3, &(0x7f0000000000)={&(0x7f0000000300)={0x27, 0x1, 0x2, 0x7, 0x328, 0x2, "12d2be2dc968273743a187003a2b83adfa4d69eb8dc5adf3030056c054ef9c554a2b804d78453518db7a7f24207fe1d38d448e56f43b9726c23f2fbcb8892e", 0x3d}, 0x60, &(0x7f00000005c0)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000000380)="ace6bc2db372d2371887491ba94b26b24d5dd18b2fc5b1c51357fe3c51c2e6a6e703194c654905d7225b543c79b6ca91699317a0bb9bd912e3aa5d29b729704d6baa9119227eeca5a233e83f5129cdb8cb592869b4d9e19464d019de2ed0306627631aa909e3e93b", 0x68}, {&(0x7f0000000400)="08f1dbd6f5ac277f015e4c83758ee7b2e1cf7010b2ade843810396a81ad3882d89e0c6f51f3a7a69ea11c9f2b254f33e95a5c8d6d13a7aba14488031ff6f79fa53273203eb0b65c5d0632bdfbd62b2187c6ae5ea740d285f0bdb70d070c661a5ac6c2c1aee2dda5e877f0a4c97b962dee064df7e2b92fb94cbc5dc827d8f7b87fdcf82b0a291ce5d0f4f73a5deffff58b7a2bbfc7dca8fe3e5af39a6cc7ddf6171c8b43679e551875dc8d76a5fd46b0ad04ba94c44a4f38d7717eb78ce0666d81be09d61c620c81c9926fac531c4", 0xce}, {&(0x7f0000000500)="44d1472792396cb2c4b17335713a77960ede1bdd2a79f44204b5b9262041dedb0efbb9fe0aa9fb1637a836d059cbba7abd6864734fab5aa182cd0a93536324e229961dededaf38cbc88d62235dab412e1133e2183aace8728636263f085fb16f5053ea83b2e6afda4cd3d3c48fb323becb5af3f966ef0735f57f42e85b52da005ac4c0e1e8ec24b2fdee2263808f686a6c70ea33", 0x94}], 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="480400000000000084000000f30000004008b46f97e9baf944cd8f7d28e84321e3e0964e1d03423b40dd326fb8a117feb659a41a3cddedf9c8ed3ca2890800cbc061480000000000"], 0x48, 0x40000}, 0x8000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:10 executing program 0 (fault-call:9 fault-nth:8): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:15:10 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x4004ae99, 0x0) 14:15:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='227.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:10 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\xfd\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:15:10 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0xfffffff2}, {}], 0x30) [ 541.708934] FAULT_INJECTION: forcing a failure. [ 541.708934] name failslab, interval 1, probability 0, space 0, times 0 [ 541.779144] CPU: 0 PID: 6416 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 541.786214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.795571] Call Trace: [ 541.798152] dump_stack+0x1db/0x2d0 [ 541.801765] ? dump_stack_print_info.cold+0x20/0x20 [ 541.806761] ? percpu_ref_put_many+0x129/0x270 [ 541.811809] should_fail.cold+0xa/0x15 [ 541.815695] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 541.820787] ? ___might_sleep+0x1e7/0x310 [ 541.824922] ? arch_local_save_flags+0x50/0x50 [ 541.829499] __should_failslab+0x121/0x190 [ 541.833723] should_failslab+0x9/0x14 [ 541.837510] kmem_cache_alloc+0x2be/0x710 [ 541.841641] ? __lock_acquire+0x572/0x4a30 [ 541.845860] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 541.851387] mmu_topup_memory_caches+0x97/0x490 [ 541.856044] kvm_mmu_load+0x21/0x1200 [ 541.859838] ? mark_held_locks+0x100/0x100 [ 541.864072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.869595] ? vmx_get_nmi_mask+0x107/0x180 [ 541.873904] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 541.879428] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 541.883915] vcpu_enter_guest+0x3f0e/0x6520 [ 541.888231] ? emulator_read_emulated+0x50/0x50 [ 541.892884] ? add_lock_to_list.isra.0+0x450/0x450 [ 541.897799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.903329] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.908854] ? check_preemption_disabled+0x48/0x290 [ 541.913860] ? __lock_is_held+0xb6/0x140 [ 541.917913] ? lock_acquire+0x1db/0x570 [ 541.921872] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 541.926891] ? lock_release+0xc40/0xc40 [ 541.930851] ? kvm_gen_update_masterclock+0x380/0x380 [ 541.936027] ? rcu_sync_dtor+0x170/0x170 [ 541.940094] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 541.944923] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 541.949933] kvm_vcpu_ioctl+0x558/0x12d0 [ 541.953982] ? kvm_vcpu_block+0x1010/0x1010 [ 541.958291] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.963826] ? lock_downgrade+0x910/0x910 [ 541.967961] ? kasan_check_read+0x11/0x20 [ 541.972096] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 541.977607] ? rcu_read_unlock_special+0x380/0x380 [ 541.982533] ? __fget+0x499/0x710 [ 541.985988] ? iterate_fd+0x4b0/0x4b0 [ 541.989792] ? kvm_vcpu_block+0x1010/0x1010 [ 541.994112] do_vfs_ioctl+0x107b/0x17d0 [ 541.998077] ? wait_for_completion+0x810/0x810 [ 542.002649] ? ioctl_preallocate+0x2f0/0x2f0 [ 542.007052] ? __fget_light+0x2db/0x420 [ 542.011014] ? fget_raw+0x20/0x20 [ 542.014457] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 542.019979] ? fput+0x128/0x1a0 [ 542.023244] ? do_syscall_64+0x8c/0x800 [ 542.027224] ? do_syscall_64+0x8c/0x800 [ 542.031184] ? lockdep_hardirqs_on+0x415/0x5d0 [ 542.035755] ? security_file_ioctl+0x93/0xc0 [ 542.040149] ksys_ioctl+0xab/0xd0 [ 542.043591] __x64_sys_ioctl+0x73/0xb0 [ 542.047465] do_syscall_64+0x1a3/0x800 [ 542.051341] ? syscall_return_slowpath+0x5f0/0x5f0 [ 542.056258] ? prepare_exit_to_usermode+0x232/0x3b0 [ 542.061263] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 542.066099] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 542.071378] RIP: 0033:0x458099 [ 542.074559] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 542.093537] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 542.101228] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 542.108598] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 542.115871] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 542.123123] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 14:15:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='1\n7.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) [ 542.130375] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 14:15:11 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x4020940d, 0x0) 14:15:11 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x400000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:11 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0xfffffff3}, {}], 0x30) 14:15:11 executing program 2: memfd_create(0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) quotactl(0x6, &(0x7f0000000400)='./file1\x00', r3, &(0x7f0000000600)="95b9bebdc15a8aee794168fd368f4498514cc585a91b4e9ca32a560687a2dec5f95147974877ecf240ae918b92eb8739508ffff09db305540c181991fa5bbfd1e1741a0390fe3c5ffed55098a912d1d2e70fe312a868a079a36496d1fece9379685bc79e2b7ace3725870faa45e1646a28") syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000300)="0f4b7769f8bfea87a52deea89f9d98f4288780054ff466a19f45cdbbd4f85882814ec3ccc50af173dcc872f09f02991d0cb6dddb4f63b42e683894a892528ffbc01b5c80981118debb9c882a5acbdc30ba6d0967ee83fe8163b14a337138db7d22981bb110552be3789504b54f61b92960432ed982fa83eb600ad677be8d0bf8b41a1109324bc36c404cab6a0cc84a01a26506e00c4018d9854fefba050b30b6346e7158", 0xa4, 0x6}], 0x0, &(0x7f0000000440)={[{@usrquota={'usrquota', 0x3d, 'selinux\x99md5sum'}}, {@fsync_mode_strict='fsync_mode=strict'}, {@flush_merge='flush_merge'}, {@background_gc_sync='background_gc=sync'}, {@fastboot='fastboot'}, {@grpquota={'grpquota', 0x3d, 'cgroup/'}}], [{@hash='hash'}]}) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000780)={0x5, 0x6, 0x7fff, 0x21, 0x10000}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000001b80)={&(0x7f0000000980)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000a00)}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/16, 0x10}], 0x3, &(0x7f0000001b00)=""/92, 0x5c}, 0x142) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001bc0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001c00)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000001d00)=0xe8) sendmsg$nl_route(r4, &(0x7f0000001e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000680)=ANY=[@ANYBLOB="78000000180000002bbd7000fedbdf251c000000fe0cc8070008000008000400", @ANYRES32=r6, @ANYBLOB="08001a0001000000100001000000002b4b73e4868fbb6800ffe4271cc4ee80d4f9b4aec04617ce3a5378f55b48001a00543b0fcebbfbb684f412bfd1a41fd0b46acf5becb60995a100db89460ff444af2e00ac9fe29870c54e41fe4b536fd7defae1d76ebb01a3100c655cfe545f48e21a2127f0e3278ef306ff5ff9547a7cde31bd5aee2b", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="08001a0000000000140001000000001000000000000000000000000008001a0006000000"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x2004c811) 14:15:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='1.7.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:11 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r2 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x7a647b75, 0x7f, 0x0, 0x1, 0x1}, 0x2a9) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={r4}) 14:15:11 executing program 0 (fault-call:9 fault-nth:9): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:15:11 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0xffffffeb, 0x2}, {}], 0x30) 14:15:11 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x4048ae9b, 0x0) [ 542.510901] FAULT_INJECTION: forcing a failure. [ 542.510901] name failslab, interval 1, probability 0, space 0, times 0 [ 542.553442] CPU: 1 PID: 6472 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 542.560510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.569867] Call Trace: [ 542.572463] dump_stack+0x1db/0x2d0 [ 542.576094] ? dump_stack_print_info.cold+0x20/0x20 [ 542.581106] ? percpu_ref_put_many+0x129/0x270 [ 542.585709] should_fail.cold+0xa/0x15 [ 542.589614] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 542.594739] ? ___might_sleep+0x1e7/0x310 [ 542.598911] ? arch_local_save_flags+0x50/0x50 14:15:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='117.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) [ 542.603514] __should_failslab+0x121/0x190 [ 542.607762] should_failslab+0x9/0x14 [ 542.611574] kmem_cache_alloc+0x2be/0x710 [ 542.615727] ? __lock_acquire+0x572/0x4a30 [ 542.619964] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 542.625513] mmu_topup_memory_caches+0x97/0x490 [ 542.630186] kvm_mmu_load+0x21/0x1200 [ 542.633971] ? mark_held_locks+0x100/0x100 [ 542.638192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.643717] ? vmx_get_nmi_mask+0x107/0x180 [ 542.648023] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 542.653547] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 542.658036] vcpu_enter_guest+0x3f0e/0x6520 [ 542.662352] ? emulator_read_emulated+0x50/0x50 [ 542.667007] ? add_lock_to_list.isra.0+0x450/0x450 [ 542.671921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.677444] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.682983] ? check_preemption_disabled+0x48/0x290 [ 542.687992] ? __lock_is_held+0xb6/0x140 [ 542.692045] ? lock_acquire+0x1db/0x570 [ 542.696012] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 542.701015] ? lock_release+0xc40/0xc40 [ 542.704974] ? kvm_gen_update_masterclock+0x380/0x380 [ 542.710167] ? rcu_sync_dtor+0x170/0x170 [ 542.714240] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 542.719067] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 542.724078] kvm_vcpu_ioctl+0x558/0x12d0 [ 542.728129] ? kvm_vcpu_block+0x1010/0x1010 [ 542.732434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.737960] ? lock_downgrade+0x910/0x910 [ 542.742108] ? kasan_check_read+0x11/0x20 [ 542.746242] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 542.751526] ? rcu_read_unlock_special+0x380/0x380 [ 542.756445] ? __fget+0x499/0x710 [ 542.759887] ? iterate_fd+0x4b0/0x4b0 [ 542.763673] ? kvm_vcpu_block+0x1010/0x1010 [ 542.768090] do_vfs_ioctl+0x107b/0x17d0 [ 542.772048] ? wait_for_completion+0x810/0x810 [ 542.776618] ? ioctl_preallocate+0x2f0/0x2f0 [ 542.781014] ? __fget_light+0x2db/0x420 [ 542.784972] ? fget_raw+0x20/0x20 [ 542.788411] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 542.793944] ? fput+0x128/0x1a0 [ 542.797215] ? do_syscall_64+0x8c/0x800 [ 542.801188] ? do_syscall_64+0x8c/0x800 [ 542.805143] ? lockdep_hardirqs_on+0x415/0x5d0 [ 542.809712] ? security_file_ioctl+0x93/0xc0 [ 542.814103] ksys_ioctl+0xab/0xd0 [ 542.817542] __x64_sys_ioctl+0x73/0xb0 [ 542.821414] do_syscall_64+0x1a3/0x800 [ 542.825299] ? syscall_return_slowpath+0x5f0/0x5f0 [ 542.830215] ? prepare_exit_to_usermode+0x232/0x3b0 [ 542.835215] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 542.840045] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 542.845212] RIP: 0033:0x458099 [ 542.848402] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 542.867289] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 542.874980] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 542.882234] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 542.889599] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 542.896852] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 14:15:12 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000180)=""/17, &(0x7f00000001c0)=0x11) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000400)="0adc1f023c123f3188a0706acb54a660a68da392ceb331f378976b20dbc815cd15d31760e30100008013f942b7e26a45bb0985aa9181611e5496f4727305b748") r4 = socket$kcm(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000a40)={0x0, 0x49}, &(0x7f0000000a80)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000ac0)={r5, 0x6, 0xfffffffffffffffb}, 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="19e26c393b27d894", @ANYRES16=r7, @ANYBLOB="02042cbd7000fcdbdf250a0000000c0001000800050002000000080004001f00000044000200080003000300000008000800050000000800090005000000080009000900000008000300010000000800090006000000080006000000008008000b00020000004800020008000b000200000014000100fe880000000000000000000000000001080005000000000008000b000a0000000800080000010000080008000700000008000b000a0000003000020014000100ff01000000000000000000000000000108000600085700000800050003000000080007005e0000005c000100080009000400000014000300fe8000000000000000000000000000aa0800050001000000080001000a0000000c0007000000000014000000080009003b00000008000600776c63000800090078000000080006006f76660008000400060000003800010008000100020000000c0007000b1fec6502000000080004004e2300000800080006000000080005000000000008000600776c6300"], 0x180}, 0x1, 0x0, 0x0, 0x20000004}, 0x815) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x2c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) r10 = dup3(r8, r4, 0x80000) ioctl$IOC_PR_REGISTER(r10, 0x401870c8, &(0x7f0000000480)={0x0, 0x8001, 0x1}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000940)='NET_DM\x00') setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast1, @empty, r9}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r6}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') acct(&(0x7f00000003c0)='./file0\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xe0, r7, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4c}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xec5a}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffffffff2a3b}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) read$alg(r0, &(0x7f0000000840)=""/213, 0xd5) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) mkdirat$cgroup(r10, &(0x7f0000000980)='syz1\x00', 0x1ff) [ 542.904122] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 14:15:12 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x9, &(0x7f0000000300)=[{0x8, 0xfffffffffffffffc, 0x7f, 0x6}, {0x0, 0x7, 0x2, 0x6}, {0xffffffffffffffe0, 0x7f, 0xfee4, 0x6}, {0x1, 0x7f, 0x7, 0x8}, {0x3, 0x100000000, 0xfffffffffffffffc, 0x5}, {0x10000, 0x9, 0x2c, 0x100000000}, {0x1ff00, 0x4928, 0x6, 0x3ff}, {0x6, 0x0, 0x3f}, {0xa9b7, 0x0, 0xf35, 0xb68}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:12 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0xffffffeb, 0x1000000}, {}], 0x30) 14:15:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='12\n.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:12 executing program 0 (fault-call:9 fault-nth:10): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:15:12 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) connect(r2, &(0x7f0000000300)=@x25={0x9, @remote={[], 0x1}}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:12 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x4090ae82, 0x0) 14:15:12 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0xffffffeb, 0x2000000}, {}], 0x30) 14:15:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='12..0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:12 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x3, 0x9, 0xfc6, 0x70b, 0x0, 0x5, 0x20, 0x5, 0x3f, 0x9, 0x6, 0x3eeb3e31, 0x7, 0x2, 0x6a5, 0x0, 0x10000, 0x9, 0x5, 0x6, 0x1, 0x8, 0x6, 0x0, 0x1, 0x4, 0x4000000000000, 0xa8c9, 0x2, 0x3, 0x0, 0x0, 0x80000000, 0x400, 0x4e8d, 0x7f, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x1510, 0x81, 0x1, 0x676114d2e3404aa0}, 0xffffffffffffffff, 0xc, r1, 0x3) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 543.205887] FAULT_INJECTION: forcing a failure. [ 543.205887] name failslab, interval 1, probability 0, space 0, times 0 14:15:12 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) exit(0xfff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000480)=0x20420040) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2300}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="310925bd7000fcdbdf250e0000005800020008000b000a000000080007003f0000000800060001000000080004000000000008000b000200000014000100fe88000000000000000000000000010108000b0002000000080002004e21000008000400040000000c00010008000500030000002c00030008000400dd0d0000080007004e2300000800010002000000080001000200000008000400070000000800050000800000080006009802000008000600020000000800050007000000"], 0xc4}, 0x1, 0x0, 0x0, 0x24040004}, 0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 543.283501] CPU: 0 PID: 6512 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 543.290628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.299976] Call Trace: [ 543.302572] dump_stack+0x1db/0x2d0 [ 543.306214] ? dump_stack_print_info.cold+0x20/0x20 [ 543.311241] ? percpu_ref_put_many+0x129/0x270 [ 543.315825] should_fail.cold+0xa/0x15 [ 543.319700] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 543.324810] ? ___might_sleep+0x1e7/0x310 [ 543.328941] ? arch_local_save_flags+0x50/0x50 [ 543.333507] __should_failslab+0x121/0x190 [ 543.337739] should_failslab+0x9/0x14 [ 543.341524] kmem_cache_alloc+0x2be/0x710 [ 543.345659] ? mark_held_locks+0xb1/0x100 [ 543.349790] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 543.355311] mmu_topup_memory_caches+0x97/0x490 [ 543.359978] kvm_mmu_load+0x21/0x1200 [ 543.363772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.369303] ? vmx_get_nmi_mask+0x107/0x180 [ 543.373610] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 543.379131] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 543.383618] vcpu_enter_guest+0x3f0e/0x6520 [ 543.387928] ? emulator_read_emulated+0x50/0x50 [ 543.392579] ? add_lock_to_list.isra.0+0x450/0x450 [ 543.397491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.403015] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.408540] ? check_preemption_disabled+0x48/0x290 [ 543.413548] ? __lock_is_held+0xb6/0x140 [ 543.417598] ? lock_acquire+0x1db/0x570 [ 543.421555] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 543.426558] ? lock_release+0xc40/0xc40 [ 543.430514] ? kvm_gen_update_masterclock+0x380/0x380 [ 543.435689] ? rcu_sync_dtor+0x170/0x170 [ 543.439756] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 543.444584] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 543.449612] kvm_vcpu_ioctl+0x558/0x12d0 [ 543.453664] ? kvm_vcpu_block+0x1010/0x1010 [ 543.457968] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.463495] ? lock_downgrade+0x910/0x910 [ 543.467635] ? kasan_check_read+0x11/0x20 [ 543.471777] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 543.477039] ? rcu_read_unlock_special+0x380/0x380 [ 543.481956] ? __fget+0x499/0x710 [ 543.485397] ? iterate_fd+0x4b0/0x4b0 [ 543.489182] ? kvm_vcpu_block+0x1010/0x1010 [ 543.493488] do_vfs_ioctl+0x107b/0x17d0 [ 543.497449] ? wait_for_completion+0x810/0x810 [ 543.502019] ? ioctl_preallocate+0x2f0/0x2f0 [ 543.506411] ? __fget_light+0x2db/0x420 [ 543.510368] ? fget_raw+0x20/0x20 [ 543.513826] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 543.519348] ? fput+0x128/0x1a0 [ 543.522612] ? do_syscall_64+0x8c/0x800 [ 543.526571] ? do_syscall_64+0x8c/0x800 [ 543.530528] ? lockdep_hardirqs_on+0x415/0x5d0 [ 543.535096] ? security_file_ioctl+0x93/0xc0 [ 543.539490] ksys_ioctl+0xab/0xd0 [ 543.543049] __x64_sys_ioctl+0x73/0xb0 [ 543.546919] do_syscall_64+0x1a3/0x800 [ 543.550797] ? syscall_return_slowpath+0x5f0/0x5f0 [ 543.555743] ? prepare_exit_to_usermode+0x232/0x3b0 [ 543.560763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 543.565600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 543.570795] RIP: 0033:0x458099 [ 543.573972] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 543.592852] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.600539] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 543.607791] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 543.615041] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 543.622299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 [ 543.629639] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 14:15:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127/0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:12 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x8, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='/dev/dmmidi#\x00') ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@null=' \x00', 0xd, 'vlan0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERRORu(r0, &(0x7f0000000340)={0x1a, 0x7, 0x1, {{0xd, '/dev/dmmidi#\x00'}, 0x3}}, 0x1a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r4}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:15:12 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0xffffffeb, 0xe9ffffff}, {}], 0x30) 14:15:12 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x4138ae84, 0x0) 14:15:12 executing program 0 (fault-call:9 fault-nth:11): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:15:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.\n.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.-.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) [ 543.960545] FAULT_INJECTION: forcing a failure. [ 543.960545] name failslab, interval 1, probability 0, space 0, times 0 [ 544.016781] CPU: 1 PID: 6547 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 544.023859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.033207] Call Trace: [ 544.035788] dump_stack+0x1db/0x2d0 [ 544.039408] ? dump_stack_print_info.cold+0x20/0x20 [ 544.044414] ? percpu_ref_put_many+0x129/0x270 [ 544.048993] should_fail.cold+0xa/0x15 [ 544.052872] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 544.057969] ? ___might_sleep+0x1e7/0x310 [ 544.062101] ? arch_local_save_flags+0x50/0x50 [ 544.066682] __should_failslab+0x121/0x190 [ 544.070911] should_failslab+0x9/0x14 [ 544.074700] kmem_cache_alloc+0x2be/0x710 [ 544.078851] ? __lock_acquire+0x572/0x4a30 [ 544.083072] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 544.088602] mmu_topup_memory_caches+0x97/0x490 [ 544.093264] kvm_mmu_load+0x21/0x1200 [ 544.097050] ? mark_held_locks+0x100/0x100 [ 544.101269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.106795] ? vmx_get_nmi_mask+0x107/0x180 [ 544.111103] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 544.116627] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 544.121113] vcpu_enter_guest+0x3f0e/0x6520 [ 544.125427] ? emulator_read_emulated+0x50/0x50 [ 544.130077] ? add_lock_to_list.isra.0+0x450/0x450 [ 544.134988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.140506] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.146033] ? check_preemption_disabled+0x48/0x290 [ 544.151040] ? __lock_is_held+0xb6/0x140 [ 544.155086] ? lock_acquire+0x1db/0x570 [ 544.159048] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 544.164051] ? lock_release+0xc40/0xc40 [ 544.168009] ? kvm_gen_update_masterclock+0x380/0x380 [ 544.173186] ? rcu_sync_dtor+0x170/0x170 [ 544.177233] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 544.182061] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 544.187084] kvm_vcpu_ioctl+0x558/0x12d0 [ 544.191132] ? kvm_vcpu_block+0x1010/0x1010 [ 544.195442] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.200982] ? lock_downgrade+0x910/0x910 [ 544.205113] ? kasan_check_read+0x11/0x20 [ 544.209261] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 544.214531] ? rcu_read_unlock_special+0x380/0x380 [ 544.219451] ? __fget+0x499/0x710 [ 544.222894] ? iterate_fd+0x4b0/0x4b0 [ 544.226685] ? kvm_vcpu_block+0x1010/0x1010 [ 544.231013] do_vfs_ioctl+0x107b/0x17d0 [ 544.234973] ? wait_for_completion+0x810/0x810 [ 544.239539] ? ioctl_preallocate+0x2f0/0x2f0 [ 544.243938] ? __fget_light+0x2db/0x420 [ 544.247894] ? fget_raw+0x20/0x20 [ 544.251329] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 544.256847] ? fput+0x128/0x1a0 [ 544.260110] ? do_syscall_64+0x8c/0x800 [ 544.264070] ? do_syscall_64+0x8c/0x800 [ 544.268025] ? lockdep_hardirqs_on+0x415/0x5d0 [ 544.272592] ? security_file_ioctl+0x93/0xc0 [ 544.277009] ksys_ioctl+0xab/0xd0 [ 544.280449] __x64_sys_ioctl+0x73/0xb0 [ 544.284323] do_syscall_64+0x1a3/0x800 [ 544.288194] ? syscall_return_slowpath+0x5f0/0x5f0 [ 544.293105] ? prepare_exit_to_usermode+0x232/0x3b0 [ 544.298111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 544.302940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 544.308109] RIP: 0033:0x458099 [ 544.311286] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 544.330171] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.337857] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 544.345106] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 544.352362] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 544.359615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 14:15:13 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0xffffffeb, 0xebffffff}, {}], 0x30) 14:15:13 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:15:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127...0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) [ 544.366882] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 14:15:13 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = semget(0x1, 0x3, 0x20) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000300)=""/112) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$vsock_dgram(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:13 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0xffffffeb, 0xf2ffffff}, {}], 0x30) 14:15:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.1.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) 14:15:13 executing program 2: r0 = memfd_create(0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x408000000000000b, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) recvfrom$inet6(r1, &(0x7f0000000300)=""/173, 0xad, 0x40002001, &(0x7f00000000c0)={0xa, 0x4e24, 0xea, @ipv4={[], [], @remote}, 0x1}, 0x1c) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x3, 0x7, 0x3) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000900)=""/199, &(0x7f0000000000)=0xc7) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) write$binfmt_aout(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x5c7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f00000001c0)) sendmmsg(r6, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:13 executing program 0 (fault-call:9 fault-nth:12): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:15:13 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0x41a0ae8d, 0x0) 14:15:13 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = socket$kcm(0xa, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000180)=""/73, &(0x7f00000000c0)=0x49) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000200), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r4}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 14:15:13 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0xffffffeb, 0xf3ffffff}, {}], 0x30) 14:15:13 executing program 2: memfd_create(0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) lseek(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x66}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x3, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 14:15:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0/0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) [ 544.716401] FAULT_INJECTION: forcing a failure. [ 544.716401] name failslab, interval 1, probability 0, space 0, times 0 [ 544.755137] ================================================================== [ 544.762792] BUG: KASAN: stack-out-of-bounds in xfrm_state_find+0x396a/0x3f00 [ 544.769975] Read of size 4 at addr ffff8880a87a73d0 by task syz-executor2/6602 [ 544.772914] CPU: 1 PID: 6595 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 544.777354] [ 544.784367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.795315] Call Trace: [ 544.797903] dump_stack+0x1db/0x2d0 [ 544.801531] ? dump_stack_print_info.cold+0x20/0x20 [ 544.806539] ? percpu_ref_put_many+0x129/0x270 [ 544.811123] should_fail.cold+0xa/0x15 [ 544.815015] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 544.820122] ? ___might_sleep+0x1e7/0x310 [ 544.824279] ? arch_local_save_flags+0x50/0x50 [ 544.828866] __should_failslab+0x121/0x190 [ 544.833102] should_failslab+0x9/0x14 [ 544.836888] kmem_cache_alloc+0x2be/0x710 [ 544.841028] ? __lock_acquire+0x572/0x4a30 [ 544.845263] mmu_topup_memory_caches+0x97/0x490 [ 544.849927] kvm_mmu_load+0x21/0x1200 [ 544.853721] ? mark_held_locks+0x100/0x100 [ 544.857945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.863482] ? vmx_get_nmi_mask+0x107/0x180 [ 544.867797] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 544.873329] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 544.877824] vcpu_enter_guest+0x3f0e/0x6520 [ 544.882157] ? emulator_read_emulated+0x50/0x50 [ 544.886816] ? add_lock_to_list.isra.0+0x450/0x450 [ 544.891743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.897282] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.902855] ? check_preemption_disabled+0x48/0x290 [ 544.907867] ? __lock_is_held+0xb6/0x140 [ 544.911938] ? lock_acquire+0x1db/0x570 [ 544.915917] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 544.920939] ? lock_release+0xc40/0xc40 [ 544.924905] ? kvm_gen_update_masterclock+0x380/0x380 [ 544.930093] ? rcu_sync_dtor+0x170/0x170 [ 544.934155] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 544.938989] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 544.944006] kvm_vcpu_ioctl+0x558/0x12d0 [ 544.948059] ? kvm_vcpu_block+0x1010/0x1010 [ 544.952369] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.957900] ? lock_downgrade+0x910/0x910 [ 544.962043] ? kasan_check_read+0x11/0x20 [ 544.966185] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 544.971451] ? rcu_read_unlock_special+0x380/0x380 [ 544.976379] ? __fget+0x499/0x710 [ 544.980302] ? iterate_fd+0x4b0/0x4b0 [ 544.984093] ? kvm_vcpu_block+0x1010/0x1010 [ 544.988403] do_vfs_ioctl+0x107b/0x17d0 [ 544.992365] ? wait_for_completion+0x810/0x810 [ 544.996970] ? ioctl_preallocate+0x2f0/0x2f0 [ 545.001369] ? __fget_light+0x2db/0x420 [ 545.005332] ? fget_raw+0x20/0x20 [ 545.008774] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 545.014317] ? fput+0x128/0x1a0 [ 545.017584] ? do_syscall_64+0x8c/0x800 [ 545.021555] ? do_syscall_64+0x8c/0x800 [ 545.025521] ? lockdep_hardirqs_on+0x415/0x5d0 [ 545.030109] ? security_file_ioctl+0x93/0xc0 [ 545.034512] ksys_ioctl+0xab/0xd0 [ 545.037961] __x64_sys_ioctl+0x73/0xb0 [ 545.041847] do_syscall_64+0x1a3/0x800 [ 545.045731] ? syscall_return_slowpath+0x5f0/0x5f0 [ 545.050652] ? prepare_exit_to_usermode+0x232/0x3b0 [ 545.055663] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 545.060504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 545.065683] RIP: 0033:0x458099 [ 545.068867] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 545.087759] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.095460] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 545.102719] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 545.109993] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 545.117249] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 [ 545.124515] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 [ 545.131796] CPU: 0 PID: 6602 Comm: syz-executor2 Not tainted 5.0.0-rc3 #36 [ 545.135273] IPVS: length: 73 != 8 [ 545.138813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.151585] Call Trace: [ 545.154185] dump_stack+0x1db/0x2d0 [ 545.157822] ? dump_stack_print_info.cold+0x20/0x20 [ 545.162843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 14:15:14 executing program 0 (fault-call:9 fault-nth:13): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0ff9"], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 545.168385] ? check_preemption_disabled+0x48/0x290 [ 545.173399] ? xfrm_state_find+0x396a/0x3f00 [ 545.173421] print_address_description.cold+0x7c/0x20d [ 545.183077] ? xfrm_state_find+0x396a/0x3f00 [ 545.183092] ? xfrm_state_find+0x396a/0x3f00 [ 545.183107] kasan_report.cold+0x1b/0x40 [ 545.183124] ? xfrm_state_find+0x396a/0x3f00 [ 545.183142] __asan_report_load4_noabort+0x14/0x20 [ 545.183155] xfrm_state_find+0x396a/0x3f00 [ 545.183187] ? xfrm_state_afinfo_get_rcu+0x1b0/0x1b0 [ 545.214697] ? __lock_acquire+0x572/0x4a30 [ 545.218945] ? rcu_read_unlock_special+0x380/0x380 [ 545.223975] ? rcu_softirq_qs+0x20/0x20 [ 545.223999] ? mark_held_locks+0x100/0x100 [ 545.224012] ? kernel_text_address+0x73/0xf0 [ 545.232184] ? __kernel_text_address+0xd/0x40 [ 545.232199] ? unwind_get_return_address+0x61/0xa0 [ 545.232213] ? print_usage_bug+0xd0/0xd0 [ 545.250064] xfrm_tmpl_resolve+0x385/0xe00 [ 545.254329] ? __xfrm_decode_session+0x140/0x140 [ 545.259090] ? _raw_spin_unlock_bh+0x31/0x40 [ 545.263497] ? trace_hardirqs_off_caller+0x300/0x300 [ 545.263512] ? do_raw_spin_unlock+0xa0/0x330 [ 545.263526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.263542] ? check_preemption_disabled+0x48/0x290 [ 545.263555] ? do_raw_spin_trylock+0x270/0x270 [ 545.263574] ? rt_add_uncached_list+0x1f0/0x2c0 [ 545.263587] ? add_lock_to_list.isra.0+0x450/0x450 [ 545.278683] xfrm_resolve_and_create_bundle+0x145/0x27f0 [ 545.278700] ? rt_add_uncached_list+0x1f0/0x2c0 [ 545.278715] ? xfrm_sk_policy_lookup+0x4ca/0x660 [ 545.278726] ? find_held_lock+0x35/0x120 [ 545.278740] ? xfrm_sk_policy_lookup+0x4ca/0x660 [ 545.315368] FAULT_INJECTION: forcing a failure. [ 545.315368] name failslab, interval 1, probability 0, space 0, times 0 [ 545.316716] ? xfrm_migrate+0x1a30/0x1a30 [ 545.316732] ? lock_downgrade+0x910/0x910 [ 545.316748] ? kasan_check_read+0x11/0x20 [ 545.316763] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 545.316780] ? rcu_read_unlock_special+0x380/0x380 [ 545.355335] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.360876] ? xfrm_sk_policy_lookup+0x4f1/0x660 [ 545.365648] ? xfrm_selector_match+0xfc0/0xfc0 [ 545.370223] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 545.375236] xfrm_lookup_with_ifid+0x340/0x2a90 [ 545.379991] ? xfrm_lookup_with_ifid+0x340/0x2a90 [ 545.384823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.390355] ? xfrm_policy_lookup+0x90/0x90 [ 545.394668] ? rcu_read_unlock_special+0x380/0x380 [ 545.399601] ? udp_sendmsg+0x8f0/0x3a40 [ 545.403576] ? ip_route_output_key_hash+0x2b9/0x400 [ 545.408627] ? ip_route_output_key_hash_rcu+0x3470/0x3470 [ 545.414173] xfrm_lookup_route+0x3b/0x1f0 [ 545.418329] ip_route_output_flow+0xad/0xc0 [ 545.422642] udp_sendmsg+0x24cb/0x3a40 [ 545.426524] ? ip_reply_glue_bits+0xc0/0xc0 [ 545.430928] ? udp4_lib_lookup_skb+0x440/0x440 [ 545.435501] ? add_lock_to_list.isra.0+0x450/0x450 [ 545.440419] ? trace_hardirqs_on+0xbd/0x310 [ 545.444728] ? finish_task_switch+0x1e9/0xac0 [ 545.449233] ? __lock_acquire+0x572/0x4a30 [ 545.453476] ? mark_held_locks+0x100/0x100 [ 545.457704] ? lockdep_hardirqs_on+0x415/0x5d0 [ 545.462287] ? mark_held_locks+0x100/0x100 [ 545.466513] ? __local_bh_enable_ip+0x15a/0x270 [ 545.471180] ? lockdep_hardirqs_on+0x415/0x5d0 [ 545.471202] udpv6_sendmsg+0x1843/0x3570 [ 545.479807] ? udpv6_sendmsg+0x1843/0x3570 [ 545.484032] ? check_preemption_disabled+0x48/0x290 [ 545.484046] ? do_raw_spin_trylock+0x270/0x270 [ 545.484073] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 545.498909] ? release_sock+0x1e8/0x2b0 [ 545.502888] ? find_held_lock+0x35/0x120 [ 545.506974] ? release_sock+0x1e8/0x2b0 [ 545.510947] ? __local_bh_enable_ip+0x15a/0x270 [ 545.515624] ? __local_bh_enable_ip+0x15a/0x270 [ 545.520290] ? lockdep_hardirqs_on+0x415/0x5d0 [ 545.520308] ? trace_hardirqs_on+0xbd/0x310 [ 545.520325] ? _raw_spin_unlock_bh+0x31/0x40 [ 545.520337] ? trace_hardirqs_off_caller+0x300/0x300 [ 545.520352] ? do_raw_spin_unlock+0xa0/0x330 [ 545.535862] IPVS: length: 73 != 8 [ 545.538720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.538738] ? check_preemption_disabled+0x48/0x290 [ 545.557114] ? do_raw_spin_trylock+0x270/0x270 [ 545.561695] ? release_sock+0x1e8/0x2b0 [ 545.565670] ? __local_bh_enable_ip+0x15a/0x270 [ 545.565690] ? _raw_spin_unlock_bh+0x31/0x40 [ 545.565702] ? release_sock+0x1e8/0x2b0 [ 545.565717] ? __release_sock+0x3a0/0x3a0 [ 545.582863] ? udp_v6_get_port+0x276/0x670 [ 545.587110] inet_sendmsg+0x1af/0x740 [ 545.590911] ? udp6_unicast_rcv_skb.isra.0+0x2f0/0x2f0 [ 545.590927] ? inet_sendmsg+0x1af/0x740 [ 545.590947] ? ipip_gro_receive+0x100/0x100 [ 545.590966] ? apparmor_socket_sendmsg+0x2a/0x30 [ 545.590981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.614775] ? security_socket_sendmsg+0x93/0xc0 [ 545.619545] ? ipip_gro_receive+0x100/0x100 [ 545.623889] sock_sendmsg+0xdd/0x130 [ 545.623909] ___sys_sendmsg+0x409/0x910 [ 545.623930] ? copy_msghdr_from_user+0x570/0x570 [ 545.623944] ? iterate_fd+0x4b0/0x4b0 [ 545.623962] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 545.645745] ? do_futex+0x1b0/0x2910 [ 545.649465] ? rcu_read_unlock_special+0x380/0x380 [ 545.654423] ? __might_fault+0x12b/0x1e0 [ 545.658496] ? __fdget+0x1b/0x20 [ 545.661863] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 545.667404] ? sockfd_lookup_light+0xc2/0x160 [ 545.671905] __sys_sendmmsg+0x246/0x730 [ 545.675892] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 545.680233] ? _copy_to_user+0xc9/0x120 [ 545.684903] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 545.690496] ? put_timespec64+0x115/0x1b0 [ 545.694649] ? nsecs_to_jiffies+0x30/0x30 [ 545.698805] ? do_syscall_64+0x8c/0x800 [ 545.702783] ? do_syscall_64+0x8c/0x800 [ 545.706770] ? trace_hardirqs_on+0xbd/0x310 [ 545.711092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.716637] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 545.722004] ? trace_hardirqs_off_caller+0x300/0x300 [ 545.727111] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 545.732651] __x64_sys_sendmmsg+0x9d/0x100 [ 545.736887] do_syscall_64+0x1a3/0x800 [ 545.740782] ? syscall_return_slowpath+0x5f0/0x5f0 [ 545.745714] ? prepare_exit_to_usermode+0x232/0x3b0 [ 545.750733] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 545.755602] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 545.760791] RIP: 0033:0x458099 [ 545.763981] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 545.782875] RSP: 002b:00007fcbe44f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 545.790589] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458099 [ 545.797856] RDX: 0000000000000001 RSI: 0000000020000a80 RDI: 0000000000000005 [ 545.805123] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 545.812857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe44f96d4 [ 545.820127] R13: 00000000004c4f7c R14: 00000000004d8a40 R15: 00000000ffffffff [ 545.827405] [ 545.827475] CPU: 1 PID: 6614 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 545.829030] The buggy address belongs to the page: [ 545.836027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.840936] page:ffffea0002a1e9c0 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 545.850259] Call Trace: [ 545.858374] flags: 0x1fffc0000000000() [ 545.860946] dump_stack+0x1db/0x2d0 [ 545.864807] raw: 01fffc0000000000 0000000000000000 ffffffff02a20101 0000000000000000 [ 545.868421] ? dump_stack_print_info.cold+0x20/0x20 [ 545.876274] raw: 0000000000000000 ffff8880a87a70c0 00000000ffffffff 0000000000000000 [ 545.881290] ? percpu_ref_put_many+0x129/0x270 [ 545.889146] page dumped because: kasan: bad access detected [ 545.889151] [ 545.893722] should_fail.cold+0xa/0x15 [ 545.899395] Memory state around the buggy address: [ 545.901011] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 545.904866] ffff8880a87a7280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 545.909779] ? ___might_sleep+0x1e7/0x310 [ 545.914847] ffff8880a87a7300: f1 f1 f1 f1 00 00 00 f2 f2 f2 00 00 00 00 00 f2 [ 545.922186] ? arch_local_save_flags+0x50/0x50 [ 545.926305] >ffff8880a87a7380: f2 f2 f2 f2 00 00 00 00 00 00 f2 f2 f2 f2 00 00 [ 545.933651] __should_failslab+0x121/0x190 [ 545.938191] ^ [ 545.938202] ffff8880a87a7400: 00 00 00 00 f2 f2 f2 f2 00 00 f8 f2 f2 f2 00 00 [ 545.945563] should_failslab+0x9/0x14 [ 545.949770] ffff8880a87a7480: 00 00 00 00 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 [ 545.955726] kmem_cache_alloc+0x2be/0x710 [ 545.963071] ================================================================== [ 545.966853] ? __lock_acquire+0x572/0x4a30 [ 545.974178] Disabling lock debugging due to kernel taint [ 545.978786] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 546.001301] mmu_topup_memory_caches+0x97/0x490 [ 546.006085] kvm_mmu_load+0x21/0x1200 [ 546.009889] ? mark_held_locks+0x100/0x100 [ 546.012174] ------------[ cut here ]------------ [ 546.014120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 546.018844] downgrading a read lock [ 546.018915] WARNING: CPU: 0 PID: 6604 at kernel/locking/lockdep.c:3553 lock_downgrade+0x4d2/0x910 [ 546.024368] ? vmx_get_nmi_mask+0x107/0x180 [ 546.027961] Kernel panic - not syncing: panic_on_warn set ... [ 546.037079] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 546.052856] ? vmx_clear_hlt.isra.0+0x7c/0xd0 [ 546.057344] vcpu_enter_guest+0x3f0e/0x6520 [ 546.061658] ? emulator_read_emulated+0x50/0x50 [ 546.066312] ? add_lock_to_list.isra.0+0x450/0x450 [ 546.071237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 546.076755] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 546.082280] ? check_preemption_disabled+0x48/0x290 [ 546.087284] ? __lock_is_held+0xb6/0x140 [ 546.091332] ? lock_acquire+0x1db/0x570 [ 546.095300] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 546.100303] ? lock_release+0xc40/0xc40 [ 546.104266] ? kvm_gen_update_masterclock+0x380/0x380 [ 546.109441] ? rcu_sync_dtor+0x170/0x170 [ 546.113488] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 546.118407] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 546.123431] kvm_vcpu_ioctl+0x558/0x12d0 [ 546.127485] ? kvm_vcpu_block+0x1010/0x1010 [ 546.131798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 546.137324] ? lock_downgrade+0x910/0x910 [ 546.141457] ? kasan_check_read+0x11/0x20 [ 546.145589] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 546.150855] ? rcu_read_unlock_special+0x380/0x380 [ 546.155783] ? __fget+0x499/0x710 [ 546.159229] ? iterate_fd+0x4b0/0x4b0 [ 546.163027] ? kvm_vcpu_block+0x1010/0x1010 [ 546.167338] do_vfs_ioctl+0x107b/0x17d0 [ 546.171300] ? wait_for_completion+0x810/0x810 [ 546.175870] ? ioctl_preallocate+0x2f0/0x2f0 [ 546.180263] ? __fget_light+0x2db/0x420 [ 546.184225] ? fget_raw+0x20/0x20 [ 546.187665] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 546.193203] ? fput+0x128/0x1a0 [ 546.196471] ? do_syscall_64+0x8c/0x800 [ 546.200432] ? do_syscall_64+0x8c/0x800 [ 546.204391] ? lockdep_hardirqs_on+0x415/0x5d0 [ 546.208965] ? security_file_ioctl+0x93/0xc0 [ 546.213360] ksys_ioctl+0xab/0xd0 [ 546.216802] __x64_sys_ioctl+0x73/0xb0 [ 546.220678] do_syscall_64+0x1a3/0x800 [ 546.224563] ? syscall_return_slowpath+0x5f0/0x5f0 [ 546.229479] ? prepare_exit_to_usermode+0x232/0x3b0 [ 546.234486] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 546.239320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 546.244509] RIP: 0033:0x458099 [ 546.247696] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 546.266665] RSP: 002b:00007fcc92cf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.274358] RAX: ffffffffffffffda RBX: 00007fcc92cf2c90 RCX: 0000000000458099 [ 546.281619] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 546.288873] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 546.296129] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc92cf36d4 [ 546.303380] R13: 00000000004c1016 R14: 00000000004d2c38 R15: 0000000000000006 [ 546.310646] CPU: 0 PID: 6604 Comm: modprobe Tainted: G B 5.0.0-rc3 #36 [ 546.313180] kobject: 'loop4' (0000000084ed9771): kobject_uevent_env [ 546.318598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.334421] Call Trace: [ 546.337096] dump_stack+0x1db/0x2d0 [ 546.340706] ? dump_stack_print_info.cold+0x20/0x20 [ 546.345703] ? lock_downgrade+0x410/0x910 [ 546.349881] panic+0x2cb/0x65c [ 546.353071] ? add_taint.cold+0x16/0x16 [ 546.357025] ? lock_downgrade+0x4d2/0x910 [ 546.361153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 546.366675] ? __probe_kernel_read+0x1f4/0x250 [ 546.371233] ? __warn.cold+0x5/0x48 [ 546.374917] ? __warn+0xe8/0x1d0 [ 546.378281] ? lock_downgrade+0x4d2/0x910 [ 546.382438] __warn.cold+0x20/0x48 [ 546.385952] ? lock_downgrade+0x4d2/0x910 [ 546.390074] report_bug+0x263/0x2b0 [ 546.393702] do_error_trap+0x11b/0x200 [ 546.397569] do_invalid_op+0x37/0x50 [ 546.401260] ? lock_downgrade+0x4d2/0x910 [ 546.405388] invalid_op+0x14/0x20 [ 546.408821] RIP: 0010:lock_downgrade+0x4d2/0x910 [ 546.413567] Code: 00 00 00 fc ff df 41 c6 04 06 f8 e9 1f ff ff ff 48 c7 c7 c0 a8 4b 88 4c 89 8d 58 ff ff ff 48 89 85 60 ff ff ff e8 ee 10 e7 ff <0f> 0b 48 8b 85 60 ff ff ff 4c 8d 5d d8 4c 89 f1 48 ba 00 00 00 00 [ 546.432452] RSP: 0018:ffff8880550f7bb8 EFLAGS: 00010082 [ 546.437790] RAX: 0000000000000000 RBX: 1ffff1100aa1ef7d RCX: 0000000000000000 [ 546.445036] RDX: 0000000000000000 RSI: ffffffff81685456 RDI: 0000000000000006 [ 546.452290] RBP: ffff8880550f7c70 R08: ffff8880a8f2c200 R09: fffffbfff13332f9 [ 546.459542] R10: fffffbfff13332f8 R11: ffffffff899997c3 R12: ffff8880a8f2c200 [ 546.466787] R13: ffffffff8b568a20 R14: ffff8880550f7c08 R15: 0000000000000001 [ 546.474046] ? vprintk_func+0x86/0x189 [ 546.477914] ? lock_downgrade+0x4d2/0x910 [ 546.482075] ? __do_munmap+0xc5a/0xef0 [ 546.485942] ? lock_set_class+0x820/0x820 [ 546.490099] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 546.495127] ? userfaultfd_unmap_prep+0x456/0x5e0 [ 546.499948] downgrade_write+0x76/0x270 [ 546.503900] ? up_read+0x2b0/0x2b0 [ 546.507417] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 546.512412] ? vma_compute_subtree_gap+0x158/0x230 [ 546.517316] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 546.522419] __do_munmap+0xc5a/0xef0 [ 546.526113] __vm_munmap+0x139/0x1f0 [ 546.529821] ? __do_munmap+0xef0/0xef0 [ 546.533687] ? trace_hardirqs_off_caller+0x300/0x300 [ 546.538769] __x64_sys_munmap+0x67/0x80 [ 546.542724] do_syscall_64+0x1a3/0x800 [ 546.546591] ? syscall_return_slowpath+0x5f0/0x5f0 [ 546.551498] ? lockdep_sys_exit+0x49/0x5c [ 546.555648] ? prepare_exit_to_usermode+0x232/0x3b0 [ 546.560657] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 546.565493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 546.570668] RIP: 0033:0x7f5c40079d37 [ 546.574363] Code: f0 ff ff 73 01 c3 48 8b 0d fe c0 2a 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d d1 c0 2a 00 31 d2 48 29 c2 64 [ 546.593259] RSP: 002b:00007ffc22f86f38 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 546.600943] RAX: ffffffffffffffda RBX: 000055e5eb83f250 RCX: 00007f5c40079d37 [ 546.608187] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00007f5c4075e000 [ 546.615435] RBP: 0000000000000000 R08: 00007f5c40759700 R09: 00007f5c400c4090 [ 546.622679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 546.629926] R13: 000055e5eb847200 R14: 000055e5eb83f200 R15: 00007ffc22f871c0 [ 546.638378] Kernel Offset: disabled [ 546.642012] Rebooting in 86400 seconds..