0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0502100, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 446.636651][T15995] binder: 15992:15995 ioctl c0502100 20000600 returned -22 18:14:38 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0585609, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 446.910768][T16101] binder: 16100:16101 ioctl c0585609 20000600 returned -22 18:14:39 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff4e, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 447.047523][T16206] binder: 16204:16206 ioctl c018620c 20000600 returned -22 18:14:39 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 447.184592][T16315] binder: 16313:16315 ioctl c018620c 20000600 returned -22 18:14:39 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x200004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = accept4$tipc(r7, 0x0, &(0x7f0000000040), 0x100000) ioctl$SIOCGETNODEID(r8, 0x89e1, &(0x7f00000000c0)={0x3}) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 18:14:39 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, 0x0}, 0x800) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000240)=0x2) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e15194cf5d912e2249d01df969730978d73e59162f3bcae3b0000000d008801cf03"], 0x15) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) fanotify_init(0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625f508300200000040847bc2fdffe8cd918b035041291559f3ee3a46069062af9680d512f4d8a5c51817c3ff01a1f62ac71e85445d8f244f"], 0x56) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) [ 447.474359][ T26] audit: type=1800 audit(1573755279.547:58): pid=16422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16609 res=0 [ 447.583205][T16425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500) [ 447.604882][T16425] FAT-fs (loop1): Filesystem has been set read-only [ 447.611794][T16425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000500) [ 447.971651][ C1] net_ratelimit: 18 callbacks suppressed [ 447.971661][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 447.983105][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 448.131618][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 448.137407][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 448.211647][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 448.217528][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 448.772378][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 448.778160][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 448.851645][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 448.857464][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:14:43 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000001c0)="bad004ecb828018ee00f20c06635100000000f22c066b9800000c00f326635010000000f3026262e2e0f381d9cac000f797e3826660f3a0d882ba7fc660f2206f0fe8d0800f20f01f9", 0x49}], 0x1, 0x0, 0x0, 0xfffffffffffffdc5) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000180)={0x1}, 0x8, 0x0) msgsnd(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="d6"], 0x1, 0x0) msgrcv(r5, 0x0, 0x0, 0x1, 0x2000) msgctl$MSG_INFO(r5, 0xc, &(0x7f0000000300)=""/122) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0xf000000000000000, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000540)={r9, 0x9b}, 0x8) ioctl$TIOCCONS(r1, 0x541d) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x9) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000440)={r10, @in6={{0xa, 0x4e23, 0x3, @mcast2, 0x81}}, [0x148b, 0x7, 0x6, 0xffffffffffffff7f, 0x1, 0x7, 0x330, 0x10000, 0x4, 0x8, 0x0, 0x2cd3000000000, 0x5f81, 0x80, 0x400]}, &(0x7f0000000000)=0xfffffffffffffffe) 18:14:43 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x3, 0x0, 0x0, 0x0, 0x0}) 18:14:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000b80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@fat=@showexec='showexec'}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/capi/capi20\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x40000, 0x64) fanotify_mark(r1, 0x4, 0x20, r2, &(0x7f0000000a80)='./file0\x00') r3 = dup(r0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lseek(r7, 0x7ffffc, 0x0) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r7, 0x3, 0x80bffe, 0x28020001) fallocate(r6, 0x3, 0x0, 0x28020001) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r8}]]}}}]}, 0x38}}, 0x0) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r8}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_setup(0xfffffff8, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) accept4$ax25(r11, &(0x7f0000000400)={{0x3, @null}, [@remote, @bcast, @bcast, @netrom, @netrom, @netrom, @bcast, @bcast]}, &(0x7f0000000480)=0x48, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) fsmount(r14, 0x2, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) 18:14:43 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r0, &(0x7f0000001cc0)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0x1000}, 0x1006) sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffda4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002940)=ANY=[]}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2321202e2f66696c653020766d6e6574306e6f6465762d2c73797374656d2d62646576776c616e3173797374656d766d6ee57431216d643573756d7d26776c616e307c200aa981ee055b6a97a819f7674b40b106c8e722daeb2787e0187766c37e6fe9da441b8ad04df221ae2c872ef5b52af6f6bef02749dae06fd6daf5e159ea946fb57f7caf24eb75e152e9dc856534cc83da9eb9f72b948fcca11d853d9295a9fc7127602c6eb1a91e1a92395ab3196dbd3bd786c120d70f960b0e5567652e3c09279e20fced0efe0071e147a1d2ecb0d5841d2b12a9743d52425b16c53e4e0c38d235003339aa7800"/252], 0xfc) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) 18:14:43 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0xd4a4eaa50058c57, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x402c02, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x208, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r5 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) ppoll(&(0x7f0000001980)=[{r5}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000480)) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r10, r9, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000240)={0x80002002}) modify_ldt$write2(0x11, &(0x7f0000000440)={0x40, 0x20000000, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) perf_event_open(&(0x7f0000000540)={0x300cb7c2b6298200, 0x70, 0x69, 0xe4, 0x20, 0x0, 0x0, 0x4, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x8, @perf_config_ext={0x8, 0x4}, 0x13022, 0x9, 0x2, 0x8, 0x1b23, 0x3, 0xff01}, r4, 0x2, r5, 0x1) rt_tgsigqueueinfo(r4, 0x0, 0x34, &(0x7f00000002c0)={0x2a, 0x401, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup3(r12, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) setsockopt$CAIFSO_REQ_PARAM(r13, 0x116, 0x80, &(0x7f0000000340)="f08b2ba0e69fca4a49c8ead915cb21fad1f48f8a86dffa5061c7d0bdf0577d94dac42f51988d7e4560fcbbd72b19ae524120d95162dcc203c79bee4d7ffe1753bc06db05e54d9aa92eb186deeadf1d9e076ae09ffd16da208f411f99dc555598f53641d5e345c01a0db60fe002e4198ef9e87dab13fb31c6f3aaaaf91bb8aa412058298ee9351de33036e7f3c58e76db31209bcae98a43a68a5175653c3778ed1effd3b3a579b75e499f8edb215d58455a1a3e952fa69885f5ccabde89d13f1b8753086670a06e18239d5a1eda98aae23643752dcf4048ad4fd116cc2ace501659c3beba2e90214a0665", 0xea) mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\f', &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=rdma']) 18:14:43 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x40, 0x0) r2 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0) r4 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000200000000003000000030000000030000000a0000000000000b030000000f050000000600000000000009ebff0000060000000000000700000826434000c12b8b6b1a5787f47af06f000000610000000000000000"], 0x0, 0x5b}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x7, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x9, 0x2}, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={r5, 0x10, &(0x7f0000000ac0)={&(0x7f0000000900)=""/167, 0xa7, r6}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) dup2(r3, r4) write$P9_RCREATE(r2, 0x0, 0x0) creat(&(0x7f0000139000)='./file0/bus\x00', 0x0) [ 451.458316][T16445] binder: 16441:16445 ioctl c018620c 20000600 returned -22 [ 451.526436][T16452] FAT-fs (loop3): bogus number of reserved sectors [ 451.537258][T16452] FAT-fs (loop3): Can't find a valid FAT filesystem 18:14:43 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x4, 0x0, 0x0, 0x0, 0x0}) 18:14:43 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x40, 0x0) r2 = creat(&(0x7f0000139000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = creat(&(0x7f0000139000)='./file0/bus\x00', 0x0) r4 = creat(&(0x7f0000e8f000)='./file0/bus\x00', 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000200000000003000000030000000030000000a0000000000000b030000000f050000000600000000000009ebff0000060000000000000700000826434000c12b8b6b1a5787f47af06f000000610000000000000000"], 0x0, 0x5b}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x7, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x9, 0x2}, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={r5, 0x10, &(0x7f0000000ac0)={&(0x7f0000000900)=""/167, 0xa7, r6}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) dup2(r3, r4) write$P9_RCREATE(r2, 0x0, 0x0) creat(&(0x7f0000139000)='./file0/bus\x00', 0x0) [ 451.666431][T16452] FAT-fs (loop3): bogus number of reserved sectors [ 451.676641][T16452] FAT-fs (loop3): Can't find a valid FAT filesystem 18:14:43 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9067f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001800000000000000000000001d010000180002000000000000000000b590521e32f8dc6662d69234"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 451.775233][T16574] binder: 16570:16574 ioctl c018620c 20000600 returned -22 18:14:43 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1000, 0x420400) connect$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000000c0)=0x5, 0x4) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=""/49, 0x31) r2 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x8, 0x2000) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x598, 0x150, 0x0, 0x0, 0x0, 0x0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4, &(0x7f0000000200), {[{{@ipv6={@mcast2, @remote, [0xff000000, 0xff000000, 0xffffffff, 0xff000000], [0xff, 0xff0000ff, 0xff], 'rose0\x00', 'nlmon0\x00', {0xff}, {}, 0x73, 0xff, 0x0, 0xe8ea175c0756fdee}, 0x0, 0x110, 0x150, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x2, 0x4, 0x1, [0x6, 0x2, 0x80, 0x7, 0x6, 0x3, 0xff81, 0x6, 0x1ff, 0x3, 0x1, 0x100, 0x8000, 0x4f44, 0xec83, 0x40], 0xf}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x22, 0xf8, 0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x18}, [0xffffffff, 0xffffffff, 0xff, 0x307c3693aba5a0f], [0x0, 0x0, 0xff000000, 0xda436e2090a8d71e], 'lo\x00', 'caif0\x00', {0xff}, {}, 0x8, 0x40, 0x4, 0x20}, 0x0, 0x1a0, 0x1d0, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x0, 0x0, 0x1, [0x6, 0x1b, 0x5, 0x5, 0x3, 0x5, 0x4, 0x401, 0x2, 0x2, 0x1ff, 0x1, 0xc22f, 0x3ff, 0xc15, 0x2], 0xc}}, @common=@srh1={0x90, 'srh\x00', 0x1, {0x2c, 0x46, 0x72, 0x5, 0x714, @empty, @rand_addr="32f80e0758add555c52e1b269de60e7b", @local, [0x0, 0xff, 0x0, 0x17ffffe00], [0xffffffff, 0x0, 0xff, 0x1aaca6b06acbbcf9], [0xff00007f, 0xffffff00, 0xffffff00, 0xffff00], 0x400, 0x5800}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x3f, 0x200, 0x17ef4476a07e5e4b}}}, {{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0x87, 0x0, 0x40, 0xff, 0x1, @remote, @local, @empty, [0xffffffff, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff, 0xffffff00, 0x101fffefe], [0xff, 0xffffffff, 0xff, 0xffffffff], 0xc23, 0x1000}}, @common=@unspec=@state={0x28, 'state\x00', 0x0, {0xfffffffe}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000840)="71bea6e697c31c33707b0e79cf0b0e564b441d48619f621fee0e24cfb95875fe774417073c3b8bd37dc5", 0x2a) r3 = syz_open_dev$vcsa(&(0x7f0000000880)='/dev/vcsa#\x00', 0x1, 0x8000) write$FUSE_POLL(r3, &(0x7f00000008c0)={0x18, 0x0, 0x1, {0xedb4}}, 0x18) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8040000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x238, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'bpq0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x39d63492}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7da9b58f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8de1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d9d}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x86}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc9b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000c40)=0x5, 0x4) r5 = eventfd2(0x10001, 0x80000) fcntl$setstatus(r5, 0x4, 0x40800) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000c80)=""/60, &(0x7f0000000cc0)=0x3c) faccessat(r1, &(0x7f0000000d00)='./file0\x00', 0x66, 0x600) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='\x00'}, 0x10) dup3(r6, r1, 0x80000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)='trusted.overlay.redirect\x00', &(0x7f0000000e40)='./file0\x00', 0x8, 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000e80)=0x2, 0x4) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/video37\x00', 0x2, 0x0) r7 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xfffffffffffffffb) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000f00)) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000f40)={0x8}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/audio\x00', 0x80000, 0x0) renameat2(r8, &(0x7f0000000fc0)='./file0\x00', r2, &(0x7f0000001000)='./file0\x00', 0x4) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x9df) 18:14:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f00000000c0)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="72657303d21b07c754df5086ddb505", @ANYRESHEX=0xee01, @ANYBLOB="3100efd134ff6270ce"]) 18:14:44 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x5, 0x0, 0x0, 0x0, 0x0}) [ 452.078419][T16698] binder: 16695:16698 ioctl c018620c 20000600 returned -22 [ 452.155822][T16701] EXT4-fs (loop4): Unrecognized mount option "resÒÇTßP†Ýµ0x000000000000ee011" or missing value [ 452.181741][T16691] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 452.192913][T16691] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 452.204182][T16691] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 452.214837][T16691] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 452.249789][T16701] EXT4-fs (loop4): Unrecognized mount option "resÒÇTßP†Ýµ0x000000000000ee011" or missing value [ 452.271922][T16691] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 453.011620][ C0] net_ratelimit: 22 callbacks suppressed [ 453.017305][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 453.023065][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 453.251619][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 453.257396][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 454.211670][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 454.217457][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 454.371680][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 454.377481][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 454.451674][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 454.457525][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 458.381646][ C1] net_ratelimit: 18 callbacks suppressed [ 458.381656][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 458.393291][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:14:50 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x6, 0x0, 0x0, 0x0, 0x0}) 18:14:50 executing program 0: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000554000/0x2000)=nil, 0x2000, 0x3, 0x10, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f00000001c0)=""/148, 0x20000254) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r3, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8001, 0xd6ba00b2124f0bf3) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x220000) write$rfkill(r5, &(0x7f0000000080)={0x9, 0x5, 0x3, 0x1, 0x1}, 0x8) 18:14:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8637, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@union={0x1, 0x1, 0x0, 0x5, 0x1, 0x7, [{0x5, 0x3, 0x40}]}, @typedef={0xc, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000200)=""/4096, 0x40, 0x1000}, 0x20) fallocate(r4, 0x0, 0xffc0000000000000, 0xffffffffffffff7f) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 18:14:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x3, 0x3c8, [0x20000100, 0x0, 0x0, 0x20000328, 0x20000358], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/968]}, 0x440) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'vet\x00\x00\x00_b\x1f\x1cC\xa5e\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r5 = socket(0x200000100000011, 0x803, 0x0) bind$packet(r5, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) bind$xdp(r4, &(0x7f0000000900)={0x2c, 0x0, r6}, 0x10) close(r0) 18:14:50 executing program 3: openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0xffffffac) clone(0x800000, &(0x7f00000000c0)="9eb3556728785c67d8d598521725ee9d633b5d5decedce41e5622fee4f661aa4c9e4c87c357beac70b440404720b9125a1b54327af20e49f81c24e9a2289ba97b67fd159c9d95f99f6fc74f008635dd5d803f6e0a85ab2ea5ffe6a74871bb7dbcbbac042d042f7ef24313243170d21b43980dbc0c5bdb3e86110c85bc757dc7478eb06c158e3d4ebcf1dbe6f541c7b08a3b0209c6dd610382cca8df3664e88ad05cb144926db3aa10ef24e278c9449cad3243d809a76bedf05382228292e27274a1efb4c304076c8838b893c5c38b9d29b2b9fdf6a8f9a6e20ddbb484771df23b32120faa8", &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)="da628868f3f89811d727f225a3c8e297641733bf841023b536740513fe1bef0430a545705d217b588439f91b26640ababcd9d1585f8d89d0c27ee008de1b2f34d952a65950edd76d9e0c9a235c406485a85692e8a04c0d9fc7a94c5eb5334e4e3aa79225fc1dc0f62572f1c79348357232b4f210f09d13e0fbae26b8d6a46901f8214d7e42e6b40fe1660b571188150b854ab94d18fd616e") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 18:14:50 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x80000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x100, 0x2) sendto$inet(r1, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8d22720", 0xee, 0x0, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r9 = socket(0xa, 0x1, 0x0) r10 = socket(0x1000000010, 0x400000400080803, 0x0) r11 = dup(r10) write$cgroup_int(r11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r12}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [0x0, 0x0, 0x6c00000000000000], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0x0, 0x4, 0x0, 0x4123b79bef9aec01, 0x0, 0x20000, r13}) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r13}) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) r14 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r14) write(r14, &(0x7f0000000240)="240000001a0025f07e9451f68f2e9c920a0b49ffed000019806028000800100001000000", 0x24) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @loopback, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004}) setsockopt$inet6_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000480)='\x01S\xb8\x00\x00', 0x152) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xfffffffffffffcf9) syslog(0x0, &(0x7f0000000300)=""/120, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 458.541683][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 458.547605][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 458.611619][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 458.617423][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:14:50 executing program 0: syz_open_dev$sndtimer(0x0, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0xe, 0x0, 0xffffffffffff5a11) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) close(r2) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000080)) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r3 = dup(r1) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x20000, 0x0) ftruncate(r0, 0x800fe) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 458.679315][T16833] binder: 16831:16833 ioctl c018620c 20000600 returned -22 18:14:51 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x7, 0x0, 0x0, 0x0, 0x0}) [ 458.985372][T16947] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 459.030740][ T26] audit: type=1804 audit(1573755291.097:59): pid=16947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir084517945/syzkaller.ILamxf/104/bus" dev="sda1" ino=16958 res=1 [ 459.062939][T16950] binder: 16949:16950 ioctl c018620c 20000600 returned -22 18:14:51 executing program 4: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x101ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x1f) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) [ 459.167835][ T26] audit: type=1804 audit(1573755291.237:60): pid=17053 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir084517945/syzkaller.ILamxf/104/bus" dev="sda1" ino=16958 res=1 [ 459.201640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 459.207562][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:14:51 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x48, 0x0, 0x0, 0x0, 0x0}) 18:14:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x80) recvmmsg(r0, &(0x7f0000002b40), 0x19d, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000480)=0x8000009d, 0x1f6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x2, @empty, 0x1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @remote}], 0x7c) [ 459.251626][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 459.257497][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 459.366792][ T26] audit: type=1804 audit(1573755291.437:61): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir293938814/syzkaller.mGuQ2H/109/bus" dev="sda1" ino=16959 res=1 [ 459.395602][T17063] binder: 17061:17063 ioctl c018620c 20000600 returned -22 [ 459.413382][ T26] audit: type=1804 audit(1573755291.487:62): pid=17068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir293938814/syzkaller.mGuQ2H/109/bus" dev="sda1" ino=16959 res=1 18:14:51 executing program 4: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) epoll_create1(0x80000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff}) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x20, {0x0, 0x0}, {0x3, 0xc, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @fd=r3, 0x4}) r5 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x6, 0x501000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff) write$binfmt_script(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a0500204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff6465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbc549bddb487b0e710eeda73058c00100000039daa01f5f055c2e485b0942a32f5bff951d6c0a3b212600000000000000"], 0xc6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil) r7 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r7, 0x0, 0xe}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f22c7b66ac336315") r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e) write$binfmt_script(r8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0xbe) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000200)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x10000b, 0x6}, 'port0\x00', 0x41, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0x8001}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000000)=0xb, 0xee499dd7534c38ac) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000000)=0xb, 0xee499dd7534c38ac) r12 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @loopback, 0xfffd, 0x0, 'lblc\x00', 0x4, 0x0, 0x5b}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x8000, 0x0, 'sh\x00', 0x4, 0x2, 0x74}, 0x2c) write$cgroup_subtree(r6, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000a40)=ANY=[@ANYPTR=&(0x7f0000000880)=ANY=[@ANYPTR, @ANYRES32=0x0, @ANYRES64=r10, @ANYBLOB="5564eb8b870ab7cd954cdacf18654e8109a1c94f38a67506bffcbb72cf09c68a03df9e47a25082a960aa2a36a3ba5f06f654507a58ca90d609404e88e59d3e8a7f13462209ab165d7dbacc371ddeb8d982354b324c22ae4f3453b2694ec9c6c08b23c9763c98eff52963a85d10c73d84799aa61a", @ANYRESOCT=r11], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES64=r6, @ANYRES16], @ANYRESDEC=r12, @ANYRESDEC=r5, @ANYRES16, @ANYRES64, @ANYRESOCT=r4], @ANYRESOCT], 0x1f) syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 18:14:51 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x80000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x100, 0x2) sendto$inet(r1, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8d22720", 0xee, 0x0, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r9 = socket(0xa, 0x1, 0x0) r10 = socket(0x1000000010, 0x400000400080803, 0x0) r11 = dup(r10) write$cgroup_int(r11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r12}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [0x0, 0x0, 0x6c00000000000000], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0x0, 0x4, 0x0, 0x4123b79bef9aec01, 0x0, 0x20000, r13}) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r13}) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) r14 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r14) write(r14, &(0x7f0000000240)="240000001a0025f07e9451f68f2e9c920a0b49ffed000019806028000800100001000000", 0x24) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @loopback, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004}) setsockopt$inet6_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000480)='\x01S\xb8\x00\x00', 0x152) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xfffffffffffffcf9) syslog(0x0, &(0x7f0000000300)=""/120, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:14:51 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x4c, 0x0, 0x0, 0x0, 0x0}) [ 459.681304][T17181] binder: 17178:17181 ioctl c018620c 20000600 returned -22 [ 460.021529][T17182] device nr0 entered promiscuous mode [ 463.411730][ C0] net_ratelimit: 22 callbacks suppressed [ 463.417536][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 463.423269][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 463.651693][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 463.657734][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 464.611681][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 464.617610][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 464.781724][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 464.788660][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 464.851735][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 464.857641][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:14:59 executing program 5: syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) ppoll(&(0x7f0000001980)=[{r3}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) perf_event_open(&(0x7f0000000540)={0xa8dbffa7d74f6926, 0x70, 0x69, 0xe4, 0x20, 0x0, 0x0, 0x4, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x8, @perf_config_ext={0x8, 0x4}, 0x3022, 0x9, 0x2, 0x6, 0x1b23, 0x3, 0xff01}, r2, 0xc, r3, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200100, 0x0) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r4, r6, 0x0, 0x1) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 18:14:59 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x60, 0x0, 0x0, 0x0, 0x0}) 18:14:59 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x2042) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000100)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000180)) r2 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) poll(&(0x7f0000000200)=[{r2, 0x4}, {0xffffffffffffffff, 0x8108}], 0x2, 0x1000) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x404100, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x3, 0x1, 0x1}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000300)={r4, 0x78, 0xeb}, 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000340)={0x5, 0x0, 0x10001, 0x400000000000000}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000380)={r5, 0x1}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) ptrace$pokeuser(0x6, r6, 0x4, 0x81) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000400)={0x29}) connect$pptp(r3, &(0x7f0000000440)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r7 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x8, 0x40000) ioctl$DRM_IOCTL_AGP_INFO(r7, 0x80386433, &(0x7f00000004c0)=""/157) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000580)={0x0, 0xffffffff}, &(0x7f00000005c0)=0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000600)="e4dd2153655b07b47908b5b73a5597fc507390372c692f9a2a94c70ae7a44c3b4ce8cccda40c016193f4c4d5c7b2304db06befabb0c372344736842e37821d639877825af4e9d54f5df4eff6ecbabf33c1c91666010a7eedfa6ebfc743b95433", &(0x7f0000000680)=""/136, 0x4}, 0x20) r8 = syz_open_dev$audion(&(0x7f0000000780)='/dev/audio#\x00', 0x2, 0x501100) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vga_arbiter\x00', 0x448840, 0x0) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f0000000800)={0x3, r9}) sendmsg$kcm(r1, &(0x7f0000001bc0)={&(0x7f0000000840)=@in6={0xa, 0x4e24, 0x793, @dev={0xfe, 0x80, [], 0x1f}, 0x401}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000008c0)="70a2e0f59880597a4ee2ab9544b0b60170b5136ccbcfe13200fd0330e441422b7ec906187b848bfc7fc289d9d27198b448d662571a7756986d11b8f566375feaa5c10192061725d715c4bf37780ac0f74f22125e2184bd5a6889ae25e422b392d181fd65f29e90ef5aab6be729acbe0ebcef1cc232", 0x75}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="8b10027257be52f48e3b635357ae8c3321edf6dc151d83fe96745ce39b39e5a61869c52dd58c7e3a8e45d2edce35bda58789f90a08394f00821519b20ddc565eb8e42c6c8a139637a2c3665bae1b77c7fff3cc3f8d2d24c5b0ed9c2d4a633e97a257fab4838f1574db5263ed0563a2eb75b2ef0332868bac1a706fbac613cad1df46b150f737741c9af4f8425596e3526e8aa562ca8a0e27f6c6599c541c68f873123cddb5bffa65a19274063dd06d4e1125efad13b23855cde2cead3cae5d9898bdfbdcce26312e6ee9627aa315", 0xce}], 0x3, &(0x7f0000001a80)=[{0xd8, 0x10f, 0x6, "7d8031af205abd0fd2de5cc591c66a34d2ad9d296850277408a5c67709b13b83726a28c266b40bbe0f5730087ab04191ec14c895cc9b5daad12245d14ee64f9fa809f3a44e2415859a2ee7fe2d3828a21b62cd2cd36fa6dd3b644e3cb0648cb92b3571a1c7e1d3a6615efa356c82988841e8f1d6945b49c924738a327fd48990c87769dba5eccfb4ce38fa0f41535c56f421a030f7228065c09b2823f41745e787b9e94a7c571f165744847ca24911e594a5a19e1c4e63d427d93ad1be1989afa327a4"}, {0x68, 0x112, 0x6f, "5f350b49bc7beb98d0c3f35a0733877af0d6609714a98702fedbbe66838533686230ecfc52770b0414c3639c5433480c74f925bb21504162fc711f7604c317df76de8a5554d8d4ab78e35097003b93b9d98a84"}], 0x140}, 0x4) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/vhost-vsock\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r10, &(0x7f0000001c40)='trusted.overlay.origin\x00', &(0x7f0000001c80)='y\x00', 0x2, 0x2) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001cc0)='/proc/self/net/pfkey\x00', 0x40040, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r11, 0x800443d3, &(0x7f0000001d00)={{0x8, 0x5, 0x0, 0x1f, 0x8}, 0x10000, 0x5, 0x9}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000001d40)={0x1f, 0x0, 0x1, 0x2}) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002040)='/dev/autofs\x00', 0x1000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r12, 0x111, 0x5, 0x0, 0x4) 18:14:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r2, 0x0, 0xffffff71, 0x2000000100100006) socket$inet_udplite(0x2, 0x2, 0x88) r3 = geteuid() keyctl$chown(0x4, 0x0, r3, 0x0) r4 = getgid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000480)={{0x6134e6ad, 0x0, r4, 0x0, 0x0, 0x0, 0x80000001}, 0xff, 0x80000000, 0xfffffffffffffffe}) r5 = geteuid() keyctl$chown(0x4, 0x0, r5, 0x0) getegid() geteuid() getegid() sendmsg$unix(r0, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f", 0xfffffffffffffda4}], 0xfffffffffffffd8, 0x0, 0x0, 0x4}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000fc8)={&(0x7f0000f5aff6)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) dup2(r7, r6) r8 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x40000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 18:14:59 executing program 4: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4d304, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x380, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000240)={0xa, 0x4, 0xfa00, {r3}}, 0xc) fcntl$setstatus(r0, 0x4, 0x42000) r4 = shmget(0x2, 0x4000, 0x78001000, &(0x7f000001b000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x118c29b3b2bc94a4) shmdt(0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r8 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r8, 0x0) ppoll(&(0x7f0000001980)=[{r8}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) perf_event_open(&(0x7f0000000540)={0xa8dbffa7d74f6926, 0x70, 0x69, 0xe4, 0x20, 0x0, 0x0, 0x4, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x8, @perf_config_ext={0x8, 0x4}, 0x3022, 0x9, 0x2, 0x6, 0x1b23, 0x3, 0xff01}, r7, 0xc, r8, 0x1) process_vm_writev(r7, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000140)}], 0x4, &(0x7f00000018c0)=[{&(0x7f00000004c0)=""/25, 0x19}, {&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/86, 0x56}, {&(0x7f0000001600)=""/85, 0x55}, {&(0x7f0000001680)=""/236, 0xec}, {&(0x7f0000001780)=""/69, 0x45}, {&(0x7f0000001800)=""/173, 0xad}], 0x8, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) close(0xffffffffffffffff) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r11) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f000000f000/0x18000)=nil, 0x0, 0x8000001d, 0x0, 0x0, 0xffffffffffffffa5) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:14:59 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x80000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x100, 0x2) sendto$inet(r1, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8d22720", 0xee, 0x0, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r9 = socket(0xa, 0x1, 0x0) r10 = socket(0x1000000010, 0x400000400080803, 0x0) r11 = dup(r10) write$cgroup_int(r11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r12}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [0x0, 0x0, 0x6c00000000000000], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0x0, 0x4, 0x0, 0x4123b79bef9aec01, 0x0, 0x20000, r13}) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r13}) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) r14 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r14) write(r14, &(0x7f0000000240)="240000001a0025f07e9451f68f2e9c920a0b49ffed000019806028000800100001000000", 0x24) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @loopback, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004}) setsockopt$inet6_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000480)='\x01S\xb8\x00\x00', 0x152) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xfffffffffffffcf9) syslog(0x0, &(0x7f0000000300)=""/120, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 467.954796][T17307] binder: 17302:17307 ioctl c018620c 20000600 returned -22 18:15:00 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x68, 0x0, 0x0, 0x0, 0x0}) [ 468.178783][T17421] binder: 17418:17421 ioctl c018620c 20000600 returned -22 18:15:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r2, 0x0, 0xffffff71, 0x2000000100100006) socket$inet_udplite(0x2, 0x2, 0x88) r3 = geteuid() keyctl$chown(0x4, 0x0, r3, 0x0) r4 = getgid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000480)={{0x6134e6ad, 0x0, r4, 0x0, 0x0, 0x0, 0x80000001}, 0xff, 0x80000000, 0xfffffffffffffffe}) r5 = geteuid() keyctl$chown(0x4, 0x0, r5, 0x0) getegid() geteuid() getegid() sendmsg$unix(r0, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f", 0xfffffffffffffda4}], 0xfffffffffffffd8, 0x0, 0x0, 0x4}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000fc8)={&(0x7f0000f5aff6)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) dup2(r7, r6) r8 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x40000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 18:15:00 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x6c, 0x0, 0x0, 0x0, 0x0}) [ 468.387513][T17532] binder: 17528:17532 ioctl c018620c 20000600 returned -22 18:15:00 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x74, 0x0, 0x0, 0x0, 0x0}) 18:15:00 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x68, 0x0, 0x0, 0x0, 0x0}) [ 468.519901][T17638] binder: 17636:17638 ioctl c018620c 20000600 returned -22 18:15:00 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x7a, 0x0, 0x0, 0x0, 0x0}) [ 468.592974][T17742] binder: 17741:17742 ioctl c018620c 20000600 returned -22 [ 468.668052][T17747] binder: 17746:17747 ioctl c018620c 20000600 returned -22 [ 468.781963][ C1] net_ratelimit: 18 callbacks suppressed [ 468.787742][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 468.793492][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 468.941677][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 468.947451][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 469.011655][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 469.017514][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 469.571645][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 469.577425][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 469.651646][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 469.657400][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:15:05 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x300, 0x0, 0x0, 0x0, 0x0}) 18:15:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0x0, 0x1}, &(0x7f0000000040)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SIOCAX25GETINFOOLD(r8, 0x89e9, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={r5, 0x8e0}, 0x8) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="666f7263652c666f7263652c63726561746f723d18dfcb2e2c6465636f6d706f73652c6e6c733d6e"]) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(r9, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 18:15:05 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x80000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x100, 0x2) sendto$inet(r1, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8d22720", 0xee, 0x0, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r9 = socket(0xa, 0x1, 0x0) r10 = socket(0x1000000010, 0x400000400080803, 0x0) r11 = dup(r10) write$cgroup_int(r11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r12}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [0x0, 0x0, 0x6c00000000000000], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0x0, 0x4, 0x0, 0x4123b79bef9aec01, 0x0, 0x20000, r13}) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r13}) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) r14 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r14) write(r14, &(0x7f0000000240)="240000001a0025f07e9451f68f2e9c920a0b49ffed000019806028000800100001000000", 0x24) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @loopback, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004}) setsockopt$inet6_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000480)='\x01S\xb8\x00\x00', 0x152) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xfffffffffffffcf9) syslog(0x0, &(0x7f0000000300)=""/120, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:15:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) pipe(&(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000400)={0xfe, 0x7, 0x7}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='fd\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r5, 0x0) stat(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) msgget$private(0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r6, 0x0) write$P9_RWALK(r6, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r10 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r10, 0x0) ppoll(&(0x7f0000001980)=[{r10}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) perf_event_open(&(0x7f0000000540)={0xa8dbffa7d74f6926, 0x70, 0x69, 0xe4, 0x20, 0x0, 0x0, 0x4, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x8, @perf_config_ext={0x8, 0x4}, 0x3022, 0x9, 0x2, 0x6, 0x1b23, 0x3, 0xff01}, r9, 0xc, r10, 0x1) r11 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x216, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x2}, 0x21208, 0x1, 0x9, 0x0, 0x8, 0x994}, r9, 0xd, 0xffffffffffffffff, 0x8) dup2(r6, r11) r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r13 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x8, 0x5101) ioctl$KDSETMODE(r13, 0x4b3a, 0xfffffffffffffffe) r14 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, 0x0, &(0x7f0000000280)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x8000, 0x2, 0x2, 0x69}, &(0x7f0000000140)=0x4, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup3(r16, r15, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) setsockopt$SO_RDS_TRANSPORT(r17, 0x114, 0x8, &(0x7f0000000080), 0x4) fstat(r14, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 18:15:05 executing program 3: socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x10, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x2100, 0x0) read$FUSE(r0, &(0x7f0000000340), 0x1000) r1 = socket$netlink(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="01d3e54d535308cfe285eb68f53903838a5b770630614a129df5a2232944b6ce320cfad8b9ef27414ec990090e8fdae7c4c6fb2e9dfb8a717ccafbf34d4ba1c3e45bbf4f2fde66b413c8eb10942ea34bfca2cd08bf165bf2e0b9dc41082ec0f770d7f4e2297244823e90effb6a36ba6881da0cf62ad5740abc73f251feb5a6743ae8099257934c4d07e714973e6bbea01cb42ccbd858fa"], 0x1) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r2, r3, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r3, r3, &(0x7f0000000140), 0x8800000) sendmsg$nl_route(r1, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80080080044df9, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x4}, 0x2c) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet(0x2, 0x0, 0x0) 18:15:05 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000001100), &(0x7f0000001140)=0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000001800)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$CAPI_GET_MANUFACTURER(r10, 0xc0044306, &(0x7f0000001180)=0xa72) dup2(r6, r7) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)=[{&(0x7f0000000400)=""/199, 0xfffffe80}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000340)=""/42, 0x2a}], 0x2, 0x0, 0x181, 0x200f00}, 0x0) write$binfmt_elf64(r2, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x12f) eventfd(0x0) ioctl$KVM_S390_UCAS_UNMAP(r10, 0x4018ae51, &(0x7f00000000c0)={0x1, 0x6, 0x2}) [ 473.120019][T17864] binder: 17860:17864 ioctl c018620c 20000600 returned -22 18:15:05 executing program 0: add_key(&(0x7f00000002c0)='trusted\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x234, 0xfffffffffffffffb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x0, 0x8, 0x1, 0x7, 0x0, 0x3, 0x1, 0x0, 0x612}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x80007) read$FUSE(r2, &(0x7f0000000800), 0x1000) syz_open_dev$loop(0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) msgget$private(0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) msgget(0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="714f9eaa77e68e8af8bb73f2672049cad037"], 0x200600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r11, @ANYBLOB="00000000fffffffff6ffffffa686000000000000697100000800020000000000"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000600)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @dev}, &(0x7f00000004c0)=0xc) 18:15:05 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x500, 0x0, 0x0, 0x0, 0x0}) [ 473.236305][ T26] audit: type=1804 audit(1573755305.307:63): pid=17976 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir293938814/syzkaller.mGuQ2H/112/bus" dev="sda1" ino=16994 res=1 18:15:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r3 = dup(r2) syz_open_dev$dspn(&(0x7f0000000180)='\x00\x14\x01\xf6\x00', 0x7fffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 473.551104][T17991] binder: 17986:17991 ioctl c018620c 20000600 returned -22 18:15:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000140)=0x4) mkdir(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7d2a, 0x1fe}, 0x0, 0x0, 0x0, 0x0, 0x8b6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r6], 0x1}, 0x1, 0x0, 0x0, 0x48}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x400000000000288, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e25, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000001, 0xe307}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) rmdir(0x0) socket(0x0, 0x0, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f800000016001d0300000000000000521700001e000000007f000000000000000000f7ffff81f2571bf5a594f3833a0a6e3618b9ff000000", @ANYRES32=0x0, @ANYBLOB="9dec6fa1da47231b65e4756621b0e0847fa3c04c73ccb64a5fb2821b396eaa6752e27a56e8722efc2a8ea6543b6a8c6531dd02cf33c80c8253f1ce05f19cad5e01be05201e69856164a13f2a64bd6c4a84a8d9c23af4b1204cb3084de5d1da13a1be3aabcd8d739b515c38d0f21368233f9c1bd1539d1cd5ee17a99f399fa22061154d8c99857f3404860177"], 0x3}}, 0x0) r10 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) 18:15:05 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x600, 0x0, 0x0, 0x0, 0x0}) 18:15:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000040)=0x3ff) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4000000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18dfffffffffff00000000000000000063111400000000009500ae8a52c8000000000000"], &(0x7f00000000c0)='GPL\x00', 0xfffffffd, 0xd7a, &(0x7f0000001200)=""/4103, 0x0, 0x0, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x157}, 0x70) [ 473.811599][ C0] net_ratelimit: 22 callbacks suppressed [ 473.811616][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 473.823097][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:15:06 executing program 3: socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x10, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x2100, 0x0) read$FUSE(r0, &(0x7f0000000340), 0x1000) r1 = socket$netlink(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="01d3e54d535308cfe285eb68f53903838a5b770630614a129df5a2232944b6ce320cfad8b9ef27414ec990090e8fdae7c4c6fb2e9dfb8a717ccafbf34d4ba1c3e45bbf4f2fde66b413c8eb10942ea34bfca2cd08bf165bf2e0b9dc41082ec0f770d7f4e2297244823e90effb6a36ba6881da0cf62ad5740abc73f251feb5a6743ae8099257934c4d07e714973e6bbea01cb42ccbd858fa"], 0x1) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r2, r3, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r3, r3, &(0x7f0000000140), 0x8800000) sendmsg$nl_route(r1, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80080080044df9, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x4}, 0x2c) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet(0x2, 0x0, 0x0) [ 473.906809][T18106] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.914956][T18106] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.938810][T18110] binder: 18105:18110 ioctl c018620c 20000600 returned -22 18:15:06 executing program 1: socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x10, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x2100, 0x0) read$FUSE(r0, &(0x7f0000000340), 0x1000) r1 = socket$netlink(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="01d3e54d535308cfe285eb68f53903838a5b770630614a129df5a2232944b6ce320cfad8b9ef27414ec990090e8fdae7c4c6fb2e9dfb8a717ccafbf34d4ba1c3e45bbf4f2fde66b413c8eb10942ea34bfca2cd08bf165bf2e0b9dc41082ec0f770d7f4e2297244823e90effb6a36ba6881da0cf62ad5740abc73f251feb5a6743ae8099257934c4d07e714973e6bbea01cb42ccbd858fa"], 0x1) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r2, r3, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r3, r3, &(0x7f0000000140), 0x8800000) sendmsg$nl_route(r1, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80080080044df9, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x4}, 0x2c) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet(0x2, 0x0, 0x0) [ 474.051635][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 474.057423][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:15:06 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x700, 0x0, 0x0, 0x0, 0x0}) [ 474.501892][T18227] binder: 18225:18227 ioctl c018620c 20000600 returned -22 18:15:06 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x7a9, 0x0, 0x0, 0x0, 0x0}) 18:15:06 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() syz_open_procfs(0x0, 0x0) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0xdd, 0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000000c0)={0x7f}) write$tun(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="00000a01411a00ab006709075d8e9070ac141419ac1414bb07030001008913007f000001ac1414aaac1414bbe0000001830b0dac1e0001e0000078440c0093ffffffff0000ffff0a4e244e2204019078441eed3d2a5ebf5ef31e52e1db11604e2b49e0b787582e7466f04f389d86523da1d8c4eac6399f86088daec4493c8138046b65945f91fda53b"], 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xfffffffffffffffa) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r6) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x1a1}]) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r7, 0x3, &(0x7f0000000740)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2, r5, &(0x7f0000000380)="4df098342219b18e70d434ab63d57da29a0f8894e243d09bc6a88d01bea38716be7c0dc3aa84156956fcdf5698d1299d88af1044cc1ea86d140b70c33837e5c6ad6bdc3e68c05908ce96fed0f9c5e6bc528fb32bffce7e5446a7a6b272c92bfcc13dd23bf7", 0x65, 0x80000000, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x101, r4, &(0x7f0000000400)="e16f8decc667547c0b06d2031acbf554c6844b6ffcc7e098e7fbae5a260907efdc966c26e8c5ff2c33c26ff447eec3d47ddb35f6aedc07242ad0b58c2ccc0024c46a705affa7c6cc282250996bc3ce03f3bd", 0x52, 0xffffffffffffff01, 0x0, 0x1, r3}, 0x0]) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f77657264697209a6c7593c7f44d3e960e0f27cfc563d2e2f66696c65302c776f726b646926f82dfab160723d2e2f661d00cc380223e387b22f5e0673f7a02812170b4f0ba3d56a40cd6a8971d74ecad70b80a732f60c3747a7814e17600e128642133e51d4e1349979cfd830310b6686d3a500407029071a324231d24ad9c1d88a59b6af3d40881740911b73881dc00211a0318d49f05b922659c03b264a9064fe54bec429a69942e3e5356567e48efa259a602915cec06e9464a99973a0f2349da7338044a16d523be06f06a50cfad4918e2c5877da2d510118b3af"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 474.816993][T18341] binder: 18340:18341 ioctl c018620c 20000600 returned -22 [ 475.010250][T18447] overlayfs: unrecognized mount option "lowerdir ¦ÇY<DÓé`àò|üV=./file0" or missing value [ 475.020271][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 475.020300][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 475.171654][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 475.177510][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 475.251645][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 475.257420][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 475.715267][T18455] overlayfs: unrecognized mount option "lowerdir ¦ÇY<DÓé`àò|üV=./file0" or missing value [ 479.171651][ C1] net_ratelimit: 18 callbacks suppressed [ 479.177336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 479.183074][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 479.331681][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 479.337508][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 479.411639][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 479.417436][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 479.971660][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 479.977555][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 480.051656][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 480.057426][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:15:15 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x7aa, 0x0, 0x0, 0x0, 0x0}) 18:15:15 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1f) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x1010, r2, 0xfffffffe) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendto$inet6(r0, &(0x7f0000000000), 0xcfd0, 0x0, 0x0, 0x4d97) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f00000000c0)={'team_slave_0\x00', 0x7fffffff, 0xfff}) 18:15:15 executing program 1: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r6 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) ppoll(&(0x7f0000001980)=[{r6}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) perf_event_open(&(0x7f0000000540)={0xa8dbffa7d74f6926, 0x70, 0x69, 0xe4, 0x20, 0x0, 0x0, 0x4, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x8, @perf_config_ext={0x8, 0x4}, 0x3022, 0x9, 0x2, 0x6, 0x1b23, 0x3, 0xff01}, r5, 0xc, r6, 0x1) ptrace$getregs(0xe, r5, 0x2, &(0x7f0000000000)=""/84) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000006111280000000000851000000200000085000000070000009500000000000100950000000000000073e2931e3af031ad39534a84f4fdd5a639a2b607d5eb9304be17030778d6cb428ac55eb67f98317ae2e59b61424a879505a5df4f8e8aae7ec905492b143a4fd00a99698e809f90e1e541002b4dc5f9d8c9f4188115135d350c"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:15:15 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x340100, 0x0) write$P9_RWALK(r5, &(0x7f0000000740)={0x3d, 0x6f, 0x2, {0x4, [{0x2, 0x2, 0x6}, {0x42, 0x1, 0x5}, {0x20}, {0x10, 0x1, 0x2}]}}, 0x3d) r6 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_buf(r6, 0x0, 0x10, &(0x7f0000000180)="6aeafa0833dc4f8b2a528482d0b7653d083b4eda3abd42e4e16310db6460c9d0e5957f0f9c00419dfab7c88f185fda2d0454e6", 0x33) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) sendmsg$IPVS_CMD_NEW_DAEMON(r7, 0x0, 0x10004091) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000029bd7000ffdbdf080006266100010083bfe70578b1dbb587afe389492e638153b2ef49a43a348c9a1d5165419e4a0dd1806eab3535d3788c358a5dbae443f59537c36e73507be5be29459ec3717b7702a598c531ac999177ed28464c9ccd49ad4dfbe914ba1fb3de7137c83f000000000000005ccb27794d3a5613b309d166b650cf24bba7bbdf0ac0bb57425d5988a3f19f699868ffc40e8d"], 0x1c}, 0x1, 0x0, 0x0, 0x44044}, 0x40040) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000340)=""/85, 0x8dae8eb242fce13b, 0x6, 0x7b5, 0x4, 0x6, 0x7}, 0xffffffffffffff02) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r11, 0x89e0, &(0x7f0000000580)={'team_slave_1\x00', 0x8e, 0x7ff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r14, 0x84, 0x15, &(0x7f0000000140)={0x40}, 0x1) accept4$netrom(r8, &(0x7f0000000500)={{0x3, @netrom}, [@netrom, @default, @bcast, @null, @remote, @null, @rose, @rose]}, &(0x7f0000000040)=0x48, 0x0) ftruncate(r8, 0x200004) sendfile(r1, r8, 0x0, 0x80001d00c0d0) 18:15:15 executing program 4: creat(&(0x7f0000000380)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000288, 0x0) pwritev(r2, &(0x7f0000001840)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f00000003c0)="7ebeca4bb6444105591e2086b5f32e1ff36a26ce75aea6aec16c2cc3e73c1c7ac54e3d30f3f64604da0da93381dde36eb3ff155c9776c54d127a4696fd65c8e6d6669e8059caf2eb112c12", 0x4b}, {&(0x7f0000000280)="cc", 0x1}, {&(0x7f0000000440)="327bcdbd489be924f902723a892c0243f822558a1562791a04d3c15f079824dce624e425746902413840cb05d99cabdb6d4c7bb410c172aace33c07d14cd87c8b53f7164d9e250d52ecdf778b4de456a6a8ac8c879ac58c4cac50017ec6b08db59c74bce7a8ad28e59166ff9f7a514866899f3acc7953ec61fb49c96abf06d7b4207a9f7f79d186b945b71edf71c", 0x8e}, {&(0x7f0000001640)="9dde4d63478fd951d760772398a2a92a9d59bc77c3313663e1c19f6e6529e784a01af5f77407f0e1088c9598b25ebc4ab291c326f1c488d3edd7875564ba4caa69647aade94bf54d28de9912b3f609d89a6ce2dc9aa37f86771b9b8d0baf03b9c7938890258f50b6b6c4a21a828c62e511a4f05001590a50982b3264b55686a2457bbcf923a6ebe94037e8ab14a4d5c18480ab8b42c4a7951f5621410e2ce8859feec9b4fc2aea74cf4ecb0c163ce808747af2e228ec95305010f5dba65b21c23a781e93342d69e60bdd2c4b29dfa7dd2366aa88b866e47947f6208aaafb9fca285cd15634bff012b39aa6981726", 0xee}, {&(0x7f0000001580)="32a78fdfb24a2afdd2b7332cca042af610ef161aec455c4820d0c44c1ec1ae727bcd99b0a71a2d151af5f4cfeacdef00efa6324f216867fe188957ac504a3dc7a96473191c", 0x45}, {&(0x7f0000001740)="b14e5f59a3b381e52b35fbb298071cf3e3c2e62886a02a6cefa9be6257f0d1d4998badb10f247fee22eb7eaa85f3a8c268323bda2c8bf1f68454dfc0c69033fa5da3ee994157ad9b55e5f6aa1f7991068c5a52581f7d5517f4226abb90d3afd07d53627163e105b47ac6af664f6ddb16fc3a8ff40e41441d15b417c7777080723517b1e37cda68623e6cddf454fedc4351dd90fd358e9d90f8c0b97d58266b584566584d6cd7ca33ae7b0c01d26ab73ba7feb8ae87e1c4af", 0xb8}, {&(0x7f0000000340)="5875f731ddb9734344f2931265fa42690189817dea7ae784baf580439c5bead267f01b1354c1d5ae09b6884b773bf579f17572e02d2d0661fcaa43", 0x3b}, {&(0x7f0000000500)}, {&(0x7f0000001800)="dd7b7fd6f7", 0x5}], 0xa, 0x8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x80000000, 0x0, 0x6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000072c000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0x30000000000}, 0x28, 0x0) r7 = creat(&(0x7f0000001600)='./bus\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) fcntl$setstatus(r6, 0x4, 0x44000) io_setup(0x3, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r13, r12, 0x0) lseek(r13, 0x0, 0x0) io_submit(r11, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r7, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 18:15:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000002d00)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@multicast1}}, &(0x7f0000002e00)=0x1c) r13 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r14) sendmsg$nl_route(r5, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=@can_delroute={0x94, 0x19, 0x20, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x5}, [@CGW_FILTER={0xc, 0xb, {{0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}, @CGW_DST_IF={0x8, 0xa, r12}, @CGW_MOD_SET={0x18, 0x4, {{{0x1, 0x0, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "f3c12f05332de54c"}, 0x4}}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}}, @CGW_MOD_UID={0x8}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_MOD_UID={0x8, 0xe, r14}, @CGW_MOD_XOR={0x3, 0x3, {{{0x4, 0x0, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "68f7b91822e6e3c4"}, 0x1}}, @CGW_MOD_SET={0x18, 0x4, {{{0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "0000dace00001b00"}, 0x2}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, {0x81, 0x4e, 0x81, 0x1, 0x0, 0x7}}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup3(r16, r15, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) r18 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="0100020069950811410081f701eddd4b4632944736c58cd7b1b0b40ef127683a4134c1e06360cdc383e263930498e5dd72d1b1aed15e541044e63d7397235ab0a2821720f1b16fb85facaa0fe37e417496200daf936bb7e0bd7c75fae5fb23e8fd5b8ba1e001dd4d5f60cf8dd7e941129cc2ccb399b85d4f535f05647c36c43a794e694e6dc4f5bd52250bd63c3d198e074b827975ec1ed57c1780bf1b605096c97ee852b26ee7cd282bebbb773eaafbc7e08baa8d52d9a14b2d0000000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r18, 0x84, 0x0, &(0x7f0000000000)={r19}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r19, 0x0, 0x1}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r17, 0x84, 0x6f, &(0x7f0000000040)={r19, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0xfffffffd, @loopback, 0x14}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x3f}, @in6={0xa, 0x4e24, 0x1f, @mcast1, 0xbb6}, @in={0x2, 0x4e23, @rand_addr=0xfff}]}, &(0x7f0000000240)=0x10) [ 483.850907][T18468] binder: 18462:18468 ioctl c018620c 20000600 returned -22 18:15:16 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x2000, 0x0, 0x0, 0x0, 0x0}) 18:15:16 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0xfb, 0x9b, 0x0, 0xc5, "25d1f32a5ecb5657d0282ff77da7e76b", "bc4e3b85eea070009593909060ad424e0c24b7ad8c7bdcd139803bdc5863ef2e7b87e0d846fb58fce9c3ea4904fd03107281aa58518baf9a6a6a40f8b5d6354300c06e67396e6b567c0b1cc7a3ec04c22ab4045aa1a7dfa86a0309451dcf4077ff59d4042247501309ca4b8161976dce3075d9307efa3a7f8e6acd75f5a20d6a648a8bc59fc8"}, 0x9b, 0x1) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r4, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 484.128111][T18583] binder: 18581:18583 ioctl c018620c 20000600 returned -22 [ 484.175479][T18472] syz-executor.0 (18472) used greatest stack depth: 9960 bytes left [ 484.175517][ T26] audit: type=1800 audit(1573755316.247:64): pid=18579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16801 res=0 [ 484.211632][ C0] net_ratelimit: 22 callbacks suppressed [ 484.211642][ C0] protocol 88fb is buggy, dev hsr_slave_0 18:15:16 executing program 0: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0xfffffffffffffffd, 0x0, 0x5, 0x3, 0xffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r1, r0, 0xd, 0x2}, 0xd) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000006c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) 18:15:16 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x4800, 0x0, 0x0, 0x0, 0x0}) [ 484.344737][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 484.359802][T18693] binder: 18691:18693 ioctl c018620c 20000600 returned -22 [ 484.451663][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 484.457465][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:15:16 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x4c00, 0x0, 0x0, 0x0, 0x0}) 18:15:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$team(0xffffffffffffffff) [ 484.677264][T18806] binder: 18801:18806 ioctl c018620c 20000600 returned -22 18:15:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x208204) r3 = open(&(0x7f0000000140)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800003, 0x11, r3, 0x24) write$UHID_INPUT(r1, &(0x7f0000002500)={0x8, "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", 0xfffffffffffffeb1}, 0x406fcbec934e2639) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 18:15:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) 18:15:16 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x6000, 0x0, 0x0, 0x0, 0x0}) 18:15:17 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bridge_slave_0\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 18:15:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) [ 485.093103][T18927] binder: 18925:18927 ioctl c018620c 20000600 returned -22 [ 485.179825][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 485.411645][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 485.417452][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 485.571656][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 485.577447][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 485.651681][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 489.571663][ C1] net_ratelimit: 19 callbacks suppressed [ 489.577369][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 489.583109][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 489.732013][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 489.737858][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 489.811657][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 489.817414][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 490.371694][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.377481][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 490.451631][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 490.457401][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:15:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) 18:15:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f00000003c0)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xab377) clone(0x2002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x0, 0x800}, @timestamp], 0x122d4265) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 18:15:25 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x6800, 0x0, 0x0, 0x0, 0x0}) 18:15:25 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9d8723ffcc367fae}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f00000000c0)='./bus\x00'}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) tkill(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) geteuid() eventfd2(0x9, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) 18:15:25 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) fcntl$setpipe(r1, 0x407, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) inotify_init() clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:15:25 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 493.217858][T19051] binder: 19047:19051 ioctl c018620c 20000600 returned -22 18:15:25 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) 18:15:25 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x6c00, 0x0, 0x0, 0x0, 0x0}) 18:15:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x362, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 18:15:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='vfat\x00', 0x0, 0x0) [ 493.456152][T19172] binder: 19169:19172 ioctl c018620c 20000600 returned -22 18:15:25 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x7400, 0x0, 0x0, 0x0, 0x0}) [ 493.586644][ T2502] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 493.611327][T19284] FAT-fs (loop4): unable to read boot sector 18:15:25 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000380)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() clone(0x3fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f00000000c0)='./bus\x00'}, 0x10) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x3b) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() setregid(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) dup(0xffffffffffffffff) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002180), &(0x7f00000021c0)=0xc) setregid(0x0, 0x0) setreuid(0x0, 0x0) [ 493.654239][ T2502] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 493.668614][T19287] FAT-fs (loop4): unable to read boot sector [ 493.736583][T19293] binder: 19289:19293 ioctl c018620c 20000600 returned -22 [ 494.611649][ C0] net_ratelimit: 22 callbacks suppressed [ 494.617374][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 494.623221][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 494.851826][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 494.857661][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 495.811661][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 495.817438][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 495.971627][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 495.977406][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 496.051650][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.057428][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 499.971957][ C1] net_ratelimit: 18 callbacks suppressed [ 499.971974][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 499.983415][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 500.131631][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 500.137468][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 500.221656][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 500.227545][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 500.771658][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 500.777552][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 500.851660][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 500.857416][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:15:33 executing program 5: 18:15:33 executing program 3: 18:15:33 executing program 4: 18:15:33 executing program 1: 18:15:33 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x7a00, 0x0, 0x0, 0x0, 0x0}) 18:15:33 executing program 0: 18:15:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) inotify_init() clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:15:33 executing program 1: 18:15:33 executing program 4: 18:15:33 executing program 3: [ 501.785224][T19417] binder: 19416:19417 ioctl c018620c 20000600 returned -22 18:15:34 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0xa907, 0x0, 0x0, 0x0, 0x0}) 18:15:34 executing program 1: [ 502.027835][T19534] binder: 19533:19534 ioctl c018620c 20000600 returned -22 [ 505.011631][ C0] net_ratelimit: 22 callbacks suppressed [ 505.017363][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 505.023095][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 505.251640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 505.257453][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:15:37 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8d}, 0x35360, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x8) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) 18:15:37 executing program 3: 18:15:37 executing program 4: 18:15:37 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0xaa07, 0x0, 0x0, 0x0, 0x0}) 18:15:37 executing program 1: 18:15:37 executing program 0: [ 505.891160][T19651] binder: 19648:19651 ioctl c018620c 20000600 returned -22 18:15:38 executing program 3: open(0x0, 0x28001, 0x0) creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x7, 0x182) geteuid() lstat(0x0, &(0x7f0000000840)) 18:15:38 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5461, &(0x7f00000000c0)) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e24, @rand_addr=0x7}}, 0x0, 0x1000, 0x0, "c02ac0441ac2c0c387f3dafdd27be1733c55c45384777316a7f1c28b11fe00654ab16c266a32a32ce765b86074d0f578aa787bd3c2f7a54596ac68fb10b084c4efc33263fdef8023aa32ba97d3e61ac9"}, 0xd8) tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) write$FUSE_LK(r0, &(0x7f0000000240)={0x28, 0x0, 0x7, {{0x4, 0x400}}}, 0x28) r2 = getpid() wait4(r1, &(0x7f0000000200), 0x0, &(0x7f0000000340)) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000400)={0x0, 0x5, 0x7f, 'queue0\x00'}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000002c0)={0x9, 0x8, 0x5, 0x4, 0x100}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) openat$null(0xffffffffffffff9c, 0x0, 0x288482, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) 18:15:38 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x27848, 0x0, 0x0, 0x0, 0x0}) 18:15:38 executing program 4: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) open(0x0, 0x28001, 0x0) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) open$dir(0x0, 0x8000000000006000, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10c9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x7, 0x182) sendfile(r0, r0, 0x0, 0x24000000) geteuid() lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(0x0, 0x0, 0x3, 0x5, &(0x7f0000000740)=[{&(0x7f0000000300)="6a3518b0aeba5d9f23921f4868c88c2051a5153e57d911e667182d7bf5036eaf63b6f35f02579b4a84ddbd7b93b1633886190efb994bc6c028d28dcc26f65ae799da605b16ffe600a8e7ffbd33d776f18c39a36bd133c4e76f0fa54fa1c778842dfff6f7feb2bdfcb91045", 0x6b, 0x100}, {&(0x7f0000000400)="b0ce7e95a03813c3a103144918271e4263ac1fe8dd3dff74cdd53a39e86aa2f8dfd18e76ff921b0a063f337aeeee6c60f2d94f1314197c45879b22a81236ec77958175476f6a212930ef3c0f60713c18e751aa93d461e980b15c225bee2880ef54b716bcc39bce10491626b321c87e464c73ff7c0fa5649a90a885f47070c0b6dc336503ffd0a0d9aff79fa1ecab478fb3e86238a1b3c18418379a710f336c7d3344778e48065e3f08272b65822076fc0e39c4e1bfba9c25dd6c86037c96bdd43534", 0xc2}, {&(0x7f0000000500), 0x0, 0x9}, {0x0}, {&(0x7f0000000640)="e97dcf101d7250fd5c243d5a069af8eb6e4218c1cad0f27c5bff8826edf083d754c33f521c26cee15122b7cf8b24c3170bb2d4c4d879480e41496336df81f62bd1fafd62c9144d12a2265d4949e8d4ffedbba77a2d3448c9289c833f9b507f1dd8852c9e", 0x64, 0x1000}], 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="726f6469722c73686fc2746e616d653d6d6978656428756e695f786c6174653d302c73686f72746e616d653d77696e39352c6e6f6e756d4661026c3d302cc801000000000000653d6c6f7765722c657569643e", @ANYRESDEC=r1, @ANYBLOB="0000ebc30791520f15baa0886bf3423b5c38fcc23f7f65f3beac1334dd82c1241b8d552e46506f4ec04e900c58764fe4cfbeeae86d1426a842e91b3fb261fbbe4854ed91bfc91e67d955cb7e86c5089fc9fa5b0eb7f3ec247b58eeb1d500000000000000000000000000000000fa7c325effa374cea52089d4ebe28d30fcb4d7f46977bf9af907f63903b68fec0a92dc9af8ffed28fc5cc6a4437c254ceebaaac5339a1fc9b37b2d30c2c4f2d7e2e4b2f9c16dbcba01b6310ff44f96c465e2ffa382edef78da0a4db0460bc1462dcfc1e6caa90587bc67000000000000baa83568"]) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) getresuid(0x0, &(0x7f00000001c0), &(0x7f0000000340)) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) 18:15:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000180), 0x1d5b, 0x0, 0x0, 0x1b) recvmmsg(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/75, 0x4b}, {&(0x7f0000000940)=""/82, 0x52}], 0x2}}], 0x1, 0x0, 0x0) [ 506.100203][T19767] binder: 19758:19767 ioctl c018620c 20000600 returned -22 [ 506.174401][T19773] devpts: called with bogus options 18:15:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'nr0\x01\x00', 0x1002}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x01\x00\x01\x00\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6a\xd8c\xe4\x9b\b\x00\x00\x00\x00\x00\x00\x00[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf1X\x8bk9fx\xe7\xba\x156\x04\b\x00\x00\x00\x00\x00\x00\x001\xeb\x8e\xb1\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4m\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd7|\xde^U\x11\x02\x1dm\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\xa5\xca\x91\xe5u#D\xbd\xdfCZ\xf52\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R\x01\x00\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f\f\x9d\xcb\x11\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\r=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x1bR\r>\xd1P\x10;9o\xc2>\t\x0eZ9\x0f\xa1\xc2\x96\x1c\xff\xca\x98\xa8$sj\x99\b\xc7\x94F \xfd\x11H\xc3\xaaM\x8a\x98\x96\xd5\xab\xc6\x01\n1\bN\x14\xd5\fp\x8e\xd7\n^\xa0\xbfP\xd4\xd0~\xach#5\xd9\x11\xba\xb9Z\x95\xe7z\xec\xf7\x01V\xce\xcd\xc39\xb3\xa2\x8b\xd6H\x9bhsK\xbd\x9a/\xc9\xd3\x9f\xbb\xe6X\x91\x00f\xd0\x96Q;\xc7M\xf0Y\xc6\xd6o,\f\x03\x9b\xb1~5r2\n>zH\xdc^\xc6\xb0\x15\xce\xf8s=\xf5\x17-\x90\x86,\x93t\xc8\x9585\x17h\x8bB!z)|\xe8k\xb9\xfd1\x0eL\nh\x0f\xbf)\xa1\x90\xd3 6T\x13\xc6&\x1a;T\xc7\xf3\\Ek\x0e\xcd\xbbv\x11\x91\xaby\xb8|1\x9a\x1c\x8a\xb6\xe7\x0e,\xaaU<\\m\x14|\xe3}\x00'/616) [ 506.211601][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 506.217403][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 506.371608][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 506.377441][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 506.451601][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 506.457417][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 506.551311][T19892] device nr0 entered promiscuous mode [ 506.927377][T19885] devpts: called with bogus options [ 510.371640][ C1] net_ratelimit: 18 callbacks suppressed [ 510.377324][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 510.383060][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 510.541647][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 510.547424][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 510.611617][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 510.617387][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 511.171638][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 511.177410][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 511.251609][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 511.257380][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:15:44 executing program 5: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xffe6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x0, 0x989680}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) semctl$GETZCNT(0x0, 0x7, 0xf, 0x0) sysinfo(&(0x7f0000000000)=""/22) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="667b698991beaf8a67f01918eada4857cd8076fad29cf223814334fcd814082bc47d3f2eda05aebb013af5c20c1526197a95b625"], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000140)=0x29) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1) fallocate(r2, 0x0, 0x40000, 0x4) fallocate(r1, 0x0, 0x0, 0x110001) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xd000000, r2, 0x3, 0x8}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='\t\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="cf"], 0x1) fallocate(r5, 0x0, 0x40000, 0x4) fallocate(r4, 0x0, 0x0, 0x110001) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xd000000, 0xffffffffffffffff, 0x0, 0x8}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x400d080) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000022}, 0xc, &(0x7f0000001540)={&(0x7f0000000280)={0x74, r3, 0x10, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x28ee}]}, 0x74}, 0x1, 0x0, 0x0, 0x400}, 0x10000000) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r6 = socket$inet(0x10, 0x0, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00\xff', @ifru_flags}) 18:15:44 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x1000000, 0x0, 0x0, 0x0, 0x0}) 18:15:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x6, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(0x0, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000040), 0x4) getpid() r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) getpgid(0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a708145a339bd57fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b9379079d0000000000000000000000000000008ce0891802ff9726e5d3ecfe2064c00c167a7c97"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/bt)\xe2\n\xac\x9d\x87\xd7\x15r\x16\x8b\x00', 0x40000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U+', 0x7}, 0x28, 0x0) syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x1, 0x2) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = open(0x0, 0x0, 0x0) fcntl$getflags(r7, 0x0) accept4$tipc(r7, 0x0, &(0x7f0000000740)=0xfffffffffffffc51, 0x800) geteuid() fcntl$getownex(r6, 0x10, 0x0) getresgid(0x0, &(0x7f00000008c0), 0x0) 18:15:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r2, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800, 0xb22049daedb38599, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @perf_bp={0x0}, 0x10, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$packet_buf(r8, 0x107, 0x6, &(0x7f0000000240)=""/2, &(0x7f0000000280)=0x2) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x400000000000288, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f0000000180)=0xe1a, 0x8) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10200, 0x0) write$P9_RWRITE(r9, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f00000001c0)={0x678636cf, 0x3ff}) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@remote}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) r10 = syz_open_dev$dmmidi(0x0, 0x3e, 0x0) ioctl$KDSETLED(r10, 0x4b32, 0x2) 18:15:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_sco(r0, &(0x7f0000000340)={0x1f, {0x4, 0x4, 0x6, 0x1, 0x2, 0x1}}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) times(0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0xc0012100, &(0x7f0000000480)={{0x3, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x681bbc503a6731dd}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x0, 0x57, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x32ec9c22f50bcb43}, 0x4000000) 18:15:44 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@noquota='noquota'}]}) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x10) ioctl$RTC_AIE_ON(r0, 0x7001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000000180)={0x0, 0x50007, "16760bea537346bc55284101c90939596b67d8bcf36c8a59", {0x200, 0xe46}}) [ 512.206161][T19910] binder: 19903:19910 ioctl c018620c 20000600 returned -22 [ 512.246967][ T26] audit: type=1804 audit(1573755344.317:65): pid=19907 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir534009452/syzkaller.U9td29/118/file0" dev="sda1" ino=16849 res=1 [ 512.303524][T19909] XFS (loop1): Invalid superblock magic number 18:15:44 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x2000000, 0x0, 0x0, 0x0, 0x0}) 18:15:44 executing program 4: getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=0x1) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$rfkill(r3, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x0, 0x59d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffe}}, 0x0, 0x0, 0x0, 0x80000000000000, 0x4e95be9ae3034b6f}, 0x0) r4 = fcntl$getown(r0, 0x9) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$int_in(0xffffffffffffffff, 0x80000000005016, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000040)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x3fb}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r7, 0x8, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'vcan0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000080) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2f00000004000000000000000000000004000000000700"/34], 0x22) r8 = dup2(r0, 0xffffffffffffffff) sendmsg$nl_generic(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getpgrp(r4) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000005c0)={0x93b7, 0x3, 0x0, 0x20, 0x100000001, 0x2, 0x8}) setpriority(0x0, r9, 0xffff) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) 18:15:44 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50000c4f68da436287bc72d10bc1c527cf332b8cb2ac0990ddb1ce2e97fc8a8af0a0d7d467eeb61d2f4783be6c4ce1f34668803431ac8448c583693944f7521bc1d3d45f90d09ca28733c13c92798049d58db219b35cd334fb46ff33e5f05e5398accf83bf3528542c621e3dfebec4747764e57685e2332ef79dab9cf5d155e6fca86b06392ef088a350b7f64521fe5077206bc95b73de4487a589634add2d831a444107ec59f4f9ef626d60000ffff8a232c52aea1d3ef41d189b3fae9106b6fedcec21fceb189473afd7a6a99f429157c056a1dc0d59fd6177a242356756fcb9bcc394c76c2eee8b8ad3b36fcf7da30bc5ec84052b3249f50dbca"], 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001300), &(0x7f0000001340)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, &(0x7f00000000c0)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x2ba, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r2, r3, 0x0, 0x1) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="fd000000292b2f7bcb4303de18af7751862e56bd8d39e8bd5cbb42d18396d60b784bda74390efa48de0fa58b42906fd58407fb031c2e8fe87051548a6bd41bc89f802fa2c2881a490454dae4cc0aa510392b3792187552df21927a2b85dd06169ec202080bb3552b13a17131b9"], &(0x7f00000002c0)=0x1) socket$inet(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000e5000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="fd002176be8493e89b540000bcb55b46f1ec01498770618888314b6b0f681ec1b1c78e20a99ef6814d179ffea9a31d6489c691dbdc137896323216cfcbb759a894c1d6d22b8f358d69d2ba067723eb57fa6038aa31", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000001340)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x110001) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x0, 0x0, 0x20}) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$uinput_user_dev(r8, &(0x7f00000006c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x88c8]}, 0x45c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r8, 0x0, 0x8}) accept(0xffffffffffffffff, 0x0, &(0x7f0000000500)) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x2000002) fallocate(r10, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, r11}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001300), &(0x7f0000001340)=0x8) r12 = socket$inet(0x2, 0x0, 0x0) connect$inet(r12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={0x0, 0xfffffffc}, 0x0) [ 512.500681][T20035] binder: 20034:20035 ioctl c018620c 20000600 returned -22 18:15:44 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x3000000, 0x0, 0x0, 0x0, 0x0}) [ 512.764151][T20152] binder: 20149:20152 ioctl c018620c 20000600 returned -22 18:15:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/180, 0xb4}, {0x0}, {0x0}, {&(0x7f00000026c0)=""/201, 0xc9}], 0x4}, 0x7}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002e80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000042c0)=[{0x0}, {0x0}, {&(0x7f00000032c0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000004380), 0x80, &(0x7f0000006780)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000006800)=""/167, 0xa7}, 0x80000001}], 0x4, 0x18013, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RSYMLINK(r6, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x80, 0x4, 0x4}}, 0x14) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) symlink(0x0, &(0x7f00000002c0)='./file0\x00') setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 18:15:44 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x4000000, 0x0, 0x0, 0x0, 0x0}) [ 512.960251][T20265] binder: 20260:20265 ioctl c018620c 20000600 returned -22 [ 515.411654][ C0] net_ratelimit: 22 callbacks suppressed [ 515.417378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 515.423148][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 515.651652][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 515.657525][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 516.611630][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 516.617416][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 516.771618][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 516.777395][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 516.851665][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 516.857482][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 520.781639][ C1] net_ratelimit: 18 callbacks suppressed [ 520.781646][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 520.793060][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 520.931620][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 520.937434][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 521.011609][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 521.017406][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:15:53 executing program 5: r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000bc0)=[&(0x7f0000000140)='cpusetnodevcpuset:vboxnet0vmnet0\x00', &(0x7f0000000200)='\x00', &(0x7f0000000480)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', &(0x7f0000000540)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', &(0x7f0000000600)='^\x00', &(0x7f00000006c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', &(0x7f0000000240)=';\b', 0x0], &(0x7f0000000b80)=[&(0x7f0000000ac0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', &(0x7f00000008c0)='+wlan0&:md5sumsecurity-nodev\x00', &(0x7f0000000a00)='\x00\x00\xfe\xde`D\x92\x1bA\xb9\xfc]\xe878Gb\xbc\xcaO6MD\xf7\x01\xfd^}SX:l2>\x18\xb3\x01:\xd1\xba\x85\xe9\fX\x13\xf0\'\x84r\xf9\xbb\x90\xad\xb3\xd9Ln\x84\v\xe7\x92\xa4\xdc,\xc6\x94\xe5p\x84']) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0xbb, 0x6}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000100)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x480000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60f8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000980)={0x9, 0x7, 0x8204, 0x6d8, 0x1d1d, 0x7, 0x5, 0x0, r1}, &(0x7f00000009c0)=0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r5, 0x4080aea1, &(0x7f0000000c40)=""/163) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) 18:15:53 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth0_to_hsr\x00', 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) 18:15:53 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x5000000, 0x0, 0x0, 0x0, 0x0}) 18:15:53 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x244000) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000001000000000000056b9f10fec459f8b"]) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000100)=0x3, 0x4) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000040)={0x0, 0x0, 0xb, 0x4}) 18:15:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_sco(r0, &(0x7f0000000340)={0x1f, {0x4, 0x4, 0x6, 0x1, 0x2, 0x1}}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) times(0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0xc0012100, &(0x7f0000000480)={{0x3, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x681bbc503a6731dd}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x0, 0x57, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x32ec9c22f50bcb43}, 0x4000000) 18:15:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x1200008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x3, @local}], 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0xc0100, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x20}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) [ 521.510798][T20394] binder: 20391:20394 ioctl c018620c 20000600 returned -22 18:15:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) rt_sigaction(0xe, &(0x7f0000000480)={&(0x7f0000000400)="d9ee66440f51c4430f380b7e00c4c27d31950800000066400f5622c422c8f3528f67460f380036c42178511966664681f1655426400f4c2e", {0x7}, 0x80000001, &(0x7f0000000440)="3666450f38341ac4629d40e967420f6a6c9b00c4a165f5f38fc9e09554745f66400f380037c4c1725f2a440feedec442bd29cc0fae6000"}, 0x0, 0x8, &(0x7f00000004c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1011000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r4, 0x0, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4090) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$uinput_user_dev(r5, &(0x7f00000006c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}, 0x45c) r6 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x7, 0x111000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000180)={[0x20, 0x3c4, 0x8, 0x4, 0xffffffffffffffff, 0xeac, 0x6, 0x0, 0xffff, 0x7d, 0x7, 0x4, 0xffe, 0x8, 0x8, 0xde], 0xd000, 0x140}) connect(0xffffffffffffffff, &(0x7f0000000380)=@in6={0xa, 0x81, 0x1, @local, 0x291d}, 0x80) write$P9_RWSTAT(r5, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) fallocate(r5, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x8, 0x20}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) [ 521.571808][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 521.577851][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 521.584127][ T26] audit: type=1804 audit(1573755353.647:66): pid=20494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir534009452/syzkaller.U9td29/119/file0" dev="sda1" ino=17055 res=1 18:15:53 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x6000000, 0x0, 0x0, 0x0, 0x0}) [ 521.645770][ T26] audit: type=1804 audit(1573755353.717:67): pid=20395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir534009452/syzkaller.U9td29/119/file0" dev="sda1" ino=17055 res=1 [ 521.651611][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 521.675815][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:15:53 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000000)={0x580000, 0x0, 0x0, 0x0, 0xc00, 0x0, [0x0, 0x3800000]}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) getcwd(&(0x7f0000000040)=""/132, 0x84) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x200) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="00fb390404e494caac0a93bf78283ce619f90000000000dd2421cad411f5c20f89cf09c8fc61dcfb2e273bffecddd33e3a079de3847f5bf8ea"], 0x39, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) open(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 18:15:53 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) recvmsg(r3, &(0x7f0000000380)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000006c0)=""/174, 0x3fd}], 0x1, &(0x7f00000002c0)=""/103, 0x67}, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000003c0)={0x8, 0x6, 0x1, 0x7, 0x400, 0xd51}) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 521.814862][T20513] binder: 20512:20513 ioctl c018620c 20000600 returned -22 18:15:53 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x7000000, 0x0, 0x0, 0x0, 0x0}) [ 521.964337][T20626] binder: 20623:20626 ioctl c018620c 20000600 returned -22 18:15:54 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r4) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) readlinkat(r5, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/22, 0x16) r6 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x6, 0x2400c2) ioctl$CAPI_CLR_FLAGS(r6, 0x80044325, &(0x7f0000000180)=0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r11, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r12, 0x408c563e, &(0x7f0000000340)={0xffffcc3a, 0xe, 0x32, "43f23498d7a11677701fa24ab52f6c31d6320520f1cf9d2c4aa70e9835f1d55c5f9a1d65a866a07763a7b9b02a94f37140f1b81a28b7bdabc9a0a2d7", 0x1c, "18d0dcc93d7ebe24acf8cf2065ea0d8de0efbb9268fb61ebc8cac5f9e09aec10ab9fd6977016c6e93cad720029358e06d2f125c5d23c97e08a022ff0", 0x40}) r13 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$EVIOCREVOKE(r13, 0x40044591, &(0x7f0000000240)=0x42ae) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup3(r15, r14, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) perf_event_open(&(0x7f00000004c0)={0x4, 0x70, 0x3, 0x81, 0x9, 0x80, 0x0, 0xffffffffffffffff, 0x80000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000480), 0xb}, 0x400, 0x5, 0xd9f, 0x7, 0x3, 0xd7d, 0x9f9e}, 0xffffffffffffffff, 0x0, r16, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r17, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0x7f) [ 525.811616][ C0] net_ratelimit: 22 callbacks suppressed [ 525.811624][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 525.823124][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 526.061619][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 526.067419][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 527.021609][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 527.027380][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 527.181679][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 527.187460][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 527.251657][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 527.257437][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:16:00 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x380, 0x200007fd, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="8c2fb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8fff703998f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d9211b9f2b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefdd198891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d0", 0xb4}, {&(0x7f0000000500)="4520d8c1ee8e08b9ee293229b6ac2189970e6b277c", 0x15}], 0x2}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/38, 0x26}, {&(0x7f0000000a80)=""/108, 0x6c}], 0x2}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000340)=""/247, 0x800, 0xc00, 0x7f}, 0x18) 18:16:00 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x20000000, 0x0, 0x0, 0x0, 0x0}) 18:16:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_sco(r0, &(0x7f0000000340)={0x1f, {0x4, 0x4, 0x6, 0x1, 0x2, 0x1}}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) times(0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0xc0012100, &(0x7f0000000480)={{0x3, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x681bbc503a6731dd}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x0, 0x57, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x32ec9c22f50bcb43}, 0x4000000) 18:16:00 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000073797a31000000000000006adaa2b50000000000000000000000000000000000ab54d8aad9d035ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000b3c404110000000000000000000000000000000000000000000000000000000000000000000015a9878a4e96ae190000000000000000000000000000000000107f4b502d10f522000000000000000000000000000000000000010000000000000000000000000000000001000000000000000000000000000000000000003f4cefee898cea4d268eabfae2ea38b70b2dc1d2e80f6bc0c479a6e45506330882bd52f439aa4c7a953ce95147294da372"], 0x119) write$P9_RREADLINK(r1, &(0x7f0000000240)=ANY=[], 0xfe76) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) execve(&(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)=[&(0x7f0000000040)='/dev/uhid\x00', &(0x7f0000000080)='/dev/uhid\x00', &(0x7f00000000c0)='/dev/uhid\x00', &(0x7f0000000100)='/dev/uhid\x00', &(0x7f0000000180)='/dev/uhid\x00', &(0x7f0000000200)='/dev/uhid\x00', &(0x7f0000000240)='/dev/uhid\x00', &(0x7f0000000280)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='#{\x00', &(0x7f0000000340)='^\x00', &(0x7f0000000380)='(}*(%{trustedem1security:\x00']) 18:16:00 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) mkdirat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x1c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000540)={{0x2, 0x4e20, @remote}, {0x7, @local}, 0x46, {0x2, 0x4e20, @empty}, 'caif0\x00'}) preadv(r1, &(0x7f00000017c0), 0xbe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f00000006c0)) syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x1, 0x1, &(0x7f0000000400)=[{&(0x7f00000003c0)="3058bd8c9ce7c11ec2f6be8848811cc73dbadbfe9f88362da523dd65c701dc1dfb90ced3589cfb7f8b970558e223", 0x2e, 0x2}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001500)={@mcast2, 0x51, r8}) poll(&(0x7f0000000240)=[{r6}], 0x1, 0x0) r9 = getegid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r9, r10, r11) r12 = getegid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r12, r13, r14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r16, 0x0, r15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r18, 0x0, r17) getresuid(&(0x7f00000000c0), &(0x7f00000004c0), &(0x7f0000000500)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r20, 0x605, r19) fchown(r19, r7, r14) 18:16:00 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r2 = epoll_create(0x3) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)) getsockopt$inet6_opts(r1, 0x29, 0xe, &(0x7f0000000100)=""/128, &(0x7f0000000000)=0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r8}]]}}}]}, 0x38}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000200)={@empty, @remote, @local, 0x6, 0x4, 0x7, 0x500, 0x3, 0x200, r8}) [ 528.919274][T20746] binder: 20742:20746 ioctl c018620c 20000600 returned -22 18:16:01 executing program 4: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000300)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x1011c0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r7 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) r8 = openat$cgroup_procs(r6, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000280), 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8000) write$cgroup_int(r7, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000100)={0x5, 0x2, 0x1}) [ 529.014820][ T26] audit: type=1804 audit(1573755361.087:68): pid=20845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir534009452/syzkaller.U9td29/120/file0" dev="sda1" ino=17077 res=1 18:16:01 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x48000000, 0x0, 0x0, 0x0, 0x0}) [ 529.097684][T20850] UHID_CREATE from different security context by process 460 (syz-executor.0), this is not allowed. [ 529.112147][ T7662] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/1 [ 529.150578][ T7662] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 [ 529.271472][ T7662] hid-generic 0000:0000:0000.0002: item fetching failed at offset 0/1 [ 529.295760][T20867] binder: 20863:20867 ioctl c018620c 20000600 returned -22 [ 529.308001][ T7662] hid-generic: probe of 0000:0000:0000.0002 failed with error -22 [ 529.360146][T20860] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 529.423519][T20860] CPU: 0 PID: 20860 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0 [ 529.431503][T20860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 529.441663][T20860] Call Trace: [ 529.444963][T20860] dump_stack+0x11d/0x181 [ 529.449438][T20860] dump_header+0xaa/0x449 [ 529.453773][T20860] oom_kill_process.cold+0x10/0x15 [ 529.458892][T20860] out_of_memory+0x231/0xa00 [ 529.463569][T20860] mem_cgroup_out_of_memory+0x128/0x150 [ 529.469115][T20860] try_charge+0xb5c/0xbe0 [ 529.473504][T20860] mem_cgroup_try_charge+0xd2/0x260 [ 529.478736][T20860] mem_cgroup_try_charge_delay+0x3a/0x80 [ 529.484490][T20860] __handle_mm_fault+0x17ab/0x2c70 [ 529.489645][T20860] handle_mm_fault+0x21b/0x530 [ 529.494396][T20860] __do_page_fault+0x3fb/0x9e0 [ 529.499154][T20860] do_page_fault+0x54/0x233 [ 529.503763][T20860] ? do_syscall_64+0x270/0x370 [ 529.508547][T20860] page_fault+0x34/0x40 [ 529.512684][T20860] RIP: 0033:0x411a0f [ 529.516606][T20860] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 529.536204][T20860] RSP: 002b:00007ffc6887d360 EFLAGS: 00010206 [ 529.542326][T20860] RAX: 00007f11005a4000 RBX: 0000000000020000 RCX: 000000000045a26a [ 529.550276][T20860] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 529.558257][T20860] RBP: 00007ffc6887d440 R08: ffffffffffffffff R09: 0000000000000000 [ 529.566207][T20860] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6887d530 18:16:01 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x48780200, 0x0, 0x0, 0x0, 0x0}) 18:16:01 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x119) write$P9_RREADLINK(r1, &(0x7f0000000240)=ANY=[], 0xfe76) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) execve(&(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)=[&(0x7f0000000040)='/dev/uhid\x00', &(0x7f0000000080)='/dev/uhid\x00', &(0x7f00000000c0)='/dev/uhid\x00', &(0x7f0000000100)='/dev/uhid\x00', &(0x7f0000000180)='/dev/uhid\x00', &(0x7f0000000200)='/dev/uhid\x00', &(0x7f0000000240)='/dev/uhid\x00', &(0x7f0000000280)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='#{\x00', &(0x7f0000000340)='^\x00', &(0x7f0000000380)='(}*(%{trustedem1security:\x00']) [ 529.574158][T20860] R13: 00007f11005c4700 R14: 0000000000000001 R15: 000000000075bfd4 [ 529.675281][T20977] binder: 20975:20977 ioctl c018620c 20000600 returned -22 [ 529.713973][T20860] memory: usage 16944kB, limit 0kB, failcnt 8 [ 529.724707][T20860] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 529.782905][T20752] FAT-fs (loop1): bogus number of reserved sectors [ 529.789776][T20752] FAT-fs (loop1): Can't find a valid FAT filesystem [ 529.797938][T20860] Memory cgroup stats for /syz4: [ 529.798581][T20860] anon 15663104 [ 529.798581][T20860] file 159744 [ 529.798581][T20860] kernel_stack 110592 [ 529.798581][T20860] slab 761856 [ 529.798581][T20860] sock 0 [ 529.798581][T20860] shmem 0 [ 529.798581][T20860] file_mapped 0 [ 529.798581][T20860] file_dirty 0 [ 529.798581][T20860] file_writeback 0 [ 529.798581][T20860] anon_thp 14680064 [ 529.798581][T20860] inactive_anon 0 [ 529.798581][T20860] active_anon 15577088 [ 529.798581][T20860] inactive_file 135168 [ 529.798581][T20860] active_file 0 [ 529.798581][T20860] unevictable 0 [ 529.798581][T20860] slab_reclaimable 270336 [ 529.798581][T20860] slab_unreclaimable 491520 [ 529.798581][T20860] pgfault 10560 [ 529.798581][T20860] pgmajfault 0 [ 529.798581][T20860] workingset_refault 0 [ 529.798581][T20860] workingset_activate 0 [ 529.798581][T20860] workingset_nodereclaim 0 18:16:01 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x4c000000, 0x0, 0x0, 0x0, 0x0}) 18:16:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f0000000080)={0x5, 0xc0, 0x9}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:16:01 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x1, 0x3, 0x4, 0x20000, {}, {0xfc53e35278c00653, 0xc, 0x3f, 0xad, 0x8, 0x7, "01d7b535"}, 0x5, 0x1, @planes=&(0x7f0000000080)={0xfffffffe, 0x4, @userptr=0x2, 0x2}, 0x4}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) [ 529.798581][T20860] pgrefill 66 [ 529.798581][T20860] pgscan 71 [ 529.798581][T20860] pgsteal 0 [ 529.798581][T20860] pgactivate 33 [ 529.902967][T20860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=9361,uid=0 [ 529.919255][T20860] Memory cgroup out of memory: Killed process 9361 (syz-executor.4) total-vm:72848kB, anon-rss:4272kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 529.943016][T20864] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 529.957215][T20864] CPU: 0 PID: 20864 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0 [ 529.965117][T20864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 529.975171][T20864] Call Trace: [ 529.978462][T20864] dump_stack+0x11d/0x181 [ 529.982798][T20864] dump_header+0xaa/0x449 [ 529.987147][T20864] oom_kill_process.cold+0x10/0x15 [ 529.992274][T20864] out_of_memory+0x231/0xa00 [ 529.996878][T20864] mem_cgroup_out_of_memory+0x128/0x150 [ 530.002443][T20864] memory_max_write+0x17b/0x250 [ 530.007317][T20864] cgroup_file_write+0x119/0x320 [ 530.012259][T20864] ? high_work_func+0x30/0x30 [ 530.016934][T20864] ? kernfs_get_active+0x9b/0xd0 [ 530.021876][T20864] kernfs_fop_write+0x1f4/0x2e0 [ 530.026727][T20864] ? cgroup_css.part.0+0x90/0x90 [ 530.031675][T20864] __vfs_write+0x67/0xc0 [ 530.035911][T20864] ? kernfs_seq_show+0xe0/0xe0 [ 530.040681][T20864] vfs_write+0x18a/0x390 [ 530.044934][T20864] ksys_write+0xd5/0x1b0 [ 530.049193][T20864] __x64_sys_write+0x4c/0x60 [ 530.053795][T20864] do_syscall_64+0xcc/0x370 [ 530.058309][T20864] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.064252][T20864] RIP: 0033:0x45a219 [ 530.067360][T21082] FAT-fs (loop1): bogus number of reserved sectors [ 530.068168][T20864] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 530.079702][T21094] binder: 21090:21094 ioctl c018620c 20000600 returned -22 [ 530.094239][T20864] RSP: 002b:00007f11005e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 530.094256][T20864] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 530.094265][T20864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 530.094275][T20864] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 530.094286][T20864] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11005e56d4 [ 530.094296][T20864] R13: 00000000004cab4b R14: 00000000004e3000 R15: 00000000ffffffff [ 530.164449][T21082] FAT-fs (loop1): Can't find a valid FAT filesystem 18:16:02 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000481, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000040)) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) r5 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000000080)=0x2, 0x8b, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000008ff8)=0x3f) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0xfffffffffffffffe, 0x0) fcntl$setsig(r6, 0xa, 0x12) recvmsg(r7, &(0x7f0000000240)={0x0, 0x11e, 0x0, 0x0, 0x0, 0xfffffd17}, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f00000003c0)=r5) r8 = gettid() tkill(r8, 0x16) sendto$packet(r1, &(0x7f0000000300)='\x00', 0x1, 0x3ffffff, 0x0, 0x0) [ 530.247944][T20864] memory: usage 12540kB, limit 0kB, failcnt 16 [ 530.256358][T20864] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 530.263741][T20864] Memory cgroup stats for /syz4: [ 530.265082][T20864] anon 11272192 [ 530.265082][T20864] file 159744 [ 530.265082][T20864] kernel_stack 110592 [ 530.265082][T20864] slab 761856 [ 530.265082][T20864] sock 0 [ 530.265082][T20864] shmem 0 [ 530.265082][T20864] file_mapped 0 [ 530.265082][T20864] file_dirty 0 [ 530.265082][T20864] file_writeback 0 [ 530.265082][T20864] anon_thp 10485760 [ 530.265082][T20864] inactive_anon 0 [ 530.265082][T20864] active_anon 11272192 [ 530.265082][T20864] inactive_file 135168 [ 530.265082][T20864] active_file 0 [ 530.265082][T20864] unevictable 0 [ 530.265082][T20864] slab_reclaimable 270336 [ 530.265082][T20864] slab_unreclaimable 491520 [ 530.265082][T20864] pgfault 10560 [ 530.265082][T20864] pgmajfault 0 [ 530.265082][T20864] workingset_refault 0 [ 530.265082][T20864] workingset_activate 0 [ 530.265082][T20864] workingset_nodereclaim 0 18:16:02 executing program 0: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000640)='./file0/file0\x00', 0x1) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200000, 0x0) signalfd4(r4, &(0x7f0000000100)={0x8}, 0x8, 0x400) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') 18:16:02 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) mkdirat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000009c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000005aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dd5dcc93508551e3166a3b88dff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c587c5db4ecaf4ad2dca0c8983bac03b390ae9c03d76f93d7b27dedd9f95e317d2b57eae278aa72d2d039425a449126529aaac0e2a11a3f14b45f208644943d5aeeea569b70a06a984e5c97fbfd4b5a4ab5c836b997ad9b2d95c0f98a6020000000000000046931ad93bd000233b1aa2b4ef004cada744ed258ca8eb243592000de583ccd0c46aa47ea2bd354e574ede079fce8a058210f4d4a7c1825973f886426e56c31e84fba623a0df8b5db9c79b1fc37606786b963081cc5dfca933ad8ff2c162f3ea6036582d6cb6d8ada93b937b87ac0d24578591f6186cdb94ba3e2fd8ea04b06e38309d082fccd02459856897f35090b55babb41617da4048e322f78272ef52c0305cbe2971fcbb7247fa5e5a69e559a06c2813e403b680f5df5ef845c7c76ed653c3ab4356781c2607faa735910cf7f3fb79f29a533e08e4d1ad3ee387b42f8662a62a54b44a88345149184aa6a33fb8a25a090de086f5b987d48fc697444147ee4f41e26df3acfaa17f3c7ebe1fa6e2fe94a7a80fe0d3aa1a89252691a38ccab5a4ab14c99945fc0f8781ac3b2b37ff5d242a2fa8855505cd78e9f38f99c68e59c088498555cd15ded6fd1a902fe9979696cbcc6f0e27597b0c17bdec3fab2a0b0b4328d2753a8b0bafd2d90e8ed02a8eacd49a36653e3ab74583ee79e21c47b0161630d090b4939e524d2b3da9090a8d418bc48d9d96eba8e8af30dd442c2c00cddd59cb19e129cdcdcd69f951fcc6fe"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x1c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000540)={{0x2, 0x4e20, @remote}, {0x7, @local}, 0x46, {0x2, 0x4e20, @empty}, 'caif0\x00'}) preadv(r1, &(0x7f00000017c0), 0xbe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f00000006c0)) syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x1, 0x1, &(0x7f0000000400)=[{&(0x7f00000003c0)="3058bd8c9ce7c11ec2f6be8848811cc73dbadbfe9f88362da523dd65c701dc1dfb90ced3589cfb7f8b970558e223", 0x2e, 0x2}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001500)={@mcast2, 0x51, r8}) poll(&(0x7f0000000240)=[{r6}], 0x1, 0x0) r9 = getegid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r9, r10, r11) r12 = getegid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r12, r13, r14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r16, 0x0, r15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r18, 0x0, r17) getresuid(&(0x7f00000000c0), &(0x7f00000004c0), &(0x7f0000000500)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r20, 0x605, r19) fchown(r19, r7, r14) [ 530.265082][T20864] pgrefill 66 [ 530.265082][T20864] pgscan 71 [ 530.265082][T20864] pgsteal 0 [ 530.265082][T20864] pgactivate 33 18:16:02 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) mkdirat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x1c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000540)={{0x2, 0x4e20, @remote}, {0x7, @local}, 0x46, {0x2, 0x4e20, @empty}, 'caif0\x00'}) preadv(r1, &(0x7f00000017c0), 0xbe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f00000006c0)) syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x1, 0x1, &(0x7f0000000400)=[{&(0x7f00000003c0)="3058bd8c9ce7c11ec2f6be8848811cc73dbadbfe9f88362da523dd65c701dc1dfb90ced3589cfb7f8b970558e223", 0x2e, 0x2}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001500)={@mcast2, 0x51, r8}) poll(&(0x7f0000000240)=[{r6}], 0x1, 0x0) r9 = getegid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r9, r10, r11) r12 = getegid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r12, r13, r14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r16, 0x0, r15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r18, 0x0, r17) getresuid(&(0x7f00000000c0), &(0x7f00000004c0), &(0x7f0000000500)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r20, 0x605, r19) fchown(r19, r7, r14) [ 530.422449][T20864] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14472,uid=0 [ 530.506677][T20864] Memory cgroup out of memory: Killed process 14472 (syz-executor.4) total-vm:72848kB, anon-rss:2224kB, file-rss:35860kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 530.590794][T20860] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 530.609136][T20860] CPU: 1 PID: 20860 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0 [ 530.617063][T20860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.627113][T20860] Call Trace: [ 530.630407][T20860] dump_stack+0x11d/0x181 [ 530.634748][T20860] dump_header+0xaa/0x449 [ 530.639094][T20860] oom_kill_process.cold+0x10/0x15 [ 530.644217][T20860] out_of_memory+0x231/0xa00 [ 530.648897][T20860] mem_cgroup_out_of_memory+0x128/0x150 [ 530.654448][T20860] try_charge+0xb5c/0xbe0 [ 530.658794][T20860] mem_cgroup_try_charge+0xd2/0x260 [ 530.664051][T20860] mem_cgroup_try_charge_delay+0x3a/0x80 [ 530.669749][T20860] __handle_mm_fault+0x17ab/0x2c70 [ 530.674959][T20860] handle_mm_fault+0x21b/0x530 [ 530.679736][T20860] __do_page_fault+0x3fb/0x9e0 [ 530.684513][T20860] do_page_fault+0x54/0x233 [ 530.689112][T20860] ? do_syscall_64+0x270/0x370 [ 530.693952][T20860] page_fault+0x34/0x40 [ 530.698184][T20860] RIP: 0033:0x411a0f [ 530.702171][T20860] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 530.721844][T20860] RSP: 002b:00007ffc6887d360 EFLAGS: 00010206 [ 530.727928][T20860] RAX: 00007f11005a4000 RBX: 0000000000020000 RCX: 000000000045a26a [ 530.735915][T20860] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 530.743887][T20860] RBP: 00007ffc6887d440 R08: ffffffffffffffff R09: 0000000000000000 [ 530.751859][T20860] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6887d530 [ 530.759828][T20860] R13: 00007f11005c4700 R14: 0000000000000001 R15: 000000000075bfd4 [ 530.774043][T20860] memory: usage 10180kB, limit 0kB, failcnt 16 [ 530.780298][T20860] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 530.789634][T20860] Memory cgroup stats for /syz4: [ 530.789907][T20860] anon 9068544 [ 530.789907][T20860] file 159744 [ 530.789907][T20860] kernel_stack 110592 [ 530.789907][T20860] slab 761856 [ 530.789907][T20860] sock 0 [ 530.789907][T20860] shmem 0 [ 530.789907][T20860] file_mapped 0 [ 530.789907][T20860] file_dirty 0 [ 530.789907][T20860] file_writeback 0 [ 530.789907][T20860] anon_thp 8388608 [ 530.789907][T20860] inactive_anon 0 [ 530.789907][T20860] active_anon 9068544 [ 530.789907][T20860] inactive_file 135168 [ 530.789907][T20860] active_file 0 [ 530.789907][T20860] unevictable 0 [ 530.789907][T20860] slab_reclaimable 270336 [ 530.789907][T20860] slab_unreclaimable 491520 [ 530.789907][T20860] pgfault 10560 [ 530.789907][T20860] pgmajfault 0 [ 530.789907][T20860] workingset_refault 0 [ 530.789907][T20860] workingset_activate 0 [ 530.789907][T20860] workingset_nodereclaim 0 [ 530.789907][T20860] pgrefill 66 [ 530.789907][T20860] pgscan 71 [ 530.789907][T20860] pgsteal 0 [ 530.789907][T20860] pgactivate 33 [ 530.888955][T20860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14269,uid=0 [ 530.907808][T20860] Memory cgroup out of memory: Killed process 14269 (syz-executor.4) total-vm:72980kB, anon-rss:2232kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 530.996157][T20864] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 531.020009][T20864] CPU: 1 PID: 20864 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0 [ 531.027921][T20864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.037967][T20864] Call Trace: [ 531.041260][T20864] dump_stack+0x11d/0x181 [ 531.045598][T20864] dump_header+0xaa/0x449 [ 531.049936][T20864] oom_kill_process.cold+0x10/0x15 [ 531.055059][T20864] out_of_memory+0x231/0xa00 [ 531.059660][T20864] mem_cgroup_out_of_memory+0x128/0x150 [ 531.065228][T20864] memory_max_write+0x17b/0x250 [ 531.070092][T20864] cgroup_file_write+0x119/0x320 [ 531.075045][T20864] ? high_work_func+0x30/0x30 [ 531.079727][T20864] ? kernfs_get_active+0x9b/0xd0 [ 531.084669][T20864] kernfs_fop_write+0x1f4/0x2e0 [ 531.089528][T20864] ? cgroup_css.part.0+0x90/0x90 [ 531.094475][T20864] __vfs_write+0x67/0xc0 [ 531.098717][T20864] ? kernfs_seq_show+0xe0/0xe0 [ 531.103486][T20864] vfs_write+0x18a/0x390 [ 531.107726][T20864] ksys_write+0xd5/0x1b0 [ 531.111974][T20864] __x64_sys_write+0x4c/0x60 [ 531.116571][T20864] do_syscall_64+0xcc/0x370 [ 531.121079][T20864] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.126970][T20864] RIP: 0033:0x45a219 [ 531.130870][T20864] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 531.150474][T20864] RSP: 002b:00007f11005e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 531.158890][T20864] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 531.166862][T20864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 531.174832][T20864] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 531.182807][T20864] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11005e56d4 [ 531.190777][T20864] R13: 00000000004cab4b R14: 00000000004e3000 R15: 00000000ffffffff [ 531.225246][T21215] FAT-fs (loop1): bogus number of reserved sectors [ 531.271524][T21215] FAT-fs (loop1): Can't find a valid FAT filesystem [ 531.285791][T20864] memory: usage 7824kB, limit 0kB, failcnt 22 [ 531.296369][T20864] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 531.313442][T20864] Memory cgroup stats for /syz4: [ 531.315703][T20864] anon 6819840 [ 531.315703][T20864] file 159744 [ 531.315703][T20864] kernel_stack 110592 [ 531.315703][T20864] slab 761856 [ 531.315703][T20864] sock 0 [ 531.315703][T20864] shmem 0 [ 531.315703][T20864] file_mapped 0 [ 531.315703][T20864] file_dirty 0 [ 531.315703][T20864] file_writeback 0 [ 531.315703][T20864] anon_thp 6291456 [ 531.315703][T20864] inactive_anon 0 [ 531.315703][T20864] active_anon 6819840 [ 531.315703][T20864] inactive_file 135168 [ 531.315703][T20864] active_file 0 [ 531.315703][T20864] unevictable 0 [ 531.315703][T20864] slab_reclaimable 270336 [ 531.315703][T20864] slab_unreclaimable 491520 [ 531.315703][T20864] pgfault 10560 [ 531.315703][T20864] pgmajfault 0 [ 531.315703][T20864] workingset_refault 0 [ 531.315703][T20864] workingset_activate 0 [ 531.315703][T20864] workingset_nodereclaim 0 [ 531.315703][T20864] pgrefill 66 [ 531.315703][T20864] pgscan 71 [ 531.315703][T20864] pgsteal 0 [ 531.315703][T20864] pgactivate 33 [ 531.416127][T20864] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20148,uid=0 [ 531.435368][T20864] Memory cgroup out of memory: Killed process 20148 (syz-executor.4) total-vm:72716kB, anon-rss:2216kB, file-rss:35820kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 531.459549][ T1068] oom_reaper: reaped process 20148 (syz-executor.4), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB [ 531.470904][T20860] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 531.511589][T20860] CPU: 1 PID: 20860 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0 [ 531.519491][T20860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.529574][T20860] Call Trace: [ 531.532871][T20860] dump_stack+0x11d/0x181 [ 531.537278][T20860] dump_header+0xaa/0x449 [ 531.541615][T20860] oom_kill_process.cold+0x10/0x15 [ 531.546764][T20860] out_of_memory+0x231/0xa00 [ 531.551438][T20860] mem_cgroup_out_of_memory+0x128/0x150 [ 531.556990][T20860] try_charge+0xb5c/0xbe0 [ 531.561331][T20860] mem_cgroup_try_charge+0xd2/0x260 [ 531.566534][T20860] mem_cgroup_try_charge_delay+0x3a/0x80 [ 531.572166][T20860] __handle_mm_fault+0x17ab/0x2c70 [ 531.577368][T20860] handle_mm_fault+0x21b/0x530 [ 531.582139][T20860] __do_page_fault+0x3fb/0x9e0 [ 531.586915][T20860] do_page_fault+0x54/0x233 [ 531.591419][T20860] ? do_syscall_64+0x270/0x370 [ 531.596218][T20860] page_fault+0x34/0x40 [ 531.600370][T20860] RIP: 0033:0x411a0f [ 531.604331][T20860] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 531.623931][T20860] RSP: 002b:00007ffc6887d360 EFLAGS: 00010206 [ 531.630047][T20860] RAX: 00007f11005a4000 RBX: 0000000000020000 RCX: 000000000045a26a [ 531.638016][T20860] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 531.645991][T20860] RBP: 00007ffc6887d440 R08: ffffffffffffffff R09: 0000000000000000 [ 531.653960][T20860] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6887d530 [ 531.661945][T20860] R13: 00007f11005c4700 R14: 0000000000000001 R15: 000000000075bfd4 [ 531.730104][T20860] memory: usage 5636kB, limit 0kB, failcnt 22 [ 531.736301][T20860] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 531.746608][T20860] Memory cgroup stats for /syz4: [ 531.746801][T20860] anon 4567040 [ 531.746801][T20860] file 159744 [ 531.746801][T20860] kernel_stack 110592 [ 531.746801][T20860] slab 761856 [ 531.746801][T20860] sock 0 [ 531.746801][T20860] shmem 0 [ 531.746801][T20860] file_mapped 0 [ 531.746801][T20860] file_dirty 0 [ 531.746801][T20860] file_writeback 0 [ 531.746801][T20860] anon_thp 4194304 [ 531.746801][T20860] inactive_anon 0 [ 531.746801][T20860] active_anon 4567040 [ 531.746801][T20860] inactive_file 135168 [ 531.746801][T20860] active_file 0 [ 531.746801][T20860] unevictable 0 [ 531.746801][T20860] slab_reclaimable 270336 [ 531.746801][T20860] slab_unreclaimable 491520 [ 531.746801][T20860] pgfault 10560 [ 531.746801][T20860] pgmajfault 0 [ 531.746801][T20860] workingset_refault 0 [ 531.746801][T20860] workingset_activate 0 [ 531.746801][T20860] workingset_nodereclaim 0 [ 531.746801][T20860] pgrefill 66 [ 531.746801][T20860] pgscan 71 [ 531.746801][T20860] pgsteal 0 [ 531.746801][T20860] pgactivate 33 [ 531.846158][T20860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14614,uid=0 [ 531.864849][T20860] Memory cgroup out of memory: Killed process 14614 (syz-executor.4) total-vm:72716kB, anon-rss:2216kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 531.908412][T20864] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 531.925989][T20864] CPU: 1 PID: 20864 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0 [ 531.933884][T20864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.943931][T20864] Call Trace: [ 531.947225][T20864] dump_stack+0x11d/0x181 [ 531.951571][T20864] dump_header+0xaa/0x449 [ 531.955912][T20864] oom_kill_process.cold+0x10/0x15 [ 531.961036][T20864] out_of_memory+0x231/0xa00 [ 531.965645][T20864] mem_cgroup_out_of_memory+0x128/0x150 [ 531.971201][T20864] memory_max_write+0x17b/0x250 [ 531.976060][T20864] cgroup_file_write+0x119/0x320 [ 531.980999][T20864] ? high_work_func+0x30/0x30 [ 531.985673][T20864] ? kernfs_get_active+0x9b/0xd0 [ 531.990607][T20864] kernfs_fop_write+0x1f4/0x2e0 [ 531.995473][T20864] ? cgroup_css.part.0+0x90/0x90 [ 532.000409][T20864] __vfs_write+0x67/0xc0 [ 532.004647][T20864] ? kernfs_seq_show+0xe0/0xe0 [ 532.009413][T20864] vfs_write+0x18a/0x390 [ 532.013660][T20864] ksys_write+0xd5/0x1b0 [ 532.017908][T20864] __x64_sys_write+0x4c/0x60 [ 532.022506][T20864] do_syscall_64+0xcc/0x370 [ 532.027021][T20864] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 532.032907][T20864] RIP: 0033:0x45a219 [ 532.036805][T20864] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 532.056409][T20864] RSP: 002b:00007f11005e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 532.064829][T20864] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 532.072798][T20864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 532.080768][T20864] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 532.088742][T20864] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11005e56d4 [ 532.096714][T20864] R13: 00000000004cab4b R14: 00000000004e3000 R15: 00000000ffffffff [ 532.156844][T20864] memory: usage 3132kB, limit 0kB, failcnt 30 [ 532.163073][T20864] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 532.169966][T20864] Memory cgroup stats for /syz4: [ 532.171096][T20864] anon 2326528 [ 532.171096][T20864] file 159744 [ 532.171096][T20864] kernel_stack 73728 [ 532.171096][T20864] slab 761856 [ 532.171096][T20864] sock 0 [ 532.171096][T20864] shmem 0 [ 532.171096][T20864] file_mapped 0 [ 532.171096][T20864] file_dirty 0 [ 532.171096][T20864] file_writeback 0 [ 532.171096][T20864] anon_thp 2097152 [ 532.171096][T20864] inactive_anon 0 [ 532.171096][T20864] active_anon 2326528 [ 532.171096][T20864] inactive_file 135168 [ 532.171096][T20864] active_file 0 [ 532.171096][T20864] unevictable 0 [ 532.171096][T20864] slab_reclaimable 270336 [ 532.171096][T20864] slab_unreclaimable 491520 [ 532.171096][T20864] pgfault 10560 [ 532.171096][T20864] pgmajfault 0 [ 532.171096][T20864] workingset_refault 0 [ 532.171096][T20864] workingset_activate 0 [ 532.171096][T20864] workingset_nodereclaim 0 [ 532.171096][T20864] pgrefill 66 [ 532.171096][T20864] pgscan 71 [ 532.171096][T20864] pgsteal 0 [ 532.171096][T20864] pgactivate 33 [ 532.266131][T20864] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20860,uid=0 [ 532.281960][T20864] Memory cgroup out of memory: Killed process 20864 (syz-executor.4) total-vm:72716kB, anon-rss:2212kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 532.302320][ T1068] oom_reaper: reaped process 20864 (syz-executor.4), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 532.302859][ T7664] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 532.323291][ T7664] CPU: 1 PID: 7664 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0 [ 532.331093][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.341235][ T7664] Call Trace: [ 532.344529][ T7664] dump_stack+0x11d/0x181 [ 532.348946][ T7664] dump_header+0xaa/0x449 [ 532.353322][ T7664] oom_kill_process.cold+0x10/0x15 [ 532.358439][ T7664] out_of_memory+0x231/0xa00 [ 532.363046][ T7664] mem_cgroup_out_of_memory+0x128/0x150 [ 532.368668][ T7664] try_charge+0xb5c/0xbe0 [ 532.373070][ T7664] mem_cgroup_try_charge+0xd2/0x260 [ 532.378271][ T7664] mem_cgroup_try_charge_delay+0x3a/0x80 [ 532.383971][ T7664] wp_page_copy+0x322/0x1120 [ 532.388609][ T7664] ? __read_once_size+0x41/0xe0 [ 532.393466][ T7664] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 532.399362][ T7664] do_wp_page+0x192/0x11f0 [ 532.403834][ T7664] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 532.410175][ T7664] __handle_mm_fault+0x1ab1/0x2c70 [ 532.415308][ T7664] handle_mm_fault+0x21b/0x530 [ 532.420079][ T7664] __do_page_fault+0x3fb/0x9e0 [ 532.424951][ T7664] do_page_fault+0x54/0x233 [ 532.429459][ T7664] ? prepare_exit_to_usermode+0x154/0x1a0 [ 532.435186][ T7664] page_fault+0x34/0x40 [ 532.439335][ T7664] RIP: 0033:0x4312fa [ 532.443267][ T7664] Code: 48 29 e8 31 c9 48 81 fb 40 76 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 ec 59 64 00 85 c0 0f 84 3a f7 ff ff [ 532.462866][ T7664] RSP: 002b:00007ffc6887d460 EFLAGS: 00010206 [ 532.468949][ T7664] RAX: 0000000000018691 RBX: 0000000000717640 RCX: 0000000000008041 [ 532.477083][ T7664] RDX: 0000000000cc2930 RSI: 0000000000cca970 RDI: 0000000000000003 [ 532.485051][ T7664] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000000cc1940 [ 532.493015][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000717698 [ 532.500981][ T7664] R13: 0000000000717698 R14: 00000000000812d6 R15: 0000000000002710 [ 532.510593][ T7664] memory: usage 792kB, limit 0kB, failcnt 38 [ 532.516656][ T7664] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 532.523528][ T7664] Memory cgroup stats for /syz4: [ 532.523651][ T7664] anon 110592 [ 532.523651][ T7664] file 159744 [ 532.523651][ T7664] kernel_stack 36864 [ 532.523651][ T7664] slab 761856 [ 532.523651][ T7664] sock 0 [ 532.523651][ T7664] shmem 0 [ 532.523651][ T7664] file_mapped 0 [ 532.523651][ T7664] file_dirty 0 [ 532.523651][ T7664] file_writeback 0 [ 532.523651][ T7664] anon_thp 0 [ 532.523651][ T7664] inactive_anon 0 [ 532.523651][ T7664] active_anon 110592 [ 532.523651][ T7664] inactive_file 135168 [ 532.523651][ T7664] active_file 0 [ 532.523651][ T7664] unevictable 0 [ 532.523651][ T7664] slab_reclaimable 270336 [ 532.523651][ T7664] slab_unreclaimable 491520 [ 532.523651][ T7664] pgfault 10593 [ 532.523651][ T7664] pgmajfault 0 [ 532.523651][ T7664] workingset_refault 0 [ 532.523651][ T7664] workingset_activate 0 [ 532.523651][ T7664] workingset_nodereclaim 0 [ 532.523651][ T7664] pgrefill 66 [ 532.523651][ T7664] pgscan 71 [ 532.523651][ T7664] pgsteal 0 [ 532.523651][ T7664] pgactivate 33 [ 532.617891][ T7664] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=7664,uid=0 [ 532.633294][ T7664] Memory cgroup out of memory: Killed process 7664 (syz-executor.4) total-vm:72452kB, anon-rss:116kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 532.651536][ T1068] oom_reaper: reaped process 7664 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 533.621920][ T7816] bridge0: port 3(gretap0) entered disabled state [ 533.630112][ T7816] device gretap0 left promiscuous mode [ 533.635622][ T7816] bridge0: port 3(gretap0) entered disabled state [ 534.205396][ T7816] device bridge_slave_1 left promiscuous mode [ 534.211592][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.262302][ T7816] device bridge_slave_0 left promiscuous mode [ 534.268519][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.071811][ T7816] device hsr_slave_0 left promiscuous mode [ 535.141759][ T7816] device hsr_slave_1 left promiscuous mode [ 535.188801][ T7816] team0 (unregistering): Port device team_slave_1 removed [ 535.198922][ T7816] team0 (unregistering): Port device team_slave_0 removed [ 535.209548][ T7816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.265842][ T7816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.332070][ T7816] bond0 (unregistering): Released all slaves 18:16:10 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) mkdirat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x1c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000540)={{0x2, 0x4e20, @remote}, {0x7, @local}, 0x46, {0x2, 0x4e20, @empty}, 'caif0\x00'}) preadv(r1, &(0x7f00000017c0), 0xbe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f00000006c0)) syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x1, 0x1, &(0x7f0000000400)=[{&(0x7f00000003c0)="3058bd8c9ce7c11ec2f6be8848811cc73dbadbfe9f88362da523dd65c701dc1dfb90ced3589cfb7f8b970558e223", 0x2e, 0x2}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001500)={@mcast2, 0x51, r8}) poll(&(0x7f0000000240)=[{r6}], 0x1, 0x0) r9 = getegid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r9, r10, r11) r12 = getegid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r12, r13, r14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r16, 0x0, r15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r18, 0x0, r17) getresuid(&(0x7f00000000c0), &(0x7f00000004c0), &(0x7f0000000500)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r20, 0x605, r19) fchown(r19, r7, r14) 18:16:10 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x60000000, 0x0, 0x0, 0x0, 0x0}) 18:16:10 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(0x0, 0x0, 0x8000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) getresuid(&(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400)) getpid() getpgrp(0x0) getpid() syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, 0x0) fstat(r3, &(0x7f0000000700)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x14, 0xffffffff, 0x7, 0x6, 0x90, r2, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c) getresuid(&(0x7f00000004c0), 0x0, &(0x7f0000000540)) r7 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000000000)={{0x1b31}}) syz_open_dev$sndseq(0x0, 0x0, 0x0) getresuid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}}) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet(0x2, 0x6, 0x20) getgid() r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000240), &(0x7f0000000280)) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)={0x14, 0x0, 0x7, 0x6, 0x90, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x3c) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}}) r13 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) r14 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x1b31}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f0000000500)=[{&(0x7f00000043c0)=ANY=[@ANYBLOB="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"], 0x1}, {&(0x7f0000000980)={0x184, 0x13, 0x200, 0x0, 0x25dfdbfd, "", [@generic="bc354e60e44dc70c53dce8", @typed={0x8, 0x81, @str='\x00'}, @generic, @typed={0x8, 0x75, @uid=r10}, @generic="6b1d789c552953e59a9dcfc72054ab00b4acdd337f213b2a", @typed={0xc, 0x79, @u64}, @typed={0x48, 0x15, @binary="4d065cdb41569ef12786a0b6896efa741390d6ee6de61b7e26f59366e061f0e5210086fd3b0a1ec57d9d762dc69954ad66ea365ba9a44592546b443a28c8359ab8"}, @nested={0xec, 0x40, [@typed={0x8, 0x3a, @pid}, @generic, @generic="200bdefa4975546e", @typed={0x8, 0x0, @ipv4=@rand_addr=0x6}, @typed={0x8, 0x77, @u32=0x2}, @typed={0xc, 0x44, @u64=0x3}, @typed={0x8, 0x68, @fd}, @generic="1ffc4d96b0da5d28999112cdda42e874bc23bf5508691e7c35586ab510f7d76ea3f87fbdb2267d8b514a9f4444b05970ac313873d018178ac4a68a5263323e2e322cb7d465d0bc27978aa02c3a684c62d1eb6b7770ae05d7d4c3664dda440e12249324adc2d079b2a62a8a10c7a6e39c7c0f8958e87d5386a8c9ebe67e260d6d7fbe1e26045137961ab18fe22fffdd63de3224f1b430f4a9ac2226f6acc996af5a24159af4b59296022eb33c0da0e67d1b"]}]}, 0x184}, {&(0x7f0000000c40)={0x324, 0x27, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@generic="cc1afbdc740d6fa8de817d3dc60dd3e5923fe0333931b4f2e350642fc54a4ee60bcff7bbad7773063914604a527daa72df5d6c27a01ce83dd3e9c42458f3648c6c94b820e2634d6c5c5a8889fd12ae6e1ad971f94f81d23aaf9a1d918b473ef6256106dc77ed18940f91fbbdcce5c4ba39cbebe30bddfffc", @generic="204797b44abf415935bc3c829ec00ffcf413dfa35a93abce8831c110db698d9c97ca596b26b0e0d7a84458277da98719eb160511fea33e81f340bfb62cc35bcf1df0a6934fb507f7f2f4767df07595200f74a63dee582829865fb94e18917fde268d1645292fa2ade3160e510bbbc043b86b8c2ae4aea288fd9920af32d61916e66d8deeec8bebc24d1fa0ba3bd894156a003f61c254d3a8f67b3f3bb759fa2f223dd72bcdf739885fa052f57ef089266cd961bc1246f3f4a31ea2", @generic="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", @nested={0xd4, 0x94, [@typed={0x8, 0x34, @uid=r11}, @generic="d1c9607b10cf3582ef7cb344c52ff9b98887cac12ea48d896fe73d8a07bdec4bb3298c8c70f7514c88a5ae445e6059189502b50c22eeb77bcfe5d9ca996bf306284a8bfc0fa222650df6d420b928d9b0037948a40f18ace0a057c304755ef28e799a01d123f91c324f9765b1035b6d5d59054e4ec77fedef85effe38d884896553c0431b6ea4a99de15892a83ea5ffcc22832fd2459a265b3aaf3922b259f9c4f983873c87124aac359da59dbe3a7db30c7ffef4748a52d7", @typed={0x8, 0x4a, @u32=0x7}, @typed={0x8, 0x48, @ipv4=@local}]}, @typed={0xc, 0x92, @u64=0x7104573}, @typed={0x4, 0x7e}]}, 0x324}, {}, {&(0x7f0000003c80)=ANY=[@ANYBLOB, @ANYRES32=r9], 0x2}], 0x5, &(0x7f00000040c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r13, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, r14, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140, 0x20000000}, 0x10000011) syz_open_dev$mouse(0x0, 0x0, 0x8000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000500), 0x0) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x8000) r15 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r15, 0x40045564, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400)) lstat(0x0, &(0x7f0000000680)) getpid() syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) io_uring_setup(0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) getpid() syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) 18:16:10 executing program 1: socket$kcm(0x10, 0x2, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4480, 0x0) close(r0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000004c0), &(0x7f0000000500)=0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='vlan0\x00', 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) syz_open_dev$vcsa(0x0, 0x7, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) accept$alg(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000240)}, 0x3}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f00000007c0)=""/163, 0xa3}, {0x0}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f0000000a00)=""/213, 0xd5}, {&(0x7f00000003c0)=""/60, 0x3c}], 0x7, &(0x7f0000000b00)=""/200, 0xc8}, 0x773}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000c80)=""/104, 0x68}, {&(0x7f0000000d00)=""/212, 0xd4}], 0x2, &(0x7f0000001380)=""/175, 0xaf}, 0x800}, {{&(0x7f0000000ec0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000f40)=""/151, 0x97}, {&(0x7f0000001000)=""/45, 0x2d}, {&(0x7f0000001040)=""/95, 0x5f}, {&(0x7f00000010c0)=""/30, 0x1e}, {&(0x7f0000001100)=""/188, 0xbc}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001440)=""/201, 0xc9}, {&(0x7f0000002380)=""/77, 0x4d}], 0x8, &(0x7f0000002480)=""/105, 0x69}, 0x4}, {{&(0x7f0000002500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002580)=""/28, 0x1c}, {&(0x7f00000028c0)=""/77, 0x4d}, {0x0}], 0x3, &(0x7f0000002b00)=""/245, 0xf5}, 0x8}], 0x5, 0xf3b6ccdc400cd531, &(0x7f0000002d40)={0x0, 0x989680}) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000002d80)) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x3, 0x2, 0x400}, 0xc) fcntl$setstatus(r4, 0x4, 0x42000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 18:16:10 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd93cb94a01fc10ae, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) r1 = perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x20, 0x0, 0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x20, 0xfffffffffffff264, 0xe87, 0x3ff, 0x8, 0xffff, 0xff, 0x0, 0x3, 0x2, 0x9, 0x1, 0xffffffffffffff71, 0x9, 0x0, 0x3f, 0xa, 0xffffffffffff6276, 0x0, 0xfffffffffffffff7, 0x4, 0xb89, 0x0, 0x56e, 0x9, 0x0, 0x0, 0x450, 0x0, 0x6, 0x0, @perf_config_ext, 0x2010, 0xb8, 0x7, 0xf, 0xffff, 0x23}, r0, 0x9, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) close(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x6, @perf_bp={0x0}, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0xfffffffffffffed0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) time(0x0) open(&(0x7f0000000200)='./file0\x00', 0x10081, 0xa1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r6 = epoll_create1(0x0) sendfile(r4, r2, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000040)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000140)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000040)) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000040)) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000140)={0x20000008}) 18:16:10 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x14902, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='threaded\x00', 0xfea4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='threaded\x00', 0x9) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000580), 0x1000) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000019c0)={{{@in6=@mcast1, @in=@loopback}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x5, &(0x7f0000001880)=[{&(0x7f0000000600)="46f3d212b954e0698cae9943d8d36cd84c9b8a1622295183e222e78bd5fa26b4ad2e1e4d26581e68d0ab122e44fcda2228484d51fac71809119f7164b8811435fb34c353fd1748d2259c0e06f2c5140ed4600a7592842194b6925df52ef2", 0x5e, 0x97}, {&(0x7f0000000680)="35ed99a253e7de6a586593b159fb3f349d532e899efe5503c065e2907b76605445ed3fca5cd69db882736a5e827341a96445be0513665d242ad39e0da4f2ee8ef026dfd94844b59ac43b14f9f5d48992421c4c4a0c3d5f8260b4039a42694cc49e3829778c3c4f3e478e3bfb4922cdd8d08511c9b9d996e3405b5518c69c174e777f02daa05f38c3885e4feefdcfef79e8ccb42f767d41621668f3482f8c9a3e2832324dbb0de8526fd85652c78d544f2c51dcb6abed5cb9a2d6303c68", 0xbd, 0x1}, {&(0x7f0000000740)="04e8a78c3fa417c23b2474e5a6326d0a7cd769d7393841f893efca2f22b3c5d0c33f8686df98578bdd904f74eb9cfff594f8a904e2bb5df118b6d36fca84e1d10848487d9ea57027a785cc5d3d862fd309a92838baaab449ca19f441862cfaf7f4d84266b558f356138626d545a7d0350caca2cbe7a4c794125eb7235cbcc83ad71e", 0x82, 0x100000002}, {&(0x7f0000000800)="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", 0x1000, 0x9}, {&(0x7f0000001800)="ca452e5705ce123f61e54b113dd66e3d46b95074848a9cab4e0a2876a1eff48e852221aef5267de2b1efe9d0f313d5680d46a42d23ac1d3424866023ce6f26de848ea8b8fae95ac87fd928a4ed6b8297dc7f27752b56e1b6d1ccb7766d2a8013a7960337b99b", 0x66, 0xffffffff80000001}], 0x20000, &(0x7f0000001b80)={[{@utf8no='utf8=0'}, {@shortname_lower='shortname=lower'}, {@nonumtail='nnonumtail=1'}], [{@obj_user={'obj_user', 0x3d, '['}}, {@subj_type={'subj_type', 0x3d, 'GPL'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@permit_directio='permit_directio'}, {@subj_type={'subj_type', 0x3d, 'GPL'}}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, &(0x7f0000000140)={"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"}) fcntl$setstatus(r1, 0x4, 0x42000) sendfile(r0, r0, 0x0, 0x8800000) [ 538.157192][T21243] binder: 21242:21243 ioctl c018620c 20000600 returned -22 [ 538.208804][ T26] audit: type=1800 audit(1573755370.277:69): pid=21251 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16509 res=0 18:16:10 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x68000000, 0x0, 0x0, 0x0, 0x0}) 18:16:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f00000001c0)) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="b7", 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x3400}], 0x1, 0x0) 18:16:10 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000000)) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='team0\x00'}) mount(&(0x7f0000000280)=ANY=[@ANYBLOB='/Tev/n9d0'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) [ 538.493430][T21359] binder: 21358:21359 ioctl c018620c 20000600 returned -22 18:16:10 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x6c000000, 0x0, 0x0, 0x0, 0x0}) [ 538.790432][T21475] binder: 21473:21475 ioctl c018620c 20000600 returned -22 18:16:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1}, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x7, 0x182) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r6, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24000000) dup2(r4, r5) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000cab000)) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @multicast1}, &(0x7f0000000300)=0xc) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000003c0)={@remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, 0x0, 0x5, 0xff, 0x300, 0x8e5d, 0x4, r8}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r10 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x7, 0x182) r11 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r11, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r10, 0x4c00, r11) sendfile(r10, r10, 0x0, 0x24000000) dup2(r9, r10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r12 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r12, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58", 0x43) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r12, 0x0) sendfile(r12, r12, &(0x7f0000000200), 0xff8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) 18:16:11 executing program 3: add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$unlink(0x9, 0x0, r3) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000240)={0x200, 0x6, 0x3}) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) [ 539.043719][T21584] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 539.043719][T21584] program syz-executor.3 not setting count and/or reply_len properly 18:16:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x30c, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x7e) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x3, 0x4}, 0xc) [ 541.215055][T21603] IPVS: ftp: loaded support on port[0] = 21 [ 541.262493][T21603] chnl_net:caif_netlink_parms(): no params data found [ 541.287474][T21603] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.294621][T21603] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.302518][T21603] device bridge_slave_0 entered promiscuous mode [ 541.309782][T21603] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.316964][T21603] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.324745][T21603] device bridge_slave_1 entered promiscuous mode [ 541.340844][T21603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.351096][T21603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.368822][T21603] team0: Port device team_slave_0 added [ 541.375537][T21603] team0: Port device team_slave_1 added [ 541.433868][T21603] device hsr_slave_0 entered promiscuous mode [ 541.472175][T21603] device hsr_slave_1 entered promiscuous mode [ 541.511613][T21603] debugfs: Directory 'hsr0' with parent '/' already present! [ 541.524908][T21603] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.531972][T21603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.539264][T21603] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.546370][T21603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.574758][T21603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.586133][ T7662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.594405][ T7662] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.602162][ T7662] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.610846][ T7662] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 541.622459][T21603] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.633430][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.642135][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.649153][ T7898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.659469][ T7662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.667933][ T7662] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.674972][ T7662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.696670][T21603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 541.707340][T21603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.720598][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 541.729465][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 541.738225][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 541.746595][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 541.754992][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 541.762876][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 541.779769][T21603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.787286][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 541.795317][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:16:16 executing program 3: msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)='M', 0x1}], 0x1}}], 0x1, 0x4801d) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0xfffffefb, 0x0}}, {{0x0, 0x269, 0x0}}], 0x2a7, 0x20033, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b07, 0x0) 18:16:16 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x74000000, 0x0, 0x0, 0x0, 0x0}) 18:16:16 executing program 0: getpid() r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0xf3d, 0x2, {0x2, @pix={0x0, 0x0, 0x34343452, 0x0, 0x20000000, 0x69b31885}}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x4, 0x686c649a, 0x1, 0x7fffffff, 0x1, @discrete={0x2}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in6={0xa, 0x4e21, 0x9, @rand_addr="0a1b2f51b6c8933779ecf55b32ff4378", 0x100}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x603, @mcast1, 0x1}, @in6={0xa, 0x0, 0x2, @mcast1}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x3}], 0xcc) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0x40045612, &(0x7f0000000580)={0x2, @pix_mp={0x400, 0x0, 0x0, 0x0, 0x6, [{0x9}]}}) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r7 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x0) ppoll(&(0x7f0000001980)=[{r7}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f0000000340)=0x4) perf_event_open(&(0x7f0000000540)={0xa8dbffa7d74f6926, 0x70, 0x69, 0xe4, 0x20, 0x0, 0x0, 0x4, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x8, @perf_config_ext={0x8, 0x4}, 0x3022, 0x9, 0x2, 0x6, 0x1b23, 0x3, 0xff01}, r6, 0xc, r7, 0x1) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r6) 18:16:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x2000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3f}]}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000400)={0x4, 0x0, [{0x40000001, 0x81, 0x0, 0x3, 0x7fff, 0x8f0d, 0x7297a9c}, {0x0, 0xe934, 0x1, 0x80000000, 0x200, 0x9, 0x6}, {0xd, 0x1, 0x4, 0x7fff, 0x0, 0x161c, 0x7}, {0xa, 0x4, 0x4, 0x7, 0x9, 0x7fffffff, 0x61de}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:16:16 executing program 5: socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c68c69002300b6674c8e4a81000000000000010000f3591007280000f30cfe80000006000000000000009ce60000480300bb400000000000008ecad0964e69f9efa5c7cea88b044343df5af7b06e09b7dd"], 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x0, 0x4000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x400029f, 0x20000080) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, 0x0, 0x40800) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000840)='./bus/file0\x00', 0x391180, 0x140) sendto$inet(r3, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8", 0xeb, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1000000000000}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x81, 0xfe, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0xa, 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x20000, r8}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000300)) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000014c0)=""/205, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 18:16:16 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x404e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x20) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) r6 = dup(r5) ioctl$BLKSECDISCARD(r6, 0x127d, &(0x7f00000001c0)=0x40) getsockopt$inet6_int(r3, 0x29, 0xc9, &(0x7f0000000040), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 544.283479][T21620] binder: 21618:21620 ioctl c018620c 20000600 returned -22 18:16:16 executing program 3: socket(0x200000000000011, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) chroot(&(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') syz_open_dev$rtc(&(0x7f0000000400)='/dev/rtc#\x00', 0x0, 0x92d000) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000540)) r0 = getpid() sched_setattr(r0, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x2000, 0x3, 0xfffffffffffffffd}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') mount$fuseblk(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000240)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x0, 0xffff0001}, {0x3f}]}, 0x14, 0x5) unlink(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r10}]]}}}]}, 0x38}}, 0x0) sendmsg$can_raw(r7, &(0x7f00000006c0)={&(0x7f0000000100)={0x1d, r10}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x40, 0x2, 0x0, 0x0, "077f3c6955111413c2dbc4d6d1fb91f6fa42223d19d6ef29fe6a30cc5f1ba8affba016b5a3908aec4c216ea7598c5b46d9ce894bc63e21804c8de25b5bafdcf1"}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) [ 544.388066][ T26] audit: type=1800 audit(1573755376.457:70): pid=21627 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16833 res=0 18:16:16 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x404e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x20) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) r6 = dup(r5) ioctl$BLKSECDISCARD(r6, 0x127d, &(0x7f00000001c0)=0x40) getsockopt$inet6_int(r3, 0x29, 0xc9, &(0x7f0000000040), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 544.459469][T21625] kvm: pic: non byte read [ 544.472431][T21625] kvm: pic: non byte write [ 544.496109][T21625] kvm: pic: single mode not supported [ 544.497072][T21625] kvm: pic: non byte read 18:16:16 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x7a000000, 0x0, 0x0, 0x0, 0x0}) [ 544.511364][T21625] kvm: pic: non byte write [ 544.520914][T21625] kvm: pic: non byte read [ 544.529043][T21625] kvm: pic: non byte write [ 544.542298][T21625] kvm: pic: non byte read [ 544.548724][T21625] kvm: pic: non byte write [ 544.555375][T21625] kvm: pic: non byte read [ 544.576645][T21625] kvm: pic: non byte write [ 544.668497][T21625] kvm: pic: non byte read [ 544.727237][T21744] binder: 21743:21744 ioctl c018620c 20000600 returned -22 [ 544.731685][T21625] kvm: pic: non byte write [ 544.768792][T21625] kvm: pic: non byte read [ 544.796400][T21625] kvm: pic: non byte write [ 544.851314][T21625] kvm: pic: non byte read [ 544.883465][T21625] kvm: pic: non byte write [ 544.906871][T21625] kvm: pic: non byte read [ 544.915021][T21625] kvm: pic: non byte write [ 544.929198][T21625] kvm: pic: non byte read [ 544.935356][T21625] kvm: pic: non byte write 18:16:17 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0xa9070000, 0x0, 0x0, 0x0, 0x0}) 18:16:17 executing program 0: getpid() r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0xf3d, 0x2, {0x2, @pix={0x0, 0x0, 0x34343452, 0x0, 0x20000000, 0x69b31885}}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x4, 0x686c649a, 0x1, 0x7fffffff, 0x1, @discrete={0x2}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in6={0xa, 0x4e21, 0x9, @rand_addr="0a1b2f51b6c8933779ecf55b32ff4378", 0x100}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x603, @mcast1, 0x1}, @in6={0xa, 0x0, 0x2, @mcast1}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x3}], 0xcc) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0x40045612, &(0x7f0000000580)={0x2, @pix_mp={0x400, 0x0, 0x0, 0x0, 0x6, [{0x9}]}}) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r7 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x0) ppoll(&(0x7f0000001980)=[{r7}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f0000000340)=0x4) perf_event_open(&(0x7f0000000540)={0xa8dbffa7d74f6926, 0x70, 0x69, 0xe4, 0x20, 0x0, 0x0, 0x4, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x8, @perf_config_ext={0x8, 0x4}, 0x3022, 0x9, 0x2, 0x6, 0x1b23, 0x3, 0xff01}, r6, 0xc, r7, 0x1) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r6) [ 545.182258][T21856] binder: 21855:21856 ioctl c018620c 20000600 returned -22 18:16:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100000002, 0x0}, 0x0) r2 = socket$inet(0x2, 0x0, 0x19) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x3, 0x88, [], 0x9, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)=""/136}, &(0x7f0000000a00)=0x78) r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r5 = socket(0x10, 0x20001000000003, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000b40)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f0000000a80)={0x0, 0x70, 0x20, 0x2, 0x5, 0x3, 0x0, 0x9, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xda22, 0x4, @perf_bp={&(0x7f0000000a40), 0x8}, 0x200, 0x18, 0x1, 0x5, 0x7, 0x7f, 0x1f}, 0x0, 0x10, r6, 0x2) write(r5, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r7 = socket(0x10, 0x20001000000003, 0x0) write(r7, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) write$cgroup_pid(r4, &(0x7f0000000640), 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000180)={0x7, 0x4, 0x0, 0x5, r1}, 0x10) 18:16:17 executing program 3: socket(0x200000000000011, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) chroot(&(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') syz_open_dev$rtc(&(0x7f0000000400)='/dev/rtc#\x00', 0x0, 0x92d000) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000540)) r0 = getpid() sched_setattr(r0, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x2000, 0x3, 0xfffffffffffffffd}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') mount$fuseblk(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000240)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x0, 0xffff0001}, {0x3f}]}, 0x14, 0x5) unlink(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r10}]]}}}]}, 0x38}}, 0x0) sendmsg$can_raw(r7, &(0x7f00000006c0)={&(0x7f0000000100)={0x1d, r10}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x40, 0x2, 0x0, 0x0, "077f3c6955111413c2dbc4d6d1fb91f6fa42223d19d6ef29fe6a30cc5f1ba8affba016b5a3908aec4c216ea7598c5b46d9ce894bc63e21804c8de25b5bafdcf1"}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 18:16:17 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0xc0800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000c0a000/0x4000)=nil, 0x4000}, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x1) r5 = userfaultfd(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) read$eventfd(r10, &(0x7f0000000080), 0x8) dup3(r7, r6, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000040)=0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:16:17 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0xaa070000, 0x0, 0x0, 0x0, 0x0}) [ 545.425966][T21971] binder: 21966:21971 ioctl c018620c 20000600 returned -22 18:16:17 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x100000000000000, 0x0, 0x0, 0x0, 0x0}) [ 545.650495][T21982] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 545.678380][T22087] binder: 22086:22087 ioctl c018620c 20000600 returned -22 [ 545.687686][T21982] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 545.821134][T22181] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 18:16:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r4 = dup2(r2, r1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="ac65193b75c2b466e31ca3d720ae", 0xe}], 0x1) 18:16:25 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x200000000000000, 0x0, 0x0, 0x0, 0x0}) 18:16:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100000002, 0x0}, 0x0) r2 = socket$inet(0x2, 0x0, 0x19) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x3, 0x88, [], 0x9, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)=""/136}, &(0x7f0000000a00)=0x78) r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r5 = socket(0x10, 0x20001000000003, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000b40)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f0000000a80)={0x0, 0x70, 0x20, 0x2, 0x5, 0x3, 0x0, 0x9, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xda22, 0x4, @perf_bp={&(0x7f0000000a40), 0x8}, 0x200, 0x18, 0x1, 0x5, 0x7, 0x7f, 0x1f}, 0x0, 0x10, r6, 0x2) write(r5, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r7 = socket(0x10, 0x20001000000003, 0x0) write(r7, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) write$cgroup_pid(r4, &(0x7f0000000640), 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000180)={0x7, 0x4, 0x0, 0x5, r1}, 0x10) 18:16:25 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0xff6972c5d3826c44, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket(0xb, 0x800, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r1, r1, &(0x7f0000000140), 0x8800000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x1, &(0x7f00000000c0)=""/59, &(0x7f0000000180)=""/142, &(0x7f0000000280)=""/102}) 18:16:25 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)={0x1, 0x5, [{r4, 0x0, 0x1000000000000}, {r0, 0x0, 0x100000000, 0xfffffffffffff000}, {r1, 0x0, 0x1000000}, {r1}, {r7, 0x0, 0x9337084dd14b33f9}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r8, 0x0) pwritev(r9, &(0x7f0000000040)=[{&(0x7f0000000340)="a84efd4ee50f0f09160820333cac07d00edf8ce00f697216681677a47a6e8b3ff021d3d0d3e71b1f4cd7296a1e3519ce607177eb5c42436167b0c0e758fad728c3583237dd976c827683e13447fb80a4a2ce61c6dae53a84671d58a2d50061c7ffc0788dd74dadc8cb9b36487a10b4cc8bf25b2eb291dfd38f8a1f4c226546435ce40caa863b58d25b967c3489cbc5e3d67d0beda4e850b8ea33dd1ae3533a6d3294780592286efcaeee066ad7782ce8a33566cc0758a4d796cfa14226585cc5046fe45b7a4cbb9bb75cce0ad9bcf6adf6696b4f35f92c", 0xd7}], 0x1, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000300), 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ftruncate(r1, 0x1000000) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x341d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 18:16:25 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r2, 0x203, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x3, 0x6b, [], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/107}, &(0x7f0000001280)=0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x163, 0x11, 0x1c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 553.638439][T22212] binder: 22206:22212 ioctl c018620c 20000600 returned -22 [ 553.656052][ T26] audit: type=1800 audit(1573755385.727:71): pid=22210 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16954 res=0 18:16:25 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x8800000) ptrace$setregs(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:16:25 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x300000000000000, 0x0, 0x0, 0x0, 0x0}) 18:16:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000012ffc)=0x90) [ 553.707887][ T26] audit: type=1800 audit(1573755385.767:72): pid=22210 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16954 res=0 [ 553.824905][T22327] binder: 22324:22327 ioctl c018620c 20000600 returned -22 [ 553.849497][T22204] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 18:16:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 18:16:26 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x400000000000000, 0x0, 0x0, 0x0, 0x0}) [ 553.877572][ T26] audit: type=1800 audit(1573755385.947:73): pid=22344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16957 res=0 [ 553.884954][T22204] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 553.963598][ T26] audit: type=1800 audit(1573755386.037:74): pid=22344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16957 res=0 [ 554.084729][T22444] binder: 22441:22444 ioctl c018620c 20000600 returned -22 18:16:26 executing program 1: clock_gettime(0x0, 0x0) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') getsockname$inet6(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00\xc9\xc9\xec\x80\xe3\xd7\x19)aF>\x11\x9ed\xa4IWj\xd4$,\x86\xf9\xa0r\x02A>\xb4p\xb0\xbe\xcf0\xb6\xaa\xc1\x00\x02\x9e\x9b\".O=\xf3\x86r\xffp\xcf\x93Z\xf5\xfe{\xd9L\x92\xc3\x1a\xafx\xd1s\xe4$\xf1\xd7\xc4V\x05\xb4\x8d\x86~\xed\xa1\x84W\x1d\t\x00\x00\x00\t\xb1]\x01\xf6\xfe\x0eP\xcex\xc6h\x16\x81\xb1\rO\f\xb0\xdd\x92b\x00\xacAp4\x93\xf02\xba\xe7\xed\xaeG\x1dL\xd8\x91/\xc5L\xc57\x94\xb4\xf6;\xb6\"b\xc0\xcf\xf6\xf6\x1a\xbe\f^gZ\va\x82\xf78\x8c\xa0=Q\x9cm\x0f\xf5\xdf\x9b\x1c7\r\xeb\x15\xc9\xd8/,\x0e\x11\xa6e2o\xe4^\x83\a\x9aLm)\xae\x10\xeb\xad\xed\x8d46\xa2]\xad\xf5\xf2L\xfae%\xc3[q\x11\xab\x1d\xa1\xda!M/\xa1\xd6\xc1\x84=\xef\xe6\x0f\xb9?\x93V\xb9\xe0V\xf1\x91\xdc\xc8,n\xfd\xcd\x93\xb6/\xd9K\x04\x99\nV\xb7\x02\xd5\x02\x84,\x817\xae\xb3\xf2!\x9a\xc41\x1a\x83\x82\xbf/\xd9O\x99\xec\xd3\x87M0\xf0\x19\x8b\xe8t\x82\xf6\b^\xf0\xb2SP\x18B\xb8\x98\x99\xec\x8e\xe1') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x2432, 0x0, 0x10000, 0x0, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300090468fe07000000e3000000ff3f01000000450001070000001419001a000400020007000a00550e69330f4de5020080080000", 0x39}], 0x1) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000000)='yam0\x00') [ 554.501920][T22550] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 18:16:34 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x500000000000000, 0x0, 0x0, 0x0, 0x0}) 18:16:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100000002, 0x0}, 0x0) r2 = socket$inet(0x2, 0x0, 0x19) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x3, 0x88, [], 0x9, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)=""/136}, &(0x7f0000000a00)=0x78) r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r5 = socket(0x10, 0x20001000000003, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000b40)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f0000000a80)={0x0, 0x70, 0x20, 0x2, 0x5, 0x3, 0x0, 0x9, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xda22, 0x4, @perf_bp={&(0x7f0000000a40), 0x8}, 0x200, 0x18, 0x1, 0x5, 0x7, 0x7f, 0x1f}, 0x0, 0x10, r6, 0x2) write(r5, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r7 = socket(0x10, 0x20001000000003, 0x0) write(r7, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) write$cgroup_pid(r4, &(0x7f0000000640), 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000180)={0x7, 0x4, 0x0, 0x5, r1}, 0x10) 18:16:34 executing program 5: 18:16:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) inotify_init() clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:16:34 executing program 0: getpid() sched_setscheduler(0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(0x0, 0x0) 18:16:34 executing program 1: 18:16:34 executing program 1: [ 562.129568][T22566] binder: 22564:22566 ioctl c018620c 20000600 returned -22 18:16:34 executing program 0: 18:16:34 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x600000000000000, 0x0, 0x0, 0x0, 0x0}) 18:16:34 executing program 1: [ 562.370529][T22576] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 562.405345][T22688] binder: 22685:22688 ioctl c018620c 20000600 returned -22 [ 562.418411][T22576] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 18:16:34 executing program 1: 18:16:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x8a0, 0x11, 0x0, 0x27) 18:16:34 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x700000000000000, 0x0, 0x0, 0x0, 0x0}) 18:16:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100000002, 0x0}, 0x0) r2 = socket$inet(0x2, 0x0, 0x19) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x3, 0x88, [], 0x9, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)=""/136}, &(0x7f0000000a00)=0x78) r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r5 = socket(0x10, 0x20001000000003, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000b40)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(&(0x7f0000000a80)={0x0, 0x70, 0x20, 0x2, 0x5, 0x3, 0x0, 0x9, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xda22, 0x4, @perf_bp={&(0x7f0000000a40), 0x8}, 0x200, 0x18, 0x1, 0x5, 0x7, 0x7f, 0x1f}, 0x0, 0x10, r6, 0x2) write(r5, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r7 = socket(0x10, 0x20001000000003, 0x0) write(r7, &(0x7f00000000c0)="220000001400070000e80000000003000208030001000000080002004100fff0f055", 0x22) write$cgroup_pid(r4, &(0x7f0000000640), 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000180)={0x7, 0x4, 0x0, 0x5, r1}, 0x10) [ 562.623721][T22802] binder: 22801:22802 ioctl c018620c 20000600 returned -22 [ 562.899240][T22806] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 562.913337][T22806] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 18:16:38 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007", 0x1f}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 18:16:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) inotify_init() clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:16:38 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) r1 = socket(0x2, 0x3, 0x67) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800a1695e1dcfe87b1071") setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r1, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xd0000e0}, 0x6e) 18:16:38 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0}) 18:16:38 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000300)='./file1\x00', 0x200) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f00000000c0)=0xe, 0x800) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) r2 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$setown(r1, 0x8, r2) r3 = syz_open_procfs(r2, &(0x7f0000000480)='oom_score\x00') setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000006c0)=ANY=[@ANYBLOB="e0000001000080000000e29800000000e000000130132ad631fc98c49b9d52c1edef19f212c934a3ef8eb90ad5c0ea2b157944664ff3fdaa39a8d4438a2c8406c230f3bced9c87563b39fdd441be9d9ccfc82ae3dd2596317dcf99fb2e8690c5a0726956edd8857d63702082198f2723519c3cec1c8fb0ab01ca1f870e626c1cf6cd95cccd668136fe03b875d52b635bad5106f713307bcb36f20e61fb6f4ee8f272d2381dc12f632e45737d8ec1161981ee9ebe7c44a2e35265f1488d8ab49f9fb22e76c374b5a3749dc1f1245333570b836a24ec7d"], 0x14) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x181e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) fchdir(r5) getpid() setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0)="12cb", 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x80, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) r8 = getpid() rt_tgsigqueueinfo(0x0, r8, 0x16, &(0x7f0000000200)) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f00000002c0)=0x2, &(0x7f0000000300)=0x2) recvmmsg(r7, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) lsetxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "5374976138ff73aafcdff34c77e04d9aaf1055c0"}, 0x15, 0x3) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x0, {0x1b, 0x0, 0x0, 0x4, 0x9, 0x1}, 0x1, 0x7}, 0xe) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) 18:16:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00\xc9\xc9\xec\x80\xe3\xd7\x19)aF>\x11\x9ed\xa4IWj\xd4$,\x86\xf9\xa0r\x02A>\xb4p\xb0\xbe\xcf0\xb6\xaa\xc1\x00\x02\x9e\x9b\".O=\xf3\x86r\xffp\xcf\x93Z\xf5\xfe{\xd9L\x92\xc3\x1a\xafx\xd1s\xe4$\xf1\xd7\xc4V\x05\xb4\x8d\x86~\xed\xa1\x84W\x1d\t\x00\x00\x00\t\xb1]\x01\xf6\xfe\x0eP\xcex\xc6h\x16\x81\xb1\rO\f\xb0\xdd\x92b\x00\xacAp4\x93\xf02\xba\xe7\xed\xaeG\x1dL\xd8\x91/\xc5L\xc57\x94\xb4\xf6;\xb6\"b\xc0\xcf\xf6\xf6\x1a\xbe\f^gZ\va\x82\xf78\x8c\xa0=Q\x9cm\x0f\xf5\xdf\x9b\x1c7\r\xeb\x15\xc9\xd8/,\x0e\x11\xa6e2o\xe4^\x83\a\x9aLm)\xae\x10\xeb\xad\xed\x8d46\xa2]\xad\xf5\xf2L\xfae%\xc3[q\x11\xab\x1d\xa1\xda!M/\xa1\xd6\xc1\x84=\xef\xe6\x0f\xb9?\x93V\xb9\xe0V\xf1\x91\xdc\xc8,n\xfd\xcd\x93\xb6/\xd9K\x04\x99\nV\xb7\x02\xd5\x02\x84,\x817\xae\xb3\xf2!\x9a\xc41\x1a\x83\x82\xbf/\xd9O\x99\xec\xd3\x87M0\xf0\x19\x8b\xe8t\x82\xf6\b^\xf0\xb2SP\x18B\xb8\x98\x99\xec\x8e\xe1') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 566.368305][T22927] binder: 22918:22927 ioctl c018620c 20000600 returned -22 18:16:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000004000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) close(r1) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000000c0)=0xd5) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x4, 0xfffffbff}, {0x1, 0x9}]}, 0x18, 0x3) socket$kcm(0x2, 0x5, 0x2) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x0, &(0x7f0000000940)) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x0, 0xcc9f}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @remote, 0x80000001}, @in6={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000100)=0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10*\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$IOC_PR_CLEAR(r8, 0x401070cd, &(0x7f0000000140)={0xaa}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000500)={{0x2, 0x3, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x0, 0xfff, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f00000004c0)=[')%#\\\x00'], 0x5, [], [0x0, 0x0, 0x401, 0x8000]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') 18:16:38 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0}) 18:16:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000240)="f244f6b1f9ffffffb866ba2000b000ee6c0000000f01c10f6022f40f01c2660f38324633673e410f0766baf80cb83c959585ef66bafc0c66ed48b8faf13a04000000000f23d80f21f835400000e00f23f8c744240000000000c744240200800000c7442406000000000f011424", 0x6d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8], 0x12000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 566.637675][T23043] binder: 23042:23043 ioctl c018620c 20000600 returned -22 18:16:38 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x4878020000000000, 0x0, 0x0, 0x0, 0x0}) [ 566.830754][T23155] binder: 23153:23155 ioctl c018620c 20000600 returned -22 18:16:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x0, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8500, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000340), 0xc}, 0x0, 0x0, 0x2, 0x7, 0x5, 0x1, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) move_mount(r2, &(0x7f00000003c0)='\x00', 0xffffffffffffffff, 0x0, 0x64) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="141ec123e76bb578bb73c1da8aa2e370efdfb9d0a8826421ac1bacd1bfe6b29f7a5751a5a69ac6045ff0dc", 0x2b}], 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000200)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000002d80)=[{{&(0x7f0000000540)=@generic={0x3, "e84f4375e3e312c5c1052384c1ca1b9fdf99453b5ba0f885453d2250bdb2ce9673520745558c0bcb0224929e7837e6a3558b5d707f5b94f3ac397a2fdb63be8afda89fe92b59af9732383511a09cede4fc89fc195a1ac7d2e58f2968444c7cb3ebd85cf400108326be82c1a4d2a9d51041afa34a8a3a4e473c1e3963dd98"}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000005c0)="798e7b9740ac08bf0d172abde856f83100e2480ab36db515d335c31b9370fe56d0a551e23c71c0777f9417e36de37679665a3b966daf0943f14cb09d6bf2638a05c9930f244f716e235e5ab9378239c122d211b2994b2577ba65e95cf8cfa90b585bc2776351303e39d24e835d4753c250473daac53e01d78f171fd67e18a2cad49f02a259e94d1c76796328e29451b4fc89cef520f3cc09232b374a7ff904d1f10479befe54ab0dc1e69c50e6c86c291a4defd142bb9f37559b684108195391a4", 0xc1}, {&(0x7f0000000780)="edf943e3ecea46d70ef024f740f4601725bb2cba0a1268ef201a742566cd6dd4df993ef67df4c20ca2cf652b0af5cd769b48646eb86b8b355263a58627eaf4386c3f3d2cfacf196409336e264e0197b2b7dbdca12857ba46ef72fe0c49be85d066e20710e995c2fa9e3d624dc35ddb6cbaf2bb49d3ab1401ab3031cd2875f3ba51256870702bb5936acb7417fb379cfcf0875a5a69d9c451b539fe586f2aef178bad718c1b4c9b8f4de49bdf474bcd930cb0f2f6928198583ca31390b4a670063d8b8f49c3eac5d7ddb82f00f35a00110f", 0xd1}, {&(0x7f0000000100)="8e82c6482861daf42dbc4e0c5f5becd4f31752c29c54d8b371a52664627168051c862460859d7e25428f73bc", 0x2c}, {&(0x7f0000000880)="a134da9eb8d969987a4691dde377b885e63e1e03a7bf5e349ada230725d82adfb07bd52d07ceba5fb08106c5f31a1dbb8fb330c2587ff5d6ab8197009979bfda03e6ef522f8addc01506837fe8e4a6ba6d075e8da362b2d35851a8b12fe4ef11ee42c4449f42796e1766648558b5f50c6f55361175e6769a574dd4e0012a3cb3601c7d8024435ad47c5863", 0x8b}, {&(0x7f0000000940)="6f5ecb4e09bae82c9d8deea576cfdda8f84768729397ada7ae6afe3ab835a38441c344c2df672e004c3b6b84982d0a04cd27728ba964063cb31d7aebf03ddeb546cf8095748730c9404234c9876a24618157e48ae83cfdca6222fdc73f6ee85885d2a73add734a92455f300f341d89b592afa1d76b0981a7d85fcf6c803939fb4a931ab954b01dd07b336d19483437cdc5d5fb5fa147e63b11123023a8192819a53403dbb21fac00d38b51b5fac5c347c52b7c755080a920ec1ff0f87068435419f7309e4f315b48de6f6486fa546ce22889a7584e359c9487aa134db1bfd6eb11aa1c00aab465bab79ed5e4d33965f1f4eb89631743b4", 0xf7}, {&(0x7f0000000a40)="a44d1b4a7c4a8fab6bcba8b2d287e8e1fc674d9b2f7a359b599a676dc41b9bc3dbef3d2887b9849a70bf2dd98620a5bab4bcc0889c868b52adda84d9066c629affc86005e8fcc017fa1d9fab0f376e8146efdeab8e031eb740ac4b07f2fb3e573e6c66845aabbbdbc0bd4f3af137c9ba9228b656f996ca11eef3d56dc12f2d24a67cddc72a3aa889412270c44524bb691475dd8776c48b9457057e2b8dd6ff7b26c8", 0xa2}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f00000006c0)="9b52b5336f55cfeddc458303228f336fabf0663323b44f817e70ce1816bceb4e67923d01030f6a40e0098056b90702acf65db3f57e42d4953f7d85f27e850b4587e95eefe2c54518da3336775a80e11c44ac97b97069fdae7c0ad55d316013b050cbc8b07bcf963c23f96bd47c", 0x6d}], 0x9, &(0x7f0000002bc0)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3f}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002c40)="2d8bec445a861fe0b50856f70f99ddf2c97d855c1c604d3976ce61bf8f6ef668c24580f72b53c25f536fed77344097fb26269b047e12933ab116ee5048157dc20ea938b60f812ffe2c8742bcb901c7c9275db427433698dd35f861227c7f7a96ef48f20cc62ddc0f5650ad224dc180600b33a3bd20652698af979b15f77359323fab70ee58456d188a38eb", 0x8b}], 0x1, &(0x7f0000002d00)=[@mark={{0x14, 0x1, 0x24, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x3bb811d6}}], 0x48}}], 0x2, 0x60001) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$nl_route(r3, 0x0, 0x60000801) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x10d221, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000740), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111, 0x2}}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, 0xffffffffffffffff) 18:16:39 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xffffffffffff9439, 0x802000) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000100)=0x1) symlink(&(0x7f0000001140)='..', &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x20000000000006, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000305, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 18:16:45 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x70480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.stat\x00', 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000540), 0x4) pipe(&(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) sendmsg$IPVS_CMD_DEL_DEST(r0, 0x0, 0x40040) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x400000000000288, 0x0) getsockname$inet(r6, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) 18:16:45 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0}) 18:16:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xd) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000288, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000240)='filter\x00', &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x10000, 0x1}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x400000000000288, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000f, 0x50, r7, 0x0) 18:16:45 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./bus/file0\x00', 0xc, 0x3) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./bus/file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) kexec_load(0x360, 0x6, &(0x7f0000001d40)=[{&(0x7f0000000900)="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", 0x1000, 0x2, 0x3}, {&(0x7f0000001900)="9df4e1510b679b1e7aa75737e5b975e4a4c6c1ab07e19a82f4a5b0ddfff3b8edfd2c9edc24bce1d44cc253790bb9dd26a2067b784e60256cd9cadde6796ee642c33c6d250d5162dc3beefd3ee0e12e281cef1ba3d9e28d4789fcb8a9ee893a82243b875f755b794d67bed34d92306603a1a132d065af5942094bf422b2a998f372eb0298711c9d551b8101cec7e08792ad933825be707d1f0ee7d80c2b66342cdb6c1608a03400447f30643032a7cd7d45b4a95a6932ec900eab7c9d04a889de8bd69875c152a90e609d0b3950f17806360646d8e6c204738298c68d552c17b16fd9ffa2da4a1f4c60ed3f780c16ef630b7b9ca35640347d", 0xf8, 0xa03, 0xfffffffffffffffe}, {&(0x7f0000001a00)="8619bb7a5583ec952ec010b1a0e1fb54e97cdd2d3690523e73447a770037164224e15cc90dd39f4921616f09296dff902799e080cada54ac078d80eb1e1496eeb00ebc2eda328bd937cf8b337e420f0c7b2a378caf05c7b2b13ff6b1043217e9d33bf1c602807ba189c9492d370d0472c847675e36e649d1b08c13b503302e124b4537cd0630592a7d9ca9fdbd04c0cf4250e47b690cd050fa33c0545561ba363f19eafd7633ca506946f048e21cbbdeb6a2bfe3035a7bef871a08862b", 0xbd, 0x6, 0x9}, {&(0x7f0000001ac0)="649d75a5fa0fd374b7d33fd1040809dca56e52f984cefb71190de16ea22b6e41672273169e997843f649b8201d44055126482c8259f33a49eae1f48abebbf0b079d2f69c7d3ddb68658a09e81706eb8d678bfd2cb5ba1323f044bd0854ccda9a0bf02ee2f879a2f976b91e17f99dd99ab7f9d17e0818f9305e8b01a036b7d66aef8cfebda6901aa352b18cd6fc3e9b84772bb0dd3ee6", 0x96, 0x4010000000000, 0x20}, {&(0x7f0000001b80)="99de78ebcfc6f638699eb5682651f4eed9be8b9ae06af0c36f74b7078b0463569beb16221e4675179bedb909ce0b0e679d0b314d225c4a3af86ce94f642e37ee01c03cd193ebff6e4c74a5cd50be3e95094675750c7633c07f90294dd8ebdae8961864a3a3c2a987a80950a00d1717ad288f39d40d98e58f9b8939a777b8f54c1a7f00e6ed99095f9b1cd3387cb7d39abdc327ade952c5128397daf186ec8be0cb57955d928f6744ce3c506b6c5ed0e6e9c802964238097ff1c36dd1d61278bf87a6880b4a5e80e38c0ae5f0", 0xcc, 0x3, 0xc11}, {&(0x7f0000001c80)="339674d4484c76e19d83132b039b0a35a3530c82024ea0bd0e2be259e9d4ca4487dd50be3a3bc7ab6351b9ffc4a6efefd1f000d9cf27f17b3a42f9a2653f5aca0ebf9193518416729f0c65bbbe9ccbfdf4a226a09b5206a9a744fd51d24f4f6a78ed88101a1be2c742befd2823fdec38629b53964521c13db103d41367a1f716bdd2055dc2b15e50add3acf3c005710ba4de51091aed33db4f31aad41bd30445b34d5d12d7e6", 0xa6, 0x1f}], 0xb0000) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000280)={{0x0, 0x3, 0x401, 0x2, 0x800}, 0xffffffff, 0x100000000, 0x8}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75700000200069723d2e2f66696c65302c0079c1e60c993fa3815bf35c3500f44790b3943827d71903e987888c5fceede1844f5af206e0bcb085f973f6fb365ad08cd90dc9a2c27a1b8a3a4a02c86f45fbd11edbc32a883ea0f1a7c7a9"]) r3 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x9, 0x100) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x258, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x108, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @local, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5de8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x57b3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @loopback, 0x19}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x948}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc0e}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x8000}, 0x5) rmdir(&(0x7f0000000040)='./bus/file0\x00') symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./bus/file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000800)=0x1, 0x4) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000840)='/dev/full\x00', 0x44ee3f8cc65b326, 0x0) write$tun(r8, &(0x7f0000000880)={@val={0x0, 0x88a8}, @val={0x2, 0x80, 0x3f, 0x7, 0x6, 0x3}, @mpls={[{0x4}, {0x3, 0x0, 0x1}, {0x5}], @generic="1490509c6f8538adffbb4b216f8f7b039913fb325325849fa9d88bc8af521e1d3a1c2748071cf7369cb1a1a2"}}, 0x46) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x9) 18:16:45 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000300)='./file1\x00', 0x200) r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f00000000c0)=0xe, 0x800) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) r2 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$setown(r1, 0x8, r2) r3 = syz_open_procfs(r2, &(0x7f0000000480)='oom_score\x00') setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000006c0)=ANY=[@ANYBLOB="e0000001000080000000e29800000000e000000130132ad631fc98c49b9d52c1edef19f212c934a3ef8eb90ad5c0ea2b157944664ff3fdaa39a8d4438a2c8406c230f3bced9c87563b39fdd441be9d9ccfc82ae3dd2596317dcf99fb2e8690c5a0726956edd8857d63702082198f2723519c3cec1c8fb0ab01ca1f870e626c1cf6cd95cccd668136fe03b875d52b635bad5106f713307bcb36f20e61fb6f4ee8f272d2381dc12f632e45737d8ec1161981ee9ebe7c44a2e35265f1488d8ab49f9fb22e76c374b5a3749dc1f1245333570b836a24ec7d"], 0x14) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x181e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) fchdir(r5) getpid() setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0)="12cb", 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getresgid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x80, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x9) r8 = getpid() rt_tgsigqueueinfo(0x0, r8, 0x16, &(0x7f0000000200)) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f00000002c0)=0x2, &(0x7f0000000300)=0x2) recvmmsg(r7, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) lsetxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "5374976138ff73aafcdff34c77e04d9aaf1055c0"}, 0x15, 0x3) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x0, {0x1b, 0x0, 0x0, 0x4, 0x9, 0x1}, 0x1, 0x7}, 0xe) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) [ 573.331849][T23283] netlink: 'syz-executor.5': attribute type 7 has an invalid length. [ 573.339974][T23283] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.5'. [ 573.395517][T23285] binder: 23284:23285 ioctl c018620c 20000600 returned -22 [ 573.501270][T23293] overlayfs: unrecognized mount option "up" or missing value 18:16:45 executing program 1: add_key(&(0x7f00000002c0)='trusted\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x234, 0xfffffffffffffffb) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x0, 0x8, 0x1, 0x7, 0x0, 0x3, 0x1, 0x0, 0x612}) syz_open_dev$loop(0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) msgget$private(0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) msgget(0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="6756a50de9d89487f6ae76ccc14aae7dfc8f6b35869037128316db2861b386d2b6ef680f913758d62842cf1bb315dc2c40d0495d6bb32b"], 0x200600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000500), &(0x7f0000000540)=0x4) r6 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) fcntl$setstatus(r9, 0x4, 0x4000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800007a000000fa91d69507011d000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c000100765474681000000018000200b400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffc8, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000000fffffffff6ffffff0b0001006d756c74697100000800020000000000"], 0x38}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @dev}, &(0x7f00000004c0)=0xc) 18:16:45 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}) [ 573.742317][T23407] binder: 23404:23407 ioctl c018620c 20000600 returned -22 18:16:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0xc) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0xee01}}) msgsnd(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgctl$IPC_RMID(r1, 0x0) r2 = geteuid() r3 = getgid() setregid(0x0, r3) setgroups(0x1, &(0x7f0000000000)=[r3]) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r7, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000000c0)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r13 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r13, 0x0) ppoll(&(0x7f0000001980)=[{r13}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) perf_event_open(&(0x7f0000000540)={0xa8dbffa7d74f6926, 0x70, 0x69, 0xe4, 0x20, 0x0, 0x0, 0x4, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x8, @perf_config_ext={0x8, 0x4}, 0x3022, 0x9, 0x2, 0x6, 0x1b23, 0x3, 0xff01}, r12, 0xc, r13, 0x1) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x81f, r2, r3, r5, r6, 0xe429f0e0ae7f4b96}, 0x3, 0x10001, 0xfffffffffffffffa, 0x400, 0x100000000, 0xc7d, r9, r12}) 18:16:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000000, 0x20000) r1 = getuid() ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f00000000c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r1}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)={0x64, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, [@generic="1b9da4bc43c5011d6db2601b694183bf5b6f6256b1a2b13dc6b70331e1", @generic="c135910f2bcc16c7ad0279730197579ada000cd68f90d991dc0eb662bc40fe5710fcb253da2170432cd29947"]}]}, 0x64}}, 0x0) 18:16:45 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0}) 18:16:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x6, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xeb1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x8000, 0x2, 0x7ff, r2}, &(0x7f0000000100)=0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 574.035245][T23518] binder: 23517:23518 ioctl c018620c 20000600 returned -22 [ 574.069534][ T26] audit: type=1800 audit(1573755406.137:75): pid=23294 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16833 res=0 18:16:46 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x4000, 0x8000}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000024000d0000000000000000000000004f7be4c656a4e5a1e97d2ba28546f315b70fb8def8ac1efcec519984a6f2b4b8b165b5a4e8178fa16b62d6bdc862935d738e1a93d7c79555dc4bafad1c629905388a502caa3ef2b94d6e36df574116982622512a7707ce959917", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000140001"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 18:16:46 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0}) [ 574.317121][T23635] binder: 23632:23635 ioctl c018620c 20000600 returned -22 18:16:46 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x7fffcef2e1b2edca) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r3, 0x89e2, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl(r3, 0x8000000000009374, &(0x7f00000004c0)="0100000000000000180100000500000001000000000000002f") ioctl$RTC_WIE_ON(r2, 0x700f) r4 = socket$inet6(0xa, 0x4, 0x4) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x4048000}, 0x44001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x31100000000000) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000300)=0x4) sendfile(r7, r7, 0x0, 0x2008000fffffffe) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) [ 574.429351][T23743] devpts: called with bogus options 18:16:46 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r1, 0x0, 0x80000005) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0x3000000a}) socket$nl_xfrm(0x10, 0x3, 0x6) connect$x25(r4, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x5, 0x112400) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000240)={0x0, 0x1a, 0x4, 0x0, {}, {0x1, 0x2, 0x3, 0xef, 0x0, 0x0, "b1a973d2"}, 0x7f, 0x2, @fd, 0x4}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:16:46 executing program 3: pipe(&(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x41000002) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, [], 0x0, r2, 0x2}, 0x3c) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1082, 0x3}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xfffffffffffffffc, 0x2, 0x40}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/49, 0x31, 0x0, 0x9}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x1400}, @release={0x40046306, 0x2}, @dead_binder_done], 0x0, 0x0, &(0x7f00000005c0)}) acct(&(0x7f00000000c0)='./file0\x00') write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400"], 0x3) unlink(&(0x7f0000001e00)='./bus\x00') fanotify_init(0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x4800003e, r7, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x1b, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) 18:16:46 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000080)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2000, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x840, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x2) r5 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x807, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x3001}}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000009000000000000000500000000000000ceeb1b179068d3cfd2f69f1e241349d3b58216847c2e12ab8bb67d03515c9c842188548849e00ffb", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000003f85991e01cf5ba47c001872bbacb1694acb4a0bdb7359fc360244ca3762a1ddf1940486952d352a30efc041f83e8869eca3bdd1aa4672b14d2db4207203756b9d6d3e28547c6d9d7a62eec5ddd267ca00", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32, @ANYBLOB="000000008000"/28]) move_mount(r3, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r6 = getpid() r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f0000000100)={0x0, 0x8}) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0xfffffffffffffffe) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2000, 0x0) ptrace$pokeuser(0x6, r6, 0x388, 0xfffffffffffffffe) r8 = getpid() r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x5, &(0x7f00000000c0)='\n', 0x10) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x5, 0x7fff, r8, 0x0, r10, 0x0, 0x800, 0x3}) 18:16:46 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0}) [ 574.582130][ T26] audit: type=1800 audit(1573755406.647:76): pid=23756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16520 res=0 [ 574.603004][T23753] FAT-fs (loop3): bogus number of reserved sectors [ 574.611042][T23753] FAT-fs (loop3): Can't find a valid FAT filesystem [ 574.651222][T23758] binder: 23757:23758 ioctl c018620c 20000600 returned -22 18:16:46 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x100) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000200)='./bus\x00', 0x400, 0x81) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) write(r5, &(0x7f0000000180)="6d352c711d54e1bf1c1d1be04d8e79973e5cf6acc71bbaa54d849dc96d1d9540818c677e7cf600000000000000000000000000000000000000000000000001000000000000", 0xfffffffffffffce0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) epoll_create1(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008a80), 0x400000000000328, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x35f, 0xffc8) listen(0xffffffffffffffff, 0x27) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)=""/203, &(0x7f0000000100)=0xcb) [ 575.089646][ T26] audit: type=1804 audit(1573755407.157:77): pid=23882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir125144598/syzkaller.3QI5Px/164/bus" dev="sda1" ino=16913 res=1 [ 575.144024][T23749] devpts: called with bogus options [ 575.198508][ T26] audit: type=1800 audit(1573755407.267:78): pid=23756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16520 res=0 [ 575.374308][T23766] FAT-fs (loop3): bogus number of reserved sectors [ 575.380947][T23766] FAT-fs (loop3): Can't find a valid FAT filesystem [ 575.811063][ T26] audit: type=1804 audit(1573755407.877:79): pid=23887 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir125144598/syzkaller.3QI5Px/164/bus" dev="sda1" ino=16913 res=1 18:16:54 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000080)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2000, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x840, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x2) r5 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x807, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x3001}}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000009000000000000000500000000000000ceeb1b179068d3cfd2f69f1e241349d3b58216847c2e12ab8bb67d03515c9c842188548849e00ffb", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000003f85991e01cf5ba47c001872bbacb1694acb4a0bdb7359fc360244ca3762a1ddf1940486952d352a30efc041f83e8869eca3bdd1aa4672b14d2db4207203756b9d6d3e28547c6d9d7a62eec5ddd267ca00", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32, @ANYBLOB="000000008000"/28]) move_mount(r3, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r6 = getpid() r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f0000000100)={0x0, 0x8}) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0xfffffffffffffffe) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2000, 0x0) ptrace$pokeuser(0x6, r6, 0x388, 0xfffffffffffffffe) r8 = getpid() r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x5, &(0x7f00000000c0)='\n', 0x10) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x5, 0x7fff, r8, 0x0, r10, 0x0, 0x800, 0x3}) 18:16:54 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0}) 18:16:54 executing program 0: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000080)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2000, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x840, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x2) r5 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x807, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x3001}}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000009000000000000000500000000000000ceeb1b179068d3cfd2f69f1e241349d3b58216847c2e12ab8bb67d03515c9c842188548849e00ffb", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000003f85991e01cf5ba47c001872bbacb1694acb4a0bdb7359fc360244ca3762a1ddf1940486952d352a30efc041f83e8869eca3bdd1aa4672b14d2db4207203756b9d6d3e28547c6d9d7a62eec5ddd267ca00", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32, @ANYBLOB="000000008000"/28]) move_mount(r3, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r6 = getpid() r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f0000000100)={0x0, 0x8}) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0xfffffffffffffffe) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2000, 0x0) ptrace$pokeuser(0x6, r6, 0x388, 0xfffffffffffffffe) r8 = getpid() r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x5, &(0x7f00000000c0)='\n', 0x10) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x5, 0x7fff, r8, 0x0, r10, 0x0, 0x800, 0x3}) 18:16:54 executing program 3: creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r0, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x70, 0x1, 0x0, 0x40, 0x0, 0x0, 0x2, 0x94000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x0, 0x1, 0x0, 0xe3, 0x3f, 0xdd}, 0xffffffffffffffff, 0x0, r1, 0x8) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000640)={r6, 0x9, &(0x7f0000000540)=[0x5e00, 0x80000000, 0x4d8, 0x7e1, 0x7fff, 0x0, 0x5, 0x2, 0x2], &(0x7f0000000580)=[0x7f, 0x1000], 0x45, 0x3, 0x0, &(0x7f00000005c0)=[0x4, 0x17f, 0x1a7], &(0x7f0000000600)=[0x8, 0x401, 0x215, 0xc7b, 0xb85c, 0xfff]}) sendfile(r0, r2, 0x0, 0x8000fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) r7 = socket(0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self\x00', 0x200, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) r8 = open(0x0, 0x0, 0x0) write(r8, &(0x7f0000000600), 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x10000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r11, 0xc058565d, &(0x7f0000000440)={0x3, 0x1, 0x4, 0x400, {0x0, 0x2710}, {0x3, 0xc, 0x8, 0x9, 0x12, 0x0, "9e6cea5e"}, 0xffffffff, 0x1, @planes=&(0x7f0000000300)={0x7fff, 0x0, @fd=r14, 0x101}, 0x4}) fallocate(r15, 0x2, 0x2, 0x9e) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:16:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0xfffffffffffffffc, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) mq_timedsend(r2, &(0x7f0000001080)="7e854fb94c5e604ff57e510d99672bb84674144b9e92b93e3c7da9b826ac23477d337b3c394ca8f948954a480263c396ac6f5a0097c87bc25b5c7a38ecd2880f4f74e7ba9724eb89f0d686179d1f2644dabddf937ccd01bf871124c5ff9441a09329c87f2a7959a26ccb9bae819eb1104970996e56e54b6dfd7c65a14424bf85bfb3c4a3e4ad0244e4bac3df947766183226dd4ed7fc4f10ce6228efa6aa353848925f58a8172467373a06bbef98386015a23411dd62ccd8cef89bc777b94eb1a51b16e103db14fa3a040057f2712ec6892e53a9a6db84597cb5e1a4d484a0d4", 0x2000, 0xd3, &(0x7f0000000000)={0x0, 0x1c9c380}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={0x0, r2, 0x4}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r6 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) ppoll(&(0x7f0000001980)=[{r6}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) perf_event_open(&(0x7f0000000540)={0xa8dbffa7d74f6926, 0x70, 0x69, 0xe4, 0x20, 0x0, 0x0, 0x4, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x8, @perf_config_ext={0x8, 0x4}, 0x3022, 0x9, 0x2, 0x6, 0x1b23, 0x3, 0xff01}, r5, 0xc, r6, 0x1) r7 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x3ff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x9, 0x7f, 0x3f, 0x80, 0x0, 0x40, 0x0, 0x37f8670ff7c83e42, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x1, @perf_bp={&(0x7f00000000c0), 0xcc50ee3d0550962a}, 0x800, 0x8, 0x50af, 0x6, 0x5, 0x1ff, 0x90e6}, r5, 0xb, r7, 0x1) r8 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)={0x8, {{0x2, 0x4e24, @multicast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) read$usbmon(r11, &(0x7f0000000040)=""/120, 0x78) listen(r8, 0x400000001ffffffd) r12 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 18:16:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) r6 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) ppoll(&(0x7f0000001980)=[{r6}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x6d, 0xe5, 0x20, 0x0, 0x0, 0x0, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x8, @perf_config_ext={0x8, 0x5}, 0x3022, 0x9, 0x8, 0x4, 0x1b23, 0x3, 0xff01}, r5, 0xc, r6, 0x1) sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r8 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000640)={0x1000, 0x89d, 0x0, &(0x7f00000005c0)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) quotactl(0x9, &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f0000000500)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={0x0}}, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='#dev/userio\x00', 0x101000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x28}, 0x28}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup3(r16, r15, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup3(r19, r18, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) getsockname$packet(r20, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r21}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, r13, 0x0) socket$netlink(0x10, 0x3, 0x0) r22 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r22, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r24, r23, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES64=r23, @ANYRES32], 0x2}}, 0x0) [ 582.796930][T23907] binder: 23906:23907 ioctl c018620c 20000600 returned -22 [ 582.865732][ T26] audit: type=1804 audit(1573755414.937:80): pid=23916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir534009452/syzkaller.U9td29/135/bus" dev="sda1" ino=17088 res=1 18:16:55 executing program 4: syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x200, 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000180)="46086c2beef1ac70dcff696430013029669ff786ba560ba2316b1dce94e3c09613f448c724936d97bcccfa536d2699289dd86db6cc582f534330187381fc11ba7bd3e3909daae095d9c5458d") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x32000148) flock(0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x102645, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 18:16:55 executing program 0: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000080)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2000, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x840, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x2) r5 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x807, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x3001}}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000009000000000000000500000000000000ceeb1b179068d3cfd2f69f1e241349d3b58216847c2e12ab8bb67d03515c9c842188548849e00ffb", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000003f85991e01cf5ba47c001872bbacb1694acb4a0bdb7359fc360244ca3762a1ddf1940486952d352a30efc041f83e8869eca3bdd1aa4672b14d2db4207203756b9d6d3e28547c6d9d7a62eec5ddd267ca00", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32, @ANYBLOB="000000008000"/28]) move_mount(r3, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r6 = getpid() r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f0000000100)={0x0, 0x8}) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0xfffffffffffffffe) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2000, 0x0) ptrace$pokeuser(0x6, r6, 0x388, 0xfffffffffffffffe) r8 = getpid() r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x5, &(0x7f00000000c0)='\n', 0x10) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x5, 0x7fff, r8, 0x0, r10, 0x0, 0x800, 0x3}) [ 582.954701][ T26] audit: type=1804 audit(1573755415.027:81): pid=24021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir534009452/syzkaller.U9td29/135/bus" dev="sda1" ino=17088 res=1 18:16:55 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0xa907000000000000, 0x0, 0x0, 0x0, 0x0}) 18:16:55 executing program 1: r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r1 = shmat(r0, &(0x7f0000fed000/0x1000)=nil, 0x6ffd) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff1000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000000000)={r12}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r12, 0x0, 0x1}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000080)={r12, 0xe9, "f3ced3f8242885b3b170f6b6c4425398723608cb968c289955f7621b3bf8f1c0fcdf698e35375b959d689b8f17b8aef81a7f4e9d9227ea3533b606a239cb400de6221810c5997acd25c4c5ec39f79f0a31a26a8ab5c81a9c0f7273cca3e29ddb5673654335c9686a5d961a27b47e0b024fc1d41cbcce1cf031d41f7e51d781bc23846d9fc59597ba5ab2882a088adc558f8c57685f09f28a1ab8c27430710e2a497df03da3c409c883bf52624e0c1b254da6c26a6fda987fb595b8d08d25762cb5d643301b18526cb9babdbb41be6340e702e08ffb557ae659481ba0598e4d14b296791c9de1ce2981"}, &(0x7f0000000180)=0xf1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000001c0)={r13, 0x400}, 0x8) shmdt(r1) [ 583.250837][T24039] binder: 24037:24039 ioctl c018620c 20000600 returned -22 18:16:55 executing program 0: r0 = gettid() r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000a00)={0x6, 0x3, [{0x7, 0x0, 0xba55}, {0x3}, {0x1, 0x0, 0x7}, {0x0, 0x0, 0x101}, {0x3f}, {0x1ff, 0x0, 0x4e}]}) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c784512634c060cfb6b72c3c922835d2b5fe1600c22b487813885e8f91b96b20dfeb2afe849ea9853c8d9e91b9c2643c120b9b0a292476e34309c522fce639eccfc2945538a58098348819f04ce094dab9e723c64f124e7a00585742f2b3252f7110a9b8b84eae4843c25d3b92df6b39c13752795113d1cfb21af9f20dcde5eb5535879203299ffea9efc2346ce2eaddbd5bc6c0885857f45994834e92d0a56ab401187fed109f9ac61d3c9fe92cdfd6ccc4b77390aa6d2b8970000"], 0x8e) stat(0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x32, 0x4, @tid=r0}, &(0x7f0000000140)) close(r2) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000002c0)={0x2, 0x0, [{0x9, 0x0, 0x7}, {0x1d}]}) fstat(r1, &(0x7f0000000b00)) r3 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x10001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) socket$isdn_base(0x22, 0x3, 0x0) dup2(0xffffffffffffffff, r3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) kcmp(r4, r0, 0x0, r1, r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@dev}}, 0x0) getresuid(&(0x7f0000000500), &(0x7f00000007c0), &(0x7f0000000800)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) ioctl$SIOCRSGCAUSE(r8, 0x89e0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000200)=0x7f, 0x4) getegid() ptrace$setopts(0x4206, r0, 0x0, 0x0) 18:16:55 executing program 1: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x21c46000) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$netlink(r3, &(0x7f00000002c0), &(0x7f0000000340)=0xc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) recvfrom$rose(r4, &(0x7f0000000080)=""/115, 0x73, 0xc0, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @default}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x36, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fgetxattr(r6, &(0x7f0000000180)=@known='trusted.overlay.nlink\x00', &(0x7f00000001c0)=""/173, 0xad) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r9, 0x400454dc, &(0x7f0000000280)=0x1) 18:16:55 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0xaa07000000000000, 0x0, 0x0, 0x0, 0x0}) [ 583.541427][T24154] binder: 24152:24154 ioctl c018620c 20000600 returned -22 18:16:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0xfffffffffffffffe) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) [ 583.653184][ T26] audit: type=1804 audit(1573755415.727:82): pid=24021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir534009452/syzkaller.U9td29/135/bus" dev="sda1" ino=17088 res=1 18:16:55 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x2, 0x0, 0x0}) [ 583.706959][ T26] audit: type=1804 audit(1573755415.727:83): pid=24021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir534009452/syzkaller.U9td29/135/bus" dev="sda1" ino=17088 res=1 [ 583.736401][ T26] audit: type=1804 audit(1573755415.747:84): pid=24021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir534009452/syzkaller.U9td29/135/bus" dev="sda1" ino=17088 res=1 [ 583.813495][T24267] binder: 24264:24267 ioctl c018620c 20000600 returned -22 18:16:55 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000000000)) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000200)=0x70) sendfile(r6, 0xffffffffffffffff, 0x0, 0x50000000000443) r9 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f00000004c0)={0x10000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xf0ff7f}], 0x1}, 0x0) 18:16:55 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="fc0000001d00071bab0925003a00070007de9eec5d0d091a94590d31a665d01aa2d652e2516d16585ee470803648635ffa006c0f17ec4f04bc616157740d0bd05eb27f55ae8a7338aa84073cc8000006adf6e5907da807da57051e0e010e3e61ca6cd105d2c5e1dc304a2517e282383e6161286d0c63c2f8bf82d39d12e5a7c03b279b5c75f8921d5ef40e7e", 0xffffffffffffff51) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000288, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @empty}, {0x1, @broadcast}, 0x20, {0x2, 0x3, @loopback}, 'gretap0\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0x5, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x400000000000288, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000001c0)={@remote, @loopback, 0x0}, &(0x7f0000000240)=0xc) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x780, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x10240, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r12}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="740200002c00040726bd7000ffdbdf250000000000000000", @ANYRES32=r7, @ANYBLOB="0000c67ff97f0200000004000800050005c0000008000b000800000008000b00070000000c000100666c6f77657200002000020014002100fe8000000000000000000000000000200800360000000000080005000106000008000100627066007c01020008000600", @ANYRES32=r8, @ANYBLOB="b4320a0b", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="2c000600f96479770de32688262ee44ccb91757b85b04a1a8361bf043f9bde5ce30a860170a9efd9010bbd07000008000b0009000000"], 0x274}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup3(r4, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 591.109144][T24394] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. 18:17:03 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x3, 0x0, 0x0}) 18:17:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, &(0x7f0000000300)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PIO_CMAP(r1, 0x4b71, 0x0) listen(0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="e284f7696d8629d887d19e0ecf9ec8da6674d03994b9e37917368ef3002e4f9ed57d6db7d71973dab37b"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r7, 0x0) sendfile(r6, r8, &(0x7f0000000200)=0xb0, 0x80) fallocate(r6, 0x0, 0x40000, 0x4) fallocate(r5, 0x0, 0x0, 0x110001) fdatasync(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xd000000, r6, 0x0, 0x8}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x1}, 0x8) r9 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r11, r10, 0x0) flock(r10, 0x2) ioctl$EVIOCGKEY(r9, 0xc0487c04, &(0x7f0000000000)=""/226) 18:17:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:17:03 executing program 5: mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xfffffffffffffffe) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 18:17:03 executing program 3: ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000002c0)={0x3, 0x8}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000000080)=0x5, 0x4) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1ccd88aedbb8ea46, 0x8012, r1, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000240)={0x8e45, "f24193436bbf33a471ca6a75fddc7178114082e66b45c29705423ecc4a86ec5b", 0x2, 0x0, 0x0, 0x44cd7a3cf0157798, 0x204, 0x8}) fcntl$notify(r1, 0x402, 0x80000020) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r5, 0x0) pwritev(r5, &(0x7f0000000300)=[{0x0}], 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x2]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff16}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 18:17:03 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000040)={0x100, 0x0, 0x0, @stepwise={0x4, 0x40, 0x7, 0x0, 0x3, 0x4}}) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00\xba\x9d\xf5yC\x8a', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$KDSKBSENT(r11, 0x4b49, &(0x7f0000000280)="4f0cf7643e8798fee0498c9694899aac7369bd3076608d2cc7bca1382db579855aa75c04c99af5624a446becd1e0a9e10376f3cf04f79d88a11b7a7846d891ad71b2a38c725c9d317e63aae0614218e8f6091ff2a1f40f5728362f83d8af67ddaedcbf9ddc17c9db2c5f9383e170d34e09601256477fa45a28f37df9e3cdc683c2994818bd826eaaac556f66a43220d20fa5a20fc1fc5add7a97bd28a9a4b4a456") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1, 0x0, 0xd01, 0x8b}, 0x3f00) close(r1) [ 591.275032][T24394] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. [ 591.368681][T24407] binder: 24400:24407 ioctl c018620c 20000600 returned -22 18:17:03 executing program 0: r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000000180)="1700000055000d0000000000fc07ff1b07040410f0ff00", 0x17) r1 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) dup2(r1, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) 18:17:03 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x4, 0x0, 0x0}) 18:17:03 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x1203, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0}, 0xa0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') pipe2(&(0x7f0000000080), 0x800) r6 = open(&(0x7f00000003c0)='./file0\x00', 0x100, 0x1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x90, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x20000080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) kexec_load(0x0, 0x10, &(0x7f00000005c0)=[{0x0, 0x0, 0x9165a000, 0x3e0000}], 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000400)={0xa0}, 0xa0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:17:03 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x61abd8a94b85ba52, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x20, {0x2, 0x4e20, @broadcast}, 'bridge_slave_0\x00'}) r9 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r9, 0x200004) sendfile(r0, r9, 0x0, 0x80001d00c0d0) [ 591.731927][T24528] binder: 24523:24528 ioctl c018620c 20000600 returned -22 18:17:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1d2, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x100, 0xdf, 0x4, 0x5}, {0x100, 0xff, 0x8, 0x6}, {0x2, 0x3, 0x1, 0x28}, {0x400, 0x20, 0x3, 0x3}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000080)=ANY=[@ANYBLOB="3e6b5ea6e1a9"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:17:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040), 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x9, 0x7, 0xf2, 0xe9, 0x99f}, 0x14) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x0, 0x5}}, 0x20) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:hald_mac_exec_t:s0\x00', 0x25, 0x1) lseek(r1, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r9 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0) ppoll(&(0x7f0000001980)=[{r9}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) perf_event_open(&(0x7f00000004c0)={0xa8dbffa7d74f6926, 0x1c6, 0x69, 0xe4, 0x1f, 0x1, 0x0, 0x6e38, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xa, @perf_config_ext={0x8, 0x4}, 0xa008, 0x9, 0x2, 0x6, 0x1b23, 0x0, 0xff05}, r8, 0xc, r9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r11, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r13, 0x4, 0x42000) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r14, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r13, 0x0, 0x5, &(0x7f0000000040)='.em0\x00', r15}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r8, r12, 0x0, 0xf, &(0x7f00000002c0)='/dev/sequencer\x00', r15}, 0x30) fcntl$lock(r5, 0x7, &(0x7f0000000380)={0x49ddcefd2b1dd093, 0x4, 0x1, 0x6, r16}) r17 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) rt_sigprocmask(0x3, &(0x7f0000000240)={0x6}, &(0x7f0000000280), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup3(r19, r18, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup3(r22, r21, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r26 = dup3(r25, r24, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r26, 0x40045564, 0xd) sendfile(r1, r2, 0x0, 0x40d09) 18:17:04 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x3ef}) r2 = syz_open_pts(r1, 0x40000000002) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = dup3(r2, r1, 0x0) write$UHID_INPUT(r4, &(0x7f0000001340)={0x8, "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", 0x1000}, 0x1006) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 18:17:04 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x5, 0x0, 0x0}) [ 592.115387][ T26] audit: type=1804 audit(1573755424.187:85): pid=24648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir534009452/syzkaller.U9td29/139/bus" dev="sda1" ino=17101 res=1 [ 592.155946][T24654] binder: 24652:24654 ioctl c018620c 20000600 returned -22 [ 592.867662][ T26] audit: type=1804 audit(1573755424.937:86): pid=24680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir534009452/syzkaller.U9td29/139/bus" dev="sda1" ino=17101 res=1 18:17:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009f00000048b4f6f68a886769485aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dddff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c587c5db4ecaf4ad2dca0c8983bac03b390ae9c03d76f93d7b27dedd9f95e317d2b57eae278aa743d5aeeea569b70a06a984e5c97fbfd4b5a4ab5c836b997ad9b2d95c0f98a6020000000000000046931ad93bd000233b1aa2b4ef004cada744ed258ca8eb243592000de583ccd0c46aa47ea2bd354e574ede07b1ce8a058210f4d4a7c1825973f886426e56c31e84fba623a0df8b5db9c79b1fc37606786b963081cc5dfca933ad8ff2c162f3ea6036582d6cb6d8ada93b938e6b5678a3822af0f6186cdb94ba3e2fd8ea04b06e38309d082fccd02459856897f35090b55babb41617da4048e322f78272ef52c0305cbe2971fcbb7247fa5e5a69e559a06c2813e403b680f5df5ef845c7c76ed653c3ab4356781c2607faa735950cf7f3fb79f29a533e08e4d1ad3ee387"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:17:05 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x6, 0x0, 0x0}) [ 593.006664][T24772] binder: 24767:24772 ioctl c018620c 20000600 returned -22 18:17:07 executing program 5: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) setuid(r2) r3 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) 18:17:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x5c, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8}, @IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}]]}}}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xd75b, 0x9, 0x0, 0x0, 0x14, 0x34, "14461f6e38be2fc5dc4e0db32734f29a60efb54b21bf61f5480b52892579dfab554641ebf8acf769e30cc4d19ad5ddcd5165a47466fe04c4074b4577d26df007", "215f0bff7db8eee2a981e5df9a56c2c9de45210322042d2351349fed9643096f197f22660f3c1774fba7a342bf0659353ea27832f72ee767e765a320b2b56ee9", "7eaef5ee892e540d954173e0b3bc37d8aba8cd9f2a5bbd7223acae1eea06bfa4", [0x101, 0xffffffffffffff76]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240)=[0x2d068bd7, 0x4, 0x100, 0x4c3], 0x4, 0x20, 0x1, 0x2, 0x414, 0x9, {0x4, 0x0, 0x0, 0xeb17, 0x1, 0x80, 0x3, 0xfffa, 0x1, 0x7b, 0x1, 0x1754, 0x470, 0x7, "8a04217a670bfb98f47ddf6dd68f09f65a2750ad1b93a371a19fc35153c0f2b5"}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_RM_CTX(r9, 0xc0086421, &(0x7f00000000c0)={0x0, 0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r9, 0xc0405519, &(0x7f0000000340)={0x4, 0x0, 0x5, 0x200, 'syz1\x00', 0x5}) 18:17:07 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x3ef}) r2 = syz_open_pts(r1, 0x40000000002) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = dup3(r2, r1, 0x0) write$UHID_INPUT(r4, &(0x7f0000001340)={0x8, "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", 0x1000}, 0x1006) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 18:17:07 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x7, 0x0, 0x0}) 18:17:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffff6e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6}, 0x194, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80000, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000880)={0xe, 0x4, 0x2, 0x2, 0x1000, "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"}, 0x100c) 18:17:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 595.538466][T24886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 18:17:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffff6e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6}, 0x194, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80000, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000880)={0xe, 0x4, 0x2, 0x2, 0x1000, "3744e55c0134630e4d5c3c46b838b298e114e8c700936d808f1732af284325e90d26aaa869b571de29c721d980208d33bea2e4870b4debc6f98392fdfc7d2e5c4d07cffcf665e7ae4c928e4883149f4b3c108321d1ecfa17a72f149228ecbf276ff03bae27e03bd02a5c16b74bbf32c00b0f56c93403d1f6250a653b97de8a1de3fc702c721c55c3ca37fa98a1eda6cc08957597ee54f261de3c6de01d875640f4c735d5caa90908f519f18b07900d0589c2dc1e739de89873320777a11af83b7f8583b2bf6d4d41e9a32fa15cb0e01f3a878bd451310b227a2bac9cb0ca961d570fe3958bcc81b967085c073187da8fa510e221ec060a4aa289b3089cad539f622d9949f99d7f389aeadd28f1339b239718fd3eab1b89debc757dcced4f7836604c43b552c2622666284b02b7192d705a8d8738bf1d5055439b09c1f84f9687cbd55d93666ff3217f0d555e0415403cc649e75ef8a8b7a4bf850abb2b70ce5944766b1339df8a9a52cad3962b2fbc15cbdb9a43f9fe9df74578c0bece74e4f96fa17deb3e45d515c24649322ccd484c9d561821ea967482932573759e33076e8aa6f5725a698b4c69c27edf9216d2efd29ec04a5e86ba3c0dcec2f2961f8c61116f8c9f25909a77a8f2731cc4c9634ca8d0196b7dfae736e4b5f2e4af1ed3201d45bfd7a7c7154047af963a8c46d4c64b4c6ba79184c071a0272d448b87d364b6f6ce84b4439dece50bd32dd2381865efdcd5180f553601ab17ccf7548d93745e8b36f16a9f10d8771a436f8e86f1631c7109617d2f74e6ce6a60eda76a8363dfeeb79847e5d91124f82763ae1dab4766c5d7a2dfe73fa6d738619ac613cb7880aba5e9935bb70400fbccc3f3dd09af6e2d3e6ba7a75f19b18579fcd95019c93c768304f96bdcc7bf675140de5ba8a39c54288938290bce99544346b05a2a95546c520f87d144c115216df7893e7f437f0dc8c65e5481337b7e54a7cb513d41e00e4de82a9a57e49824860eb2c9e098706838c1a3f687bf810d2d0afa4ee6474919fd8b88d3bdb16edf4e93d255ebdcb593dcad2b9a28f47db58fb3c1e386c98e812236509b8db58a92b334d4998d5c27921541219ddc111fec827448cb7397ea728f95865d971fa4dbb928a734adcdfbea5f872376c18a0423b7f33924a448730007942dffe9dbef2a72927582fa2873c210a39f522f7b9bd800c41002bd0d75000fd13f5f20d991b46053ce623763907ee951041c3a73797ec8ba136c1469fbb1e3912d09cdc642fc88311507c17357c3ae42224ac11f62c8284a9074e37378f9e78ff82c4b8bdceeb2485cf097f0de3cca4bb83e75044620dc99685897c4baea2101a5e9eed4fd4e147fd78867091d7b5146e6c8929c5d59e2548397c25039ee537706780c4906cb405ad7439b849d613ae722fd5650d6e254edc7d9c47582aa053617b7e692b6fc9422c993d258674ecb80bd0bd79a844c854a5460fa9eccb3323ad2bc1585039309473eac171c6703de0c8f6d937cd596bf69477b55ca12bac1074e39b6093a9a5d443a0eebf094dfa79819ee7089031d6efe1948e6b01f4146c5e73d3f14866e06d3fc2867acea4b181f277660cbf15dacb4e161d695eec67053f115f5b18ebced564104cf30db051260c0a1ef9c31a3ea2f9c996ba1620e5cf628fb5be5188a2bd7683bbc4939509bc67738d322c33d89795c2768189b84255da76f4276ff13e4d076710706f1f955c8a90502a059774beed0f052a380a17f4bb2c38f5104ae9ac0af2b3a5fa462778ca11247a59d4912f0b502d8eff1f071c1b967be6b7243dade2b471d43834b70648a98ea61100ba45f7407d5b366b437f61b14f070be0a5b371335f96b060574d531597b9793319d049525f46035648f67e04d1e025b232a91bf32570a5def67eda1772e34beca4d1e27c0d77a72b615f733a6a4fa1cb6514397a6a50d4334836862c44e5f0109e34e9e6fc0511e7ae09f7cbe9605a6ab8554e98e2fd1804e4d94c9b3a0f9d445b0277be54d4230e29a405fa97ddfc6a4355fb296c2de6372b2fb485876f6be194e3cda2549314a4821db26971164d7239157db938af89684d62a7ae1e3bbf4c8cdf73d8adb02b7d48a83d177cc459de1a961f69264a9672ee4a19673e3f21a2df92a34929eb2598bf170b8ec9d249450926ee14cf2b62bbc3c29ff2f6b048c4fdc4236c30bd82ea44d164d796ce8b0258b7be8db11f22eb8fb1dbeadb14dcaa05fdecfd68532595a7c7b4e3ea38262d38b754730aa92c26f4cb164369df4e4b010f26b83a8dab463257fa4870ae43152ed17b1fa193ec93e37d2020b402847a100a6a4914571c1756f5624774952f20b5022fbb58b2754fd876f0c103a6b9c6514cdcf3e58428b41559ccd80bcdb933289ea3566d6e121d87bb32ecf3380fc35a34fa89847e120a9379939876dfd64c4ec4b6541d1347c63674952876203c183d872b8b22979bf07d8c73f6f937278e21e0efb0cbbb708ca354b24c113fde8871145fb6133c6b8c3250c9df159fb7d45046166f0dcd802f55269a88b0f60621dcaee954a648d3b511ae39942a56b18702053b43ecafdd1846cf61b501ac660fc145c6c3a7f9194ae04ade04effb5fc64600f0a09352994d0e61d8d96e441cc74c340771f209b833330051822a21038bf8f3c3988c72b2525c7b0178fe91bf0d5b2611f87ad7ff3003452e7f27bff33a3d913db9dfc4c76364ba1afa00edc838f0fe648ef15c08ce36467bd2a12968ec6f7d3ff2648b631f32ef614fcb57ba5e151b1ab0de1489837cfaf59d2ca50374e783af54da68a16a3119a5e87e66e0648138aba2593f0ae5c02e307e88c08ae47d7c200e884a9c70c9ba27bdf6868b728099af4494fec9aa20a95f4a2a1d9a21de6c3dcbd4096386abf6d6414e81714cb82df87b022272024d17800baefe684f374a6822043fb12117b94c57cfd9a33e6675dde904181d15b073e6de795b7a7095d0beed0e3e7c078509a21c34019e2f58f95a1a9bc8fb586409f0a2bbb78915ee2a58d69d54c57bf5c303484272e5f1501c6004560f6d0723b152a847899417b519a3d3079dc38ee1df3009840469f9381a8ea61cf55a6f3b199df532271b00f045617f282d730d895c89e5a1ef7469fb86357a801fd1a5772d37e1ee0e6cd92f802abc44baa86d00ad2ba9afb11f137f51dcc3bbf68ff85fa3512a8dad879576a0e3f464de8ee35cc0ef34253296ec314a701592a10eb1da8692237bbfc9a41133f00ca2a71c41555396528239d0f456c8e5c239e60407004f8f4d1114cdc0117e72058e49e8a876d230063bdb16a5d652d58ab9a0202ead9bb0458ee757d52f4636a9947494b07a62c0080e57d3eb94f586d21969baae584ed8b7abebd5ee756f6867e81be8407f0e92a198b1d955c4d78eff1f7119d71a2f572daef3f9e8068b504ca42327a3c695665444ad89656d7bdd5bdc20d8a3c9bfd41ff4e3caa00a28bb1208a64268c113f30c394eee6744f7b75388e050a60deaeeb406b56b6d6dbf2eb1fd32722e2088a636739d1bc80f4178a58443eaaba23f1c536992fb4cb4bd0bac887369e4b27a9d621845d68893eb2fe5507d9cb529d893806d8e2ef669714ce4a105b031a13bc65d8b360ddecf2be4ce113c3a994c4ae0b2f785aec888062dc03adb404520b6280db401794ef8bd10db44992fb8d6b750b8d6b6cf8421f6616dc54610e9e8d549b6cc1a69e86ece9acba86e1eb569c9bcea15a879b247c2b16aeb8ce066a52e9017492d389e1c6dea6a8a6a1e35580f0a31a0010110a02cf9932ec0922190667727075232506dd4746464b148d817bd73efbfbf1e1f361c58db9a48286dad7bcc1811831313a9644346daf40eb672b1c6aeb3c264dc919dde54b84e5c467911332126ecb6cb79cdc374c15a49a5df7320edc017b4c0d1b314803357c2dc7ae238a057c39c2367336328a1e2d2950e406fcf893356c6ddf55a4802c37b1611b3be457fd1f81a8c9eebccf472ab376ed92db46be80f3d5ef9d83978b9993b3677f4907416a92e1a54c9d9b6bad3afe881d0a5ab4ba6ffffdcb185a9c37c8c89b5eb75fb6da2f0de920bf40ec3f7fb708b08c56685ce8b2c5edb4d72b4bf7418f02c4f23f69cd08b3d94fb40ff83f0a6347ba12c16ed4a0c8e7378a4730285179805361cc6a6d77385b7a3334eff4fcd40ac061e5f2761a6a47e08d8f971b34ad7c5723793aab314ccfe723554e680ac76337803f771988301dc3b52c3447db505635f609d1829a4109cedc5c2257665c03ee22520d4bd46da1a6797e8fe003b45d7758b497d124caf0ee0b11bfb9c9c5ef22d842273a65c22556bdef45ba3b9015ca91e679a9bce8548d32853798900f067b50aeb3f55d9ab50d90f66a0cbb0151fa15177a01e7ed79f6c7d63654b6a42db6e236f535deb2601425d20af861a85e3f8fb81c43adb1fc201f33688a6551d4649042a641c621b76bcf9bf05a92736d883fb64548da7111cfc79bd4dfbcef9b323c4c2bf24d6a8fdcfc69134a4a6ce323fb2a565d6072d69b801d42be93c7850ebfcdc4ad8ddd4e38cf95438d81506f778207847962041701676f7bedb8d07c1eb2aa155f285c627d9ff25bb9bbf4c9d7c954c858e066d7c569571089c7ccf47136071adc8569db3bbbe67e3b5dcece7464457814291bb4e7f28d0c115cdaf259734a968b32ea57aa928d9799918586713b097362d0a9f79306fddaade657fb0106b73442c299ce9f1218499e29a34219ea1b1a6b923ad102223490c804ed0f2dfc9064871c19367c2b4404fd02da2f32321cf92ca914e4eb3352fb5add68a556d2c4258a2202557c4c57e5c9a6a1362b62afc44f0ab5de87b2fa4f6747254fb446c0aa1b3778f4a95b612f87473b39a273a7df0d9799082b47aaa412d267773ed8b599555b2b8b3037b8e60a59f27fe5c499fdd296ae9d8f240f14fa9531ddc5dfdeef373e50b8ef2db267bc7cbb946e5d1c771d1301ab178c9831651c03aedb9837296921c79d610c9a806203481f553da1759115e0e40e70aada7a10688f2f5a56bb937f71fc417789a941bfd83215d2adf5c7d802d17affe1f6a261f4bd07b0b223fc93ee6cadc03a44b6fd3d8df10ad839ce84cb68aafc346fb0fa2d91656cf866eed933e04b80b215947d616568e2946188510d08418eebfecdc3f1fd07755a565eeecf6ba1da790d37ebf232363d4b6de1727790880283ef75d9ad1c86d915a521e9c0c36e7e1d060a68991f64cbc1c29209b06fbc8091b5e62c74f11bd969ddbdbff8ae2dfd51a206bb31a606f7f5f94706574bab63a0434b5c2e570f276bdbc4f34e196c2b1569a76e03ba1d7c2526caa8501f808a029223ac17edd1bb890ec488a2dda881a0e27cd20026aa06ee9589dcf7631e7f4e5814298856df23024e036f6418b3a3b4385ccb80df1137ded01e97967264b1f27762113bf7e4c0e70d1e243a7f706d5a9bb1962acb865b790b03636ab3d504d1c40c82f2aec3f925b5be385f0723917a70cd7fc9a2f5aae40c8f0a8d1bd3d98dc3726e6fbbd8b2781f9472a9b89bcf26848f5349623811e9bc2707e663719eb526f38ee6f339ee718e307b4117a2a04c2219181cc607a2f481375cbbc2e6a30fe50af878c71bf43049dfac3f2d9b00848fb8c05ba72438d29587d2a4e3e180f9ac806e618779cb1c7f1c4a5bd498024969e9ed935ab9beebbae579d1d6cc667a7db1ccbdb700dd27405e429df97ae1b98ad95fe5ba60789a97a65d90ce255225b3"}, 0x100c) [ 595.582291][T24891] binder: 24889:24891 ioctl c018620c 20000600 returned -22 [ 595.618859][T24886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 18:17:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000000)={0x2, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010003b0e000000000000000000000000f88f97a7c35fb0e2454ab79edf4f9309d50807cd807481535cd7752367fad60d880500008914ef1d549c5753086d7c5e97cd4c195687c384cf0c965965345ea23596f169b55ca819d11349fa307b9127a5ee89f0f20a9a4cfcaea2d579406840135c577dd0afda5ccad0adab8062e7b8ccb440d3d02ef8244f7187d570b3b4dbf82c5797ca94183f760d94e39c85ee00000000000000000000682f55f33df900", @ANYRES32=0x0, @ANYBLOB="030000000001000000000000", @ANYRES32=0x6, @ANYBLOB="1400120008000100677265000800020004001200"], 0x3c}}, 0x0) 18:17:07 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x48, 0x0, 0x0}) 18:17:07 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x201, 0x0) ioctl$int_in(r0, 0xc0000840045010, &(0x7f0000000000)) write$FUSE_GETXATTR(r0, &(0x7f0000000100)={0xff299a57}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 595.866059][T25010] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 595.979420][T25014] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 596.023256][T25018] binder: 25017:25018 ioctl c018620c 20000600 returned -22 18:17:08 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, 0x0) fcntl$getflags(r2, 0x0) getpgid(0x0) r3 = geteuid() getegid() fcntl$getownex(r0, 0x10, &(0x7f0000000780)) getresuid(0x0, 0x0, &(0x7f0000000840)) getresgid(&(0x7f0000000880), &(0x7f00000008c0), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) lstat(0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0}, &(0x7f0000000cc0)=0xc) fstat(0xffffffffffffffff, 0x0) getpgrp(0x0) getuid() getresuid(&(0x7f0000001700)=0x0, 0x0, &(0x7f0000001780)) fstat(0xffffffffffffffff, &(0x7f00000017c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001840)={0x0}, &(0x7f0000001880)=0xc) gettid() getgid() sendmmsg$unix(r2, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000340000b7c143700000008bba7f456c2579a7df16cee2a26c49cd7ee58022d99b2d0547b821b8d346d2b56e8ee0446c1a229453bc2c336e88ce277b91c09b4530c9e15a2fbde4e8954d1ba5b8c86b7c655d171df5e80cc1b5c16b45b60fe100"/113, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="d1e29b7114000000000000000100001888323993", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x4000}, {&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f40)="62d9b9d62ee09936fce881b2550fdc2981e99c581a741e243d7b763d190c717200238d3de1a1ed4149f4604efd5c917eb4f32db14eb5cfdd73c37282c004d5b3ed9942ee14657bdf6224d8eb6b9958612d3cf0a4c4e3f10922e8c6de354421403c2d01b2b7e6fa53ffa7210c8d0b5bcaa7f376d26f49fcef2357b4d7be156eafb98ffd6f0db38d57d32b8525bbd22423e81886f0d97fa934f043fac129e444fe3f49a7e34c91ac4a36cdde22abd4d4a87072beb0b3", 0xb5}], 0x1, &(0x7f00000010c0), 0x0, 0x4000004}, {&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000001580), 0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000c5c74603", @ANYRES32=r7, @ANYRES32, @ANYRES16=r6, @ANYBLOB], 0x3d, 0x44081}], 0x3, 0x20000000) getgroups(0x2, &(0x7f00000000c0)=[0x0, r4]) r8 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x8) r9 = socket$inet6(0xa, 0x400000000001, 0x0) close(r9) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r11 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x200004) openat$dsp(0xffffffffffffff9c, 0x0, 0x200000, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$cgroup_type(r8, &(0x7f0000000240)='threaded\x00', 0x9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r9, r11, 0x0, 0x80001d00c0d0) 18:17:08 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x4c, 0x0, 0x0}) [ 596.271494][T25126] binder: 25125:25126 ioctl c018620c 20000600 returned -22 18:17:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0xb, 0x69}}) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 18:17:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:17:13 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000007080), 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40040, 0x0) mkdir(0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, &(0x7f0000000380)=0x8) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,low\t\x00\x00\x00\x00\x00\x00\x00file0,workdir=./file1\\\x00']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 18:17:13 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x60, 0x0, 0x0}) 18:17:13 executing program 0: fstat(0xffffffffffffffff, 0x0) pipe(0x0) syz_genetlink_get_family_id$SEG6(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f00000018c0), 0x4000000000002ed, 0x0, 0x0) close(r1) accept4(r0, 0x0, 0x0, 0x0) close(r1) fchdir(0xffffffffffffffff) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)={{0x141, 0x1, 0xfd, 0x35e, 0x1b1, 0x69191e19, 0x12b, 0x7ed}, "", [[], [], [], [], [], []]}, 0x620) 18:17:13 executing program 3: request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000007c0)={'ex:'}, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x32000148) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', r0}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) inotify_add_watch(r1, 0x0, 0x32000148) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r2, 0x4d, "469f61", "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"}}, 0x110) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000), r2}}, 0x20) [ 601.881890][T25248] binder: 25240:25248 ioctl c018620c 20000600 returned -22 [ 601.905881][T25254] overlayfs: unrecognized mount option "low " or missing value 18:17:14 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x6000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000100)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002e5, 0x69, 0x0, &(0x7f0000000280)="b90003b700000000009e40f008001fffffe100004000638877fbac141414e9a33fa1c699da153f08a0e6e380f6010af683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) 18:17:14 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x68, 0x0, 0x0}) 18:17:14 executing program 4: r0 = syz_open_dev$adsp(0x0, 0xffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x80000000}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') fcntl$setstatus(r1, 0x4, 0xc6000) socket$inet(0xa, 0x0, 0x0) pipe(0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x1ff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6, 0xe, 0x0, 0xa8) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @multicast2}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 'veth0_to_bridge\x00'}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x101041, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=ANY=[@ANYRES32], 0x1}}, 0x0) r2 = memfd_create(&(0x7f0000000100)='\b\xe1\a\x00\x00\x00\x00', 0x0) write$eventfd(r2, &(0x7f0000000080)=0x20000000000084, 0x8) write(r2, &(0x7f0000000040)="0600", 0x2) sendfile(r2, r2, &(0x7f00000000c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0xfd}]}, 0x10) r4 = socket(0x10, 0x80000, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="800000ff", @ANYRES16=r5, @ANYBLOB], 0x3}}, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e7000000083d13775c4e71972f23c7b2048e0442d840685d0db6d3f2a8212f4ed699bb68178d99c873cc59", @ANYRES16=r6], 0x2}}, 0x20000050) syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x5, 0x100) 18:17:14 executing program 0: fstat(0xffffffffffffffff, 0x0) pipe(0x0) syz_genetlink_get_family_id$SEG6(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f00000018c0), 0x4000000000002ed, 0x0, 0x0) close(r1) accept4(r0, 0x0, 0x0, 0x0) close(r1) fchdir(0xffffffffffffffff) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)={{0x141, 0x1, 0xfd, 0x35e, 0x1b1, 0x69191e19, 0x12b, 0x7ed}, "", [[], [], [], [], [], []]}, 0x620) [ 602.160789][T25367] binder: 25362:25367 ioctl c018620c 20000600 returned -22 18:17:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) 18:17:14 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000140)=""/132, 0x84) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x7fffffff) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000200)={0x9, @raw_data="017d50dc2ecace2e3df3776aa94fe7025979d636548691fe9c7bd7c54feb7403e08c5bc55495dc8522971886cab87bb41933bca68d8839b3a1c6e68eff3bf87e1bbf36e16aa3f57aa41948e50046c3a868eafd5d40c82849452d27cab812622e5df4fb0a0cd8211e83beed372e7cac796fdfb9249489227cdf1cde5ae55e970b5b7509970ff6c877098eb1565abe5782ca60941352030d2b039e10d01105cd7abc677b32ff3db796ea6c6b59b7bf917441cac3d4e2c3905d91c7302881a075a8966fad8a8d0cb05a"}) 18:17:23 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1cd50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYBLOB="8a7cfcb0bd543a0737"], 0x0, 0x124}, 0x20) tkill(r0, 0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:17:23 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x6c, 0x0, 0x0}) 18:17:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) 18:17:23 executing program 4: keyctl$instantiate_iov(0x14, 0x0, 0x0, 0xfffffffffffffd66, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="feb5dab4da8ee00e1f5461a871fefcae21fc902da6b568c2535f0bdcc4b1dd2b8845bf48efcf", 0x26}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="c77342efcca3ff2ee5dd364792d476d044d2e65f12a0e1488665631e009eeee571597cb70084594b5aaaf17568bec2b5b6e3f133c304aa20775aabda61948f16626466b533b0ea41c3d6d5daba50d2d3014b795fcbacc7233eca4843ea651bad5d104475d6d6c85a20317b0d7e18e5fc2a43b5b4411502ecca72b41ba1402023449f6107d9fb38d24be9f1988095", 0x8e}, {&(0x7f0000000240)="359b58e244103d0c851811857458e6e3dfef74d15bec07855e27bd32", 0x1c}], 0x4) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x3, 0x400000) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000001800)) setsockopt(r2, 0x400, 0x5, &(0x7f0000001840)="ed0389eab102b0dfd8a87551e830b22f975d9fb51053219b63d310ea046155a25a1f8fff92ddf2f70b228ad6eb9e6bd766670a454aa9eea45dd0954ccce1ba2ac9f2329bf5c84218dffd574ed8aff5f25ac81c12166d99bfe49bffa50d18ba88afc4c5530502e6fb22c584cb2ebf38d25ec0bd7cafbea984bdc3386615e8b0d268dfd773713b7f3efd725962ab5602009d1761cd3d13cf97373fbeb44257bb28e7a465", 0xa3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, r1, 0x0, 0x5, &(0x7f00000005c0)='/dev/snapshot\x00'}, 0x30) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) fsetxattr$security_smack_transmute(r4, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f00000017c0)='TRUE', 0x4, 0x1) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x4, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0014f9f40700090400", 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) close(r3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) recvmsg$can_j1939(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000000c0)}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000100)=""/148, 0x94}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000400)=""/147, 0x93}, {&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f00000004c0)=""/212, 0xd4}, {&(0x7f00000029c0)=""/136, 0x88}], 0x8}, 0x1) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) 18:17:23 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r4, 0x0, 0x1}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={r4, 0xa0, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x4, @rand_addr="a417adabf7a7a0cb1df1c0538c21cf66", 0x40}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x1000, @mcast2, 0x5}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x11ea, @rand_addr="87eec19d8d120f2921cdd32224f8355f", 0xfff}, @in6={0xa, 0x4e20, 0x9, @remote, 0x200}]}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xb5, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000280)) 18:17:23 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180002001efe000030000000307c2800ff7f0000000000000000000b030000000800000000060000008c13f200000009ebff0000060000000000000700aed1d17433e13fde8b6b1a5787f47af06f0000025f00000000000000002ce90454ba3b1641807ec2a599238df1d0c79c7e2c38db09ab727d61da5ad247ccb15ba07b14389cea176f0c31d2a687de76a4c887b7b6a62aaceef4edd32925decd27146716a8075205336cadf65b9f2967814d02efc87cbabf6fe9ca1d8370298db3a586bde06c6e5b8b739a3e91a9486ced31"], 0x0, 0x5b}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffff9c, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1ff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x7, 0x1}, 0x0, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x9, 0x2}, &(0x7f0000000580)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)}}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={r1, 0x10, &(0x7f0000000ac0)={&(0x7f0000000900)=""/167, 0xa7, r2}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 611.219807][T25522] binder: 25517:25522 ioctl c018620c 20000600 returned -22 18:17:23 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() clone(0x3fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f00000000c0)='./bus\x00'}, 0x10) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) wait4(0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) lstat(&(0x7f00000016c0)='./file0\x00', 0x0) r1 = gettid() ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) setregid(0x0, 0x0) getresgid(0x0, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002180), 0x0) setregid(0x0, 0x0) getgid() fstat(0xffffffffffffffff, &(0x7f0000002280)) stat(&(0x7f0000003480)='./bus\x00', &(0x7f0000004700)) geteuid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) setreuid(0x0, 0x0) getresgid(&(0x7f0000006d80), &(0x7f0000006dc0), 0x0) gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3b) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) getgid() dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) getgid() 18:17:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) 18:17:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1cd50f34"], 0x4}}, 0x0) dup(0xffffffffffffffff) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYBLOB="8a7cfcb0bd543a0737"], 0x0, 0x124}, 0x20) tkill(r2, 0x4) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 611.733567][T25644] ptrace attach of "/root/syz-executor.0"[25643] was attempted by "/root/syz-executor.0"[25644] 18:17:23 executing program 0: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='(@!),:-]\x00') 18:17:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:17:24 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x74, 0x0, 0x0}) [ 612.243805][T25661] binder: 25660:25661 ioctl c018620c 20000600 returned -22 18:17:30 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="3ee86987211f", [{[{0x9100, 0x0, 0x1, 0x2}], {0x8100, 0x4, 0x0, 0x2}}], {@ipx={0x8137, {0xffff, 0x50, 0x40, 0x4, {@current, @current, 0xfffc}, {@random=0x1f420000, @random="cfcc04ea9175", 0x7}, "a79107ccd23de2de8f779684582f2ee95d2a0f049d744720bb73a88e9323cee153b1367e756bbeb3c72fd049d628a3f280da"}}}}, &(0x7f0000000200)={0xfffffc01, 0x1, [0xbc7, 0xc0d, 0x842, 0xc50]}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 18:17:30 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3f) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x5, 0x0, 0x0, 0x0, 0xfe}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:17:30 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x1ee) sendfile(r0, r1, 0x0, 0x10000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:17:30 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:17:30 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x7a, 0x0, 0x0}) 18:17:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 618.392949][T25776] binder: 25771:25776 ioctl c018620c 20000600 returned -22 [ 618.403603][ T26] audit: type=1804 audit(1573755450.477:87): pid=25774 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir084517945/syzkaller.ILamxf/157/file0" dev="sda1" ino=17105 res=1 18:17:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) r3 = dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="ac65193b", 0x4}], 0x1) 18:17:30 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x300, 0x0, 0x0}) 18:17:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800a1695e1dcfe87b1071") recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xfffffffffffffe40, 0x100100, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x9305d4) 18:17:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 618.607198][T25889] binder: 25887:25889 ioctl c018620c 20000600 returned -22 18:17:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) 18:17:30 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x500, 0x0, 0x0}) [ 618.866094][T26009] binder: 26008:26009 ioctl c018620c 20000600 returned -22 [ 624.672933][T26127] 9pnet: Insufficient options for proto=fd 18:17:36 executing program 5: 18:17:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:17:36 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4}}}}}}, 0x0) 18:17:36 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x600, 0x0, 0x0}) 18:17:36 executing program 0: 18:17:36 executing program 4: 18:17:37 executing program 4: 18:17:37 executing program 3: 18:17:37 executing program 0: [ 624.961447][T26137] binder: 26130:26137 ioctl c018620c 20000600 returned -22 18:17:37 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)) 18:17:37 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3015}) 18:17:37 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x700, 0x0, 0x0}) [ 625.338779][T26259] binder: 26257:26259 ioctl c018620c 20000600 returned -22 18:17:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:17:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:17:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:17:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'lort1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\xd3\xde\xb2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)) syz_open_dev$vcsa(0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 18:17:41 executing program 0: clone(0x201, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x10d) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200010a) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) close(0xffffffffffffffff) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) 18:17:41 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x7a9, 0x0, 0x0}) [ 629.252112][T26372] binder: 26370:26372 ioctl c018620c 20000600 returned -22 18:17:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:17:41 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x7aa, 0x0, 0x0}) 18:17:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:17:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:17:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:17:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) [ 629.536332][T26495] binder: 26492:26495 ioctl c018620c 20000600 returned -22 18:17:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r5 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x208200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCLINUX5(r9, 0x541c, &(0x7f00000000c0)={0x5, 0x80000000, 0x7, 0x4, 0x100000000}) sendfile(r0, r5, 0x0, 0x8000fffffffe) 18:17:50 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x2000, 0x0, 0x0}) 18:17:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:17:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0xd74, 0x0, 0x20, 0x4, 0x2}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x1c, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x8}]}, 0x1c}}, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) 18:17:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:17:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_PIT2(r1, 0xc208ae62, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_STATS(r10, 0x80f86406, &(0x7f0000000180)=""/33) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000000c0)={[0x80000001, 0x401, 0x6, 0x8, 0x8e, 0x0, 0x3, 0xf3a4, 0x7f, 0x50, 0x5, 0x1f, 0x3, 0x3, 0x1, 0x101], 0x3000, 0x10000}) [ 638.805103][T26628] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 638.818272][T26632] binder: 26631:26632 ioctl c018620c 20000600 returned -22 [ 638.850208][T26635] netlink: 'syz-executor.3': attribute type 13 has an invalid length. 18:17:51 executing program 4: ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:17:51 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000740)=0xdfb49c2e26d5c94b, 0x4) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$tipc(0x1e, 0x0, 0x0) socket$inet(0xa, 0x1000000000801, 0x84) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="cc28d1ed6dd655ebf2f2b95198ae871ea138604213a91b6c2b923166ef897ea548c8274bb2bb2fd6ac8b634d9200e74c9273989f1378b20c36404425b1d3368177a1535fc5102c6d990784d7fcea0e4fcb76f909edc2017d15820cb82ced7843cdad0065d3fc0b2717e8a1e3cff3e0dd80544ecd2abe0435aba9f08804c5ce63d9121337267eebbc70ef7d11e443a181c2be5590e192086a66275657598db8b50c5b0a", 0xa3) 18:17:51 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x4800, 0x0, 0x0}) 18:17:51 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000340)={0x0, 0x6}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000000)=[{0x0}], 0x1) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score\x00') fcntl$getownex(r6, 0x10, &(0x7f0000001480)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x100004}, 0xfd57) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f00000016c0)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0x48a) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) open(0x0, 0x0, 0x400000000) 18:17:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009f00000048b4f6f68a886769485aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dddff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c587c5db4ecaf4ad2dca0c8983bac03b390ae9c03d76f93d7b27dedd9f95e317d2b57eae278aa743d5aeeea569b70a06a984e5c97fbfd4b5a4ab5c836b997ad9b2d95c0f98a6020000000000000046931ad93bd000233b1aa2b4ef004cada744ed258ca8eb243592000de583ccd0c46aa47ea2bd354e574ede07b1ce8a058210f4d4a7c1825973f886426e56c31e84fba623a0df8b5db9c79b1fc37606786b963081cc5dfca933ad8ff2c162f3ea6036582d6cb6d8ada93b938e6b5678a3822af0f6186cdb94ba3e2fd8ea04b06e38309d082fccd02459856897f35090b55babb41617da4048e322f78272ef52c0305cbe2971fcbb7247fa5e5a69e559a06c2813e403b680f5df5ef845c7c76ed653c3ab4356781c2607faa735950cf7f3fb79f29a533e08e4d1ad3ee387"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 639.093941][T26749] binder: 26745:26749 ioctl c018620c 20000600 returned -22 18:17:51 executing program 4: ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:18:00 executing program 5: lsetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000140)='security.selinux\x00', 0x11, 0x2) set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0xae, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), &(0x7f0000000240)=0x4) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000200)='security.selinux\x00', 0x0, 0x0, 0x0) 18:18:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:18:00 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x4c00, 0x0, 0x0}) 18:18:00 executing program 4: ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:18:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:18:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 648.330164][T26888] binder: 26884:26888 ioctl c018620c 20000600 returned -22 18:18:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:18:00 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x6000, 0x0, 0x0}) 18:18:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) [ 648.620416][T27003] binder: 27002:27003 ioctl c018620c 20000600 returned -22 18:18:00 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x6800, 0x0, 0x0}) 18:18:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) [ 648.917276][T27114] binder: 27113:27114 ioctl c018620c 20000600 returned -22 18:18:01 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:18:06 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x6c00, 0x0, 0x0}) 18:18:06 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f40)='net/dev_mcast\x00') gettid() r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) preadv(r0, &(0x7f00000017c0), 0x1af, 0x0) 18:18:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:18:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009f00000048b4f6f68a886769485aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dddff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c587c5db4ecaf4ad2dca0c8983bac03b390ae9c03d76f93d7b27dedd9f95e317d2b57eae278aa743d5aeeea569b70a06a984e5c97fbfd4b5a4ab5c836b997ad9b2d95c0f98a6020000000000000046931ad93bd000233b1aa2b4ef004cada744ed258ca8eb243592000de583ccd0c46aa47ea2bd354e574ede07b1ce8a058210f4d4a7c1825973f886426e56c31e84fba623a0df8b5db9c79b1fc37606786b963081cc5dfca933ad8ff2c162f3ea6036582d6cb6d8ada93b938e6b5678a3822af0f6186cdb94ba3e2fd8ea04b06e38309d082fccd02459856897f35090b55babb41617da4048e322f78272ef52c0305cbe2971fcbb7247fa5e5a69e559a06c2813e403b680f5df5ef845c7c76ed653c3ab4356781c2607faa735950cf7f3fb79f29a533e08e4d1ad3ee387"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:18:06 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:18:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 654.651772][T27235] binder: 27233:27235 ioctl c018620c 20000600 returned -22 18:18:06 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x7400, 0x0, 0x0}) 18:18:06 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) [ 654.912757][T27350] binder: 27349:27350 ioctl c018620c 20000600 returned -22 18:18:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, 0x0) 18:18:07 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x7a00, 0x0, 0x0}) 18:18:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009f00000048b4f6f68a886769485aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dddff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c587c5db4ecaf4ad2dca0c8983bac03b390ae9c03d76f93d7b27dedd9f95e317d2b57eae278aa743d5aeeea569b70a06a984e5c97fbfd4b5a4ab5c836b997ad9b2d95c0f98a6020000000000000046931ad93bd000233b1aa2b4ef004cada744ed258ca8eb243592000de583ccd0c46aa47ea2bd354e574ede07b1ce8a058210f4d4a7c1825973f886426e56c31e84fba623a0df8b5db9c79b1fc37606786b963081cc5dfca933ad8ff2c162f3ea6036582d6cb6d8ada93b938e6b5678a3822af0f6186cdb94ba3e2fd8ea04b06e38309d082fccd02459856897f35090b55babb41617da4048e322f78272ef52c0305cbe2971fcbb7247fa5e5a69e559a06c2813e403b680f5df5ef845c7c76ed653c3ab4356781c2607faa735950cf7f3fb79f29a533e08e4d1ad3ee387"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 655.241289][T27463] binder: 27461:27463 ioctl c018620c 20000600 returned -22 18:18:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, 0x0) 18:18:07 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$setpipe(r4, 0x407, 0x7fff) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RCREATE(r8, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0xf0, 0x2, 0x8}, 0x5}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x797b6a81fe5d7c82, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) 18:18:07 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0xa907, 0x0, 0x0}) 18:18:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000280)={0x6, 0x6, 0x2}) mount$overlay(0x40000f, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x90804, &(0x7f0000000280)=ANY=[]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 655.495949][T27577] binder: 27576:27577 ioctl c018620c 20000600 returned -22 [ 655.971611][ C1] net_ratelimit: 18 callbacks suppressed [ 655.971638][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 655.983057][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 656.291608][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 656.297406][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 656.303175][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 656.308911][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:18:16 executing program 5: mknod(0x0, 0x8, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000440)=ANY=[@ANYRES16=r2]) dup2(0xffffffffffffffff, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000600)={{0x0, 0x4, 0x0, 0x0, 'syz0\x00', 0x6}, 0x1, 0x4, 0x0, 0x0, 0x1, 0x3f, 'syz1\x00', &(0x7f0000000280)=['(\x00'], 0x2, [], [0x46, 0x7f, 0x9, 0x3ff]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a19900001b2ee7ceb4b3ca0eef7c705c000000632c952e866ee4cf0000bf367c01480000b802000089990100ffffffff0000e76700000000"], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) r6 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f0000000140)) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) r8 = socket(0x1, 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) mount$fuseblk(&(0x7f0000000480)='/dev/loop0\x00', &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)='fuseblk\x00', 0x2, &(0x7f0000000740)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}], [{@smackfsroot={'smackfsroot', 0x3d, '(em0vboxnet0lo+,&'}}, {@obj_role={'obj_role', 0x3d, '#'}}, {@subj_user={'subj_user', 0x3d, '/dev/autofs\x00'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}]}}) r10 = geteuid() stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$dmmidi(0x0, 0x0, 0x802) r13 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r13, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r14) gettid() r15 = socket(0x1, 0x0, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r16) sendmsg$unix(r12, 0x0, 0x0) r17 = syz_open_procfs(0x0, 0x0) sendfile(r17, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r17, 0x84, 0x1d, 0x0, &(0x7f0000000140)) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) mount$fuseblk(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)='fuseblk\x00', 0x0, &(0x7f0000000740)={{'fd', 0x3d, r17}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r18}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read'}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x80000000}}], [{@smackfsroot={'smackfsroot', 0x3d, '(em0vboxnet0lo+,&'}}, {@obj_role={'obj_role', 0x3d, '#'}}, {@subj_user={'subj_user', 0x3d, '/dev/autofs\x00'}}, {@uid_eq={'uid', 0x3d, r19}}]}}) r20 = geteuid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) r21 = socket(0x0, 0x0, 0x0) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f00000001c0), 0x0) r22 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r22, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980)) getgroups(0x1d4, &(0x7f0000000a00)=[0xee01, 0xffffffffffffffff, 0x0, r24]) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="39000000130009006900000000000000ab008048100000004600010700000014190001c025000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) fstat(0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000440), 0x0, &(0x7f0000000700)=0x0) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) r27 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r27, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r29 = gettid() timer_create(0x9, &(0x7f0000000140)={0x0, 0x16, 0x4, @tid=r29}, 0x0) setgid(0x0) socket(0x1, 0x80004, 0x1) setreuid(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@abs={0x3}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r29}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x40}, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x4}, [{0x2, 0x2, r5}, {0x2, 0x4, r9}, {0x2, 0x4, r10}, {0x2, 0x2}, {0x2, 0x5314c5c5353a3f20, r11}, {0x2, 0x4, r16}, {0x2, 0x0, r18}, {0x2, 0x2, r20}, {}], {0x4, 0x6}, [{0x8, 0x1, r23}, {0x8, 0x1, r25}, {0x8, 0x1}, {0x8, 0x7}, {0x8, 0x4, r26}, {0x8, 0x5}, {0x8, 0x6, r28}, {0x8, 0x7bed5e79f938e55c}], {}, {0x20, 0x2}}, 0xac, 0x2) r30 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000", @ANYRES16=r30, @ANYBLOB="040025bd7000fe86df250b000000bc96c8b6f92c97bd9e13832285f39d080508bfaff697f6e720e38e28cc02623cae442b180b069ee989e7d10784a85a99a31f82fb2e172a57090c3d68bacfff24586384cdae23e178c0021140cf05b124ce"], 0x3}, 0x1, 0x0, 0x0, 0x20008800}, 0x4001) ioctl$KVM_NMI(r2, 0xae9a) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:18:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:18:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, 0x0) 18:18:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:18:16 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0xaa07, 0x0, 0x0}) 18:18:16 executing program 0: prctl$PR_GET_DUMPABLE(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x0, "8b63e98a6e9a990ceacccaa0722f7b17adbfb251c09e5993d319d88199f6923e646c1d3eaad49bc3c0a86bd1683c51ec36b5d2dab5a220e04e0b20637e2b5a8dd3403bbe1ccf681d083e2307d3f5597b"}, 0xd8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x8000, 0x7f, 0x40}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) finit_module(r2, &(0x7f0000000300)=',[:/trusted\x00', 0x3) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r3, 0x2081ff) r4 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x21, 0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2809) [ 664.259942][T27706] binder: 27705:27706 ioctl c018620c 20000600 returned -22 18:18:16 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:18:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009f00000048b4f6f68a886769485aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dddff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c587c5db4ecaf4ad2dca0c8983bac03b390ae9c03d76f93d7b27dedd9f95e317d2b57eae278aa743d5aeeea569b70a06a984e5c97fbfd4b5a4ab5c836b997ad9b2d95c0f98a6020000000000000046931ad93bd000233b1aa2b4ef004cada744ed258ca8eb243592000de583ccd0c46aa47ea2bd354e574ede07b1ce8a058210f4d4a7c1825973f886426e56c31e84fba623a0df8b5db9c79b1fc37606786b963081cc5dfca933ad8ff2c162f3ea6036582d6cb6d8ada93b938e6b5678a3822af0f6186cdb94ba3e2fd8ea04b06e38309d082fccd02459856897f35090b55babb41617da4048e322f78272ef52c0305cbe2971fcbb7247fa5e5a69e559a06c2813e403b680f5df5ef845c7c76ed653c3ab4356781c2607faa735950cf7f3fb79f29a533e08e4d1ad3ee387"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:18:16 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x27848, 0x0, 0x0}) [ 664.562337][T27818] FAULT_INJECTION: forcing a failure. [ 664.562337][T27818] name failslab, interval 1, probability 0, space 0, times 0 [ 664.636405][T27818] CPU: 0 PID: 27818 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0 [ 664.644338][T27818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.653650][T27821] binder: 27820:27821 ioctl c018620c 20000600 returned -22 [ 664.654410][T27818] Call Trace: [ 664.654444][T27818] dump_stack+0x11d/0x181 [ 664.669265][T27818] should_fail.cold+0xa/0x1a [ 664.673895][T27818] __should_failslab+0xee/0x130 [ 664.678748][T27818] should_failslab+0x9/0x14 [ 664.683364][T27818] __kmalloc+0x53/0x690 [ 664.687555][T27818] ? terminate_walk+0x1d0/0x250 [ 664.692417][T27818] ? tomoyo_realpath_from_path+0x83/0x4c0 [ 664.698146][T27818] tomoyo_realpath_from_path+0x83/0x4c0 [ 664.703839][T27818] ? tomoyo_get_mode.part.0+0x5c/0xb0 [ 664.709233][T27818] tomoyo_path_number_perm+0x10a/0x3c0 [ 664.714730][T27818] ? __fget+0xb8/0x1d0 [ 664.718809][T27818] tomoyo_file_ioctl+0x2c/0x40 [ 664.723636][T27818] security_file_ioctl+0x6d/0xa0 [ 664.728588][T27818] ksys_ioctl+0x64/0xe0 [ 664.732756][T27818] __x64_sys_ioctl+0x4c/0x60 [ 664.737397][T27818] do_syscall_64+0xcc/0x370 [ 664.741906][T27818] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 664.747800][T27818] RIP: 0033:0x45a219 [ 664.751699][T27818] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 664.771304][T27818] RSP: 002b:00007f15a7b96c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:18:16 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x1000000, 0x0, 0x0}) 18:18:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000000000100f9ff000002"]) [ 664.779697][T27818] RAX: ffffffffffffffda RBX: 00007f15a7b96c90 RCX: 000000000045a219 [ 664.787706][T27818] RDX: 0000000020000140 RSI: 00000000400442c9 RDI: 0000000000000004 [ 664.795653][T27818] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 664.803614][T27818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15a7b976d4 [ 664.811572][T27818] R13: 00000000004cf8b0 R14: 00000000004db5d8 R15: 0000000000000003 18:18:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/87, 0x57}], 0x1}, 0x80000001}], 0xf24b5bfea4ccf099, 0x0, 0x0) [ 664.861925][T27818] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.881832][T27928] binder: 27927:27928 ioctl c018620c 20000600 returned -22 [ 665.171629][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 665.177414][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:18:25 executing program 5: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffe}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x0, 0xebc}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0xa808) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') sendfile(r4, r5, 0x0, 0xa808) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x1, 0x5, 0x0, 0x0, 0x0, 0x100000001, 0x4408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x6}, 0x0, 0x8, 0x200000, 0x3, 0x7, 0x10000}, r0, 0xd, 0xffffffffffffffff, 0x8) socket$inet_udp(0x2, 0x2, 0x0) 18:18:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:18:25 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:18:25 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x2000000, 0x0, 0x0}) 18:18:25 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote}, 0x1c) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18:18:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'lort1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\xd3\xde\xb2\x00', 0xee}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}, 0x0, 0x1}) [ 673.585270][T28052] FAULT_INJECTION: forcing a failure. [ 673.585270][T28052] name failslab, interval 1, probability 0, space 0, times 0 [ 673.636538][T28060] binder: 28050:28060 ioctl c018620c 20000600 returned -22 [ 673.646212][T28052] CPU: 0 PID: 28052 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0 [ 673.654123][T28052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.664248][T28052] Call Trace: [ 673.667626][T28052] dump_stack+0x11d/0x181 [ 673.672029][T28052] should_fail.cold+0xa/0x1a [ 673.676658][T28052] __should_failslab+0xee/0x130 [ 673.681518][T28052] should_failslab+0x9/0x14 [ 673.686064][T28052] __kmalloc+0x53/0x690 [ 673.690227][T28052] ? tomoyo_encode2.part.0+0xd9/0x260 [ 673.695603][T28052] tomoyo_encode2.part.0+0xd9/0x260 [ 673.700809][T28052] tomoyo_encode+0x34/0x50 [ 673.705279][T28052] tomoyo_realpath_from_path+0x14a/0x4c0 [ 673.710922][T28052] tomoyo_path_number_perm+0x10a/0x3c0 [ 673.716411][T28052] ? __fget+0xb8/0x1d0 [ 673.720566][T28052] tomoyo_file_ioctl+0x2c/0x40 [ 673.725455][T28052] security_file_ioctl+0x6d/0xa0 [ 673.730396][T28052] ksys_ioctl+0x64/0xe0 [ 673.734560][T28052] __x64_sys_ioctl+0x4c/0x60 [ 673.739157][T28052] do_syscall_64+0xcc/0x370 [ 673.743688][T28052] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 673.749580][T28052] RIP: 0033:0x45a219 [ 673.753510][T28052] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 673.775899][T28052] RSP: 002b:00007f15a7b96c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:18:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x10000, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r1, 0x80006) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0x1, &(0x7f0000000080)='\x00', 0xffffffffffffffff}, 0x30) r4 = syz_open_procfs(r3, &(0x7f00000004c0)='net/udplite6\x00') openat$cgroup_ro(r4, &(0x7f0000000000)='mem\x00\x01y/\x06\xea\xe847G\xa8\xff\xff\x15\xd4B\xab\xe3\xfa', 0x0, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000040), 0x0) [ 673.784399][T28052] RAX: ffffffffffffffda RBX: 00007f15a7b96c90 RCX: 000000000045a219 [ 673.792373][T28052] RDX: 0000000020000140 RSI: 00000000400442c9 RDI: 0000000000000004 [ 673.800340][T28052] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 673.808392][T28052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15a7b976d4 [ 673.816366][T28052] R13: 00000000004cf8b0 R14: 00000000004db5d8 R15: 0000000000000003 18:18:26 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x3000000, 0x0, 0x0}) 18:18:26 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='4'], 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) msgsnd(0x0, &(0x7f0000000340), 0x8, 0x0) [ 674.094254][T28176] binder: 28175:28176 ioctl c018620c 20000600 returned -22 [ 674.112717][T28052] ERROR: Out of memory at tomoyo_realpath_from_path. 18:18:26 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1b) 18:18:26 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:18:26 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x4000000, 0x0, 0x0}) [ 674.442762][T28292] binder: 28291:28292 ioctl c018620c 20000600 returned -22 18:18:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000001500)='/dev/vcsa#\x00', 0x1, 0x141001) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) pipe(&(0x7f0000000300)) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, [], 0x23}, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) 18:18:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:18:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c9, &(0x7f0000000140)={0x2, 0x0}) 18:18:34 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x5000000, 0x0, 0x0}) 18:18:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000100)) 18:18:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 18:18:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x2, &(0x7f0000000140)={0x2, 0x0}) 18:18:35 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000080)="2e0f38f126098866dfa8a1c00f07baf80c66b851f8608666efbafc0cb00dee6467660f3810cf6766c7442400440000006766c74424022ad16bc46766c744240600000000670f011c24f30fc7752266b80000c0fe0f23d0b89b008ee866353000000f0f23f8b83b008ed866b9800000c00f326635010000000f30", 0x234}], 0x32, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = open(0x0, 0x60002, 0x0) ioctl$KDGKBDIACR(r4, 0x4b4a, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 682.960352][T28416] binder: 28413:28416 ioctl c018620c 20000600 returned -22 18:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:18:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x10, &(0x7f0000000140)={0x2, 0x0}) 18:18:35 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x6000000, 0x0, 0x0}) [ 683.360007][T28531] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 683.389657][T28531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 18:18:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x4c00, &(0x7f0000000140)={0x2, 0x0}) [ 683.409999][T28531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:18:45 executing program 5: 18:18:45 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x7000000, 0x0, 0x0}) 18:18:45 executing program 0: 18:18:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x4c01, &(0x7f0000000140)={0x2, 0x0}) 18:18:45 executing program 3: 18:18:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 693.528142][T28661] binder: 28657:28661 ioctl c018620c 20000600 returned -22 18:18:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x5421, &(0x7f0000000140)={0x2, 0x0}) 18:18:45 executing program 0: 18:18:45 executing program 3: 18:18:45 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x20000000, 0x0, 0x0}) 18:18:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x5450, &(0x7f0000000140)={0x2, 0x0}) 18:18:45 executing program 0: [ 693.917453][T28777] binder: 28775:28777 ioctl c018620c 20000600 returned -22 18:18:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'ip\x8ei0\x00\x00@\x00', 0xc205}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x3e8, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb8, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) 18:18:49 executing program 3: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) creat(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fallocate(r0, 0x4000000000000010, 0x0, 0x7fff) 18:18:49 executing program 0: add_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="2e22ce1bc438f7bcbb7c35b39fb5fdf11e9856aeb272f7b10b79e7f8739f70fc290d8e0d43be7bbc9595c8b5a5a7453abe2dc1bdb63dbdc83bb6da5587a7de78d16d299d91d912710967084fbdcea0eed4dee1de5bc765db6e6a702e07", 0xfd66, 0x0) 18:18:49 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x48000000, 0x0, 0x0}) 18:18:49 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x5451, &(0x7f0000000140)={0x2, 0x0}) 18:18:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 697.743276][T28901] binder: 28898:28901 ioctl c018620c 20000600 returned -22 18:18:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:18:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'lort1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\xd3\xde\xb2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 18:18:49 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x48780200, 0x0, 0x0}) 18:18:49 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x5452, &(0x7f0000000140)={0x2, 0x0}) [ 697.926168][T29017] binder: 29013:29017 ioctl c018620c 20000600 returned -22 18:18:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:18:50 executing program 0: r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x80) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1b43eecc46392924}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800210a00000000000020000a000000000040000000000014000200000000000000000000000405000000017f5940bb84a86eb3c52c9bb4ef9ea1d6d3508645473ffc1cab12bc0e5833cab07fc5f7ffffffffffff0f7cc1788de802f61e717af4c9c041435167cff433647495572ae90ea9b6dc9de7739bb8b8c6a00bc0513dc9a288daaa4bd5b4e312efb78c1ab75e11ff216777376c0572f03bb0dd64c2384c88e52e93ba8f52c587f059b33f78c58c910791b9605d058f053d5c1413b5334b41b229ee5720ce5a69913afa037ed2fef405ba91e20dfaa7e67e6ad73decdb6a2a033270000080000000000b5e067b515e377bcc11ed14c97405000000000000001592ad4d0cb4ca3be8044cdf31238cd064cf483596759e591f000000000000c11804000000b8da58672312d4f5c9ec1433923b00c0fe09e9da1eaa29a2d5f0bfe827740e8ea5be4afc67cddcb5cb067a5a49daf0e2124def6854362fc9a8b218d7f2d43de8f10789ea1e202456eabe8dbf2643485f991b8e577c7eecc62b2f670c9b0c31a8df1bed64d0fd7a262aeaac37a0a47c2ae1fa37b5c1c7a933a4cbc1490c4e8c140b409c0989f9fce93741745bade74f64c730d55f7fd850749d72d282733ae810d1a52792006383869b5600707edfb14a0af9195f9af773f4a9cc0d0f13ba6765207675ace872aac44d40ff05473dbf2323d3f1b2c86f33a2919daf06000000a8942a7f8fcaab2017bffb970ccb50d0971fd084b3199edd1999ff4f314152bd55c3d0fb180000000000000000000000000000001937d09d66539d10b463226761128dbf485306b868308aee4cb4774556ce2481bf6395e22aedb73097df96bf538c1ec1a40138c52ab3e81ad6b3fb1cabf8742e91eca22b2e497c13577b308eaf6b59ec6462ed3b9d999e02ddb468bd97be0a1ba2e828699dc6ded5179f76d40ae1cee541638e475d75f3967b2fc3f65f1b537b8838a44bc72f3b84da647654f53dedeccbaf70d217da2c5d3e7865e794d22c69689a29b12dc7284372d0b660ec4afb6b13bdf65e3e413a46086cc919bcc418c3d5e95b412739534a805d316aa4f8f22486262562bf60ab007717d3a3277b88971ac31df116cfea21ad9c7561333e54f796a73efd559132bf2ce7ffc75edd160b44e8"], 0x30}}, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000580)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40800) ioctl$TCSBRKP(r4, 0x5425, 0x20000000000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01760400", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x10) timer_getoverrun(0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000100)=0x80000001, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r6, 0x0, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000005c0)={r6, 0xfffffff8, 0x20}, 0xc) eventfd2(0x64a1, 0x800) sendmmsg$alg(r0, &(0x7f0000000140), 0x570, 0x0) 18:18:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'ip\x8ei0\x00\x00@\x00', 0xc205}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x3e8, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb8, 0x0, 0x0}, 0x40) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) 18:18:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009f00000048b4f6f68a886769485aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dddff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c587c5db4ecaf4ad2dca0c8983bac03b390ae9c03d76f93d7b27dedd9f95e317d2b57eae278aa743d5aeeea569b70a06a984e5c97fbfd4b5a4ab5c836b997ad9b2d95c0f98a6020000000000000046931ad93bd000233b1aa2b4ef004cada744ed258ca8eb243592000de583ccd0c46aa47ea2bd354e574ede07b1ce8a058210f4d4a7c1825973f886426e56c31e84fba623a0df8b5db9c79b1fc37606786b963081cc5dfca933ad8ff2c162f3ea6036582d6cb6d8ada93b938e6b5678a3822af0f6186cdb94ba3e2fd8ea04b06e38309d082fccd02459856897f35090b55babb41617da4048e322f78272ef52c0305cbe2971fcbb7247fa5e5a69e559a06c2813e403b680f5df5ef845c7c76ed653c3ab4356781c2607faa735950cf7f3fb79f29a533e08e4d1ad3ee387"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:18:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x5460, &(0x7f0000000140)={0x2, 0x0}) 18:18:56 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x4c000000, 0x0, 0x0}) 18:18:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x100000) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_pwait(r6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x401, &(0x7f00000001c0)={0x1000}, 0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x0, 0x317000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="67440f1067543e0f0fe41cf20f01f8c7442400e0000000c744240200280000c7442406000000000f01142467f30f1c456f266567450fc7be020000000f01cf3e660f3880ac6c5f00c0fe4d0fc79e99890000f3400faed2", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:18:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0300a1695e1dcfe87b1071") ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)={0x1, {}, 0x5, 0xc73}) r1 = socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100)="6f7e8fc63068b3bd803a81c42175fa68ef1646a5d8f258caeccfdf250edf2dbf8d10453d963f2e51eec9fa7faa31b1a9807de4ed2f40d2daccaf96862cb20fd740d28a3ddc7ad34d54b9a81cf97c977f01f606fbed521e6c565a2fd3c5cfd02020339fd0d522b9eff12bc1554c39c572e29b4df24e6a1ea9f10da2c89057a183447a0c23164f9f7a16e6b91e7c6eee81a922d7a81bee909bac111a899d5b823dd9979fcfb17c3a0df8094b2a37d4c372ab43ddf887d7ae7f02498e06987bef934e10a96199fe7e3a53bcf6254c9d5c4d5819d76b404da40625d606ef2007139f00acfc63b2cb0c634a6bca", 0xeb, r3}, 0x68) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000280)=0x18) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x83) r5 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_buf(r5, 0x84, 0x2c, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) [ 704.311519][T29152] binder: 29147:29152 ioctl c018620c 20000600 returned -22 18:18:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x6364, &(0x7f0000000140)={0x2, 0x0}) 18:18:56 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x60000000, 0x0, 0x0}) 18:18:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8901, &(0x7f0000000140)={0x2, 0x0}) 18:18:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="01", 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) [ 704.628246][T29272] binder: 29270:29272 ioctl c018620c 20000600 returned -22 18:18:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x247, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb410600bbed81c1891db25757e506509c0e84024f4b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f842473a457206fcb95c665a50bd1a286b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa1f3c97a8728bf67e946ec12b3a6d4024f87af235716ed0be9fb9042387"], 0x5) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) openat$tun(0xffffffffffffff9c, 0x0, 0x1e9cb2d8372b3286, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90c8c48258f8dbe82e16cf000000000000000000000000000000000000000000000001fe00790ae2fd45d54b107c8c2403005e32f17799d6707432ff48bc085763314166443ce72c74f3db890e1ff15a10d91f67e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd117252e47ffda1a869db7e632df4de8572344b419c45c210000000092d8255170c16822bdffd313660489c4c971a548ea5480dae93c7e33bdef00000000d8fd8c6e62d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db2699f1210fab7071cc3094078a04478caab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f9197e7a5513c13e79d46bb4b84c16fd56ee450e411d75ab7613b784ba7580b2a0942394ed1737517eed14892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x1800000000000060, 0xe80, 0x0, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff08", 0x0, 0x100, 0xf2ffffff}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x18201) r5 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0xee01}}) msgsnd(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgctl$IPC_RMID(r5, 0x0) msgrcv(r5, &(0x7f0000000780)={0x0, ""/157}, 0xa5, 0x0, 0x3800) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x44) syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x2, 0x2) 18:18:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:19:01 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) set_robust_list(&(0x7f00000006c0)={&(0x7f0000000640), 0x81e, &(0x7f0000000680)}, 0x18) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpgid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000000)="218da201720a193050174775a61362a8c5b826e3355f1b553a242040cd2b1d790c51ae0d5ab96ef914f15aec62b0c700ab6c69168ad5def32b1256a6936a07ac7e9b89ab7d0d0babe065bd817cf57886c93d8aeb17ea8beb017ea88eb05597d01ce17d0a2379", 0x66}, {&(0x7f0000000240)="1795740090a2ff13001f94ab754d0b5ed1bccff357197742997046f89d7dfdb6d85e8e143839f12ec16b39ba73c90039b34fdc6ac03b83f2ccda3367bfcdc0c5acc24ed76366343f49c7525da22429c85db2bb7ba15d56b74a52bdec8427ca2e390a6cee5bcfcaad8f7d0cf12e821c0d0c6fea5b5abee24b1218249436e7fe925a8baf0ec3fefdd763382f263b9da1143d5a52577b033d5c146d2399a5880d011ceb2509155a23b02d4f63b660a932355bcde130a3bda65feb0e367df03969702d79809ceea0a0e29cbbb7b6791b40037c7dadd2c73aacbb803086b86b26", 0xde}, {&(0x7f0000000340)="31ae87d70f1fb245a9fa4d5a7cd22a153fb2b8aecf45dbcb6a49602784bd5036c2b5dc494350e0060d4f6c925e0f960ed3e0834cce5a7052b16a03d33cb9c02d3f16569b5f6b8ca0ea54d9aea188d8eefbaff13d05a52c4724684a0d1e1a12ace63ce5c3c8fe57ac277f605b6f3f06f83e6c342bc0d0e3e55acfa1b04492ee4b716c", 0x82}, {&(0x7f0000000080)="fbc87d", 0x3}, {&(0x7f0000000400)="0d9562de1284b8ba685f0b0bfacc1db85c24222fd7429114d4202f92d462cb5605af788eec3b2250d0adb8b56ee9380406a6fd64990dbab1cdd29229e3c4d9f190930a2a3891342f73bfa37a03a1559e3d595def300b5c4bc6cf7aa57c394223130de463c7f28ff0328349dcaf7723fdff8ba68c785bb943067334891adee1acaccb29e8acec57cbed3d30ac54461b04678acce9718be6c51a5794fe", 0x9c}, {&(0x7f00000004c0)="a87b7dbee170768fe1f9c350a28e146808da8b7201f1fa35904a4c79c6da693b3fe2c767cc17d4d2815e47de06154c6861e55981ee956f78a46ac3cee2b7323c52d5f82099bb3b97917d94e5e0d5b64bf8f99a4d579c6d3efdd72ad3d003790544eebca263ab1a65c3b4c3469539c30c94190b4b3a3da099f1f45a8dcc77348790815c5ed67fb3ac52505712fb6d07ca8b23c57425503b1285b605ed027dc046", 0xa0}, {&(0x7f0000000580)="6f5a1755895c0e238add7ba0b05d195ac24435a57f90ff3e6c33f70f92832159666a5e1b67b70aa91a8cbea1cd780b", 0x2f}], 0x7, 0x3) r3 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x104, 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r3, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0xffffffffffffffc1) 18:19:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8902, &(0x7f0000000140)={0x2, 0x0}) 18:19:01 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x68000000, 0x0, 0x0}) 18:19:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009f00000048b4f6f68a886769485aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dddff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c587c5db4ecaf4ad2dca0c8983bac03b390ae9c03d76f93d7b27dedd9f95e317d2b57eae278aa743d5aeeea569b70a06a984e5c97fbfd4b5a4ab5c836b997ad9b2d95c0f98a6020000000000000046931ad93bd000233b1aa2b4ef004cada744ed258ca8eb243592000de583ccd0c46aa47ea2bd354e574ede07b1ce8a058210f4d4a7c1825973f886426e56c31e84fba623a0df8b5db9c79b1fc37606786b963081cc5dfca933ad8ff2c162f3ea6036582d6cb6d8ada93b938e6b5678a3822af0f6186cdb94ba3e2fd8ea04b06e38309d082fccd02459856897f35090b55babb41617da4048e322f78272ef52c0305cbe2971fcbb7247fa5e5a69e559a06c2813e403b680f5df5ef845c7c76ed653c3ab4356781c2607faa735950cf7f3fb79f29a533e08e4d1ad3ee387"], 0x0) listen(0xffffffffffffffff, 0x4) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:19:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) vmsplice(r3, &(0x7f0000000000), 0xe7, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x4}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0xee01}}) msgsnd(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgctl$IPC_RMID(r6, 0x0) msgsnd(r6, &(0x7f0000001800)={0x2, "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"}, 0x11ba, 0x1800) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x400000000000288, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) fcntl$dupfd(r7, 0x406, r10) write$binfmt_elf64(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="e9"], 0x1) fallocate(r5, 0x3, 0x0, 0x8020001) lseek(r5, 0x0, 0x3) 18:19:01 executing program 0: bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_add_watch(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r3, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x3}, 0x8) [ 709.307792][T29413] binder: 29411:29413 ioctl c018620c 20000600 returned -22 18:19:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8903, &(0x7f0000000140)={0x2, 0x0}) 18:19:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8904, &(0x7f0000000140)={0x2, 0x0}) 18:19:01 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x6c000000, 0x0, 0x0}) [ 709.542680][T29412] cgroup: fork rejected by pids controller in /syz1 18:19:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 709.709875][T29531] binder: 29527:29531 ioctl c018620c 20000600 returned -22 18:19:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f40)=@polexpire={0xcc, 0x1b, 0x831, 0x0, 0x0, {{{@in=@remote, @in6=@local}, {}, {}, 0x0, 0x6e6bb2}}, [@policy_type={0xc}]}, 0xcc}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0xf4, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="400002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400070008000600", @ANYRES32=r5], 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r8}]]}}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r11}]]}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) getsockname$packet(r14, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001d40)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004c80)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000004d80)=0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup3(r18, r17, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) accept4$packet(r19, &(0x7f0000004dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004e00)=0x14, 0x80000) r21 = socket$netlink(0x10, 0x3, 0x0) r22 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x005\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="03000000000000001800120008000100736974000c00020008000300", @ANYRES32=r23], 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r26 = dup3(r25, r24, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200) getpeername$packet(r26, &(0x7f0000004e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004e80)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r30 = dup3(r29, r28, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r30, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004ec0)={{{@in6=@mcast2, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000004fc0)=0x6d) r32 = socket$netlink(0x10, 0x3, 0x0) r33 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r33, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r33, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r32, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r34}]]}}}]}, 0x38}}, 0x0) r35 = socket$netlink(0x10, 0x3, 0x0) r36 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r36, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r36, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r35, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r37}]]}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r39, r38, 0x0) r40 = socket$netlink(0x10, 0x3, 0x0) r41 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r41, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r41, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r40, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r42}]]}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r39, 0x8933, &(0x7f0000005a00)={'vxcan1\x00', r42}) r44 = socket$netlink(0x10, 0x3, 0x0) r45 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r45, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r45, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r44, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="ff000000deb8c73471001200faff0000736974000c000200359bb072", @ANYRES32=r46], 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000005a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005a80)=0x14) r48 = socket$netlink(0x10, 0x3, 0x0) r49 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r49, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000800) getsockname$packet(r49, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r48, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r50}]]}}}]}, 0x38}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000061c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000062c0)=0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r53, r52, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r53, 0x8933, &(0x7f0000006300)={'team0\x00', 0x0}) r55 = socket$netlink(0x10, 0x3, 0x0) r56 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r56, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r56, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r55, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r57}]]}}}]}, 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000006340)={0x11, 0x0, 0x0}, &(0x7f0000006380)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000006400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006440)=0x14) r60 = socket$netlink(0x10, 0x3, 0x0) r61 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r61, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r61, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r60, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r62}]]}}}]}, 0x38}}, 0x0) r63 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r63, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r63, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r63, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r63, &(0x7f0000007fc0), 0x400000000000288, 0x0) r64 = socket$netlink(0x10, 0x3, 0x0) r65 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r65, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r65, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r64, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r66}]]}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r63, 0x8933, &(0x7f0000006480)={'team0\x00', r66}) r68 = socket$netlink(0x10, 0x3, 0x0) r69 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r69, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r69, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r68, &(0x7f0000000040)={0x0, 0x145d7, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r70}]]}}}]}, 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006580)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000006680)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000006f40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000006f00)={&(0x7f00000066c0)={0x82c, r3, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x104, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x10c, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x600}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1, 0x2, 0xc1, 0x57}, {0x1000, 0x92, 0x64, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r23}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r27}}}]}}, {{0x8, 0x1, r31}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x54}}}]}}, {{0x8, 0x1, r34}, {0x25c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xa49a}}, {0x8, 0x6, r37}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfa}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r43}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r46}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r47}, {0x138, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r50}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r51}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xc556}}}]}}, {{0x8, 0x1, r54}, {0xf8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r57}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r58}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x636964c5}}, {0x8, 0x6, r59}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r62}}}]}}, {{0x8, 0x1, r67}, {0xbc, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r70}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r71}}}]}}]}, 0x82c}, 0x1, 0x0, 0x0, 0x44048}, 0x40) 18:19:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8906, &(0x7f0000000140)={0x2, 0x0}) [ 710.111947][T29639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:19:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r8 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r8, 0x0) ppoll(&(0x7f0000001980)=[{r8}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) perf_event_open(&(0x7f0000000540)={0xa8dbffa7d74f6926, 0x70, 0x69, 0xe4, 0x20, 0x0, 0x0, 0x4, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x8, @perf_config_ext={0x8, 0x4}, 0x3022, 0x9, 0x2, 0x6, 0x1b23, 0x3, 0xff01}, r7, 0xc, r8, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r12 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r12, 0x0) ppoll(&(0x7f0000001980)=[{r12}], 0x1, 0x0, 0x0, 0xffffffffffffff0a) perf_event_open(&(0x7f0000000540)={0xa8dbffa7d74f6926, 0x70, 0x69, 0xe4, 0x20, 0x0, 0x0, 0x4, 0x10003, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x8, @perf_config_ext={0x8, 0x4}, 0x3022, 0x9, 0x2, 0x6, 0x1b23, 0x3, 0xff01}, r11, 0xc, r12, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup3(r14, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r16, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r16, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r16, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r16, &(0x7f0000007fc0), 0x400000000000288, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r11, 0x7, r3, &(0x7f0000000000)={r15, r16, 0x4}) fcntl$setstatus(r3, 0x4, 0x46600) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x1d242, r1, 0x0, 0x0, 0x900}) memfd_create(0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file1\x00', 0x0, 0x0, 0x0) 18:19:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8907, &(0x7f0000000140)={0x2, 0x0}) 18:19:07 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x74000000, 0x0, 0x0}) 18:19:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:19:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) vmsplice(r3, &(0x7f0000000000), 0xe7, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x4}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0xee01}}) msgsnd(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgctl$IPC_RMID(r6, 0x0) msgsnd(r6, &(0x7f0000001800)={0x2, "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"}, 0x11ba, 0x1800) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x400000000000288, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) fcntl$dupfd(r7, 0x406, r10) write$binfmt_elf64(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="e9"], 0x1) fallocate(r5, 0x3, 0x0, 0x8020001) lseek(r5, 0x0, 0x3) 18:19:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:19:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x890b, &(0x7f0000000140)={0x2, 0x0}) [ 715.777656][T29662] binder: 29654:29662 ioctl c018620c 20000600 returned -22 18:19:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8912, &(0x7f0000000140)={0x2, 0x0}) 18:19:08 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x7a000000, 0x0, 0x0}) [ 716.136019][T29879] binder: 29878:29879 ioctl c018620c 20000600 returned -22 18:19:08 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8933, &(0x7f0000000140)={0x2, 0x0}) 18:19:08 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0xa9070000, 0x0, 0x0}) 18:19:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 716.402496][T29989] binder: 29988:29989 ioctl c018620c 20000600 returned -22 18:19:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) 18:19:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8940, &(0x7f0000000140)={0x2, 0x0}) 18:19:17 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, r0, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x90002) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f00000001c0)={0x0, 0x0, @ioapic}) fcntl$setstatus(r4, 0x4, 0x42000) sendfile(r3, r3, 0x0, 0x8800000) 18:19:17 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0xaa070000, 0x0, 0x0}) 18:19:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x3}, 0x28, 0x2) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 18:19:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 725.044815][T30209] binder: 30205:30209 ioctl c018620c 20000600 returned -22 [ 725.074893][ T26] audit: type=1800 audit(1573755557.147:88): pid=30213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16776 res=0 18:19:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') r1 = socket(0x10, 0x80002, 0x0) sendfile(r1, r0, 0x0, 0xf0d) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000340)='y\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300090468fe07000000", 0xe}], 0x1) 18:19:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8941, &(0x7f0000000140)={0x2, 0x0}) 18:19:17 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x100000000000000, 0x0, 0x0}) 18:19:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x894c, &(0x7f0000000140)={0x2, 0x0}) [ 725.417177][ T26] audit: type=1800 audit(1573755557.487:89): pid=30213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16776 res=0 [ 725.473247][T30429] binder: 30428:30429 ioctl c018620c 20000600 returned -22 18:19:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x321}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x8a0, 0x11, 0x0, 0x27) r1 = dup2(0xffffffffffffffff, r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000017000101812cb437ca217eedbf8cd419abaf5e08e6ec12d904000000"], 0x14}}, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) getsockopt$inet6_int(r1, 0x29, 0x5e14983476b0f84d, &(0x7f0000000000), &(0x7f0000000080)=0x4) 18:19:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8980, &(0x7f0000000140)={0x2, 0x0}) 18:19:26 executing program 5: getpid() sched_setscheduler(0x0, 0x5, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) write$P9_RVERSION(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 18:19:26 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x200000000000000, 0x0, 0x0}) 18:19:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') r1 = socket(0x10, 0x80002, 0x0) sendfile(r1, r0, 0x0, 0xf0d) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000340)='y\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300090468fe07000000", 0xe}], 0x1) 18:19:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8981, &(0x7f0000000140)={0x2, 0x0}) 18:19:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:19:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x321}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x8a0, 0x11, 0x0, 0x27) r1 = dup2(0xffffffffffffffff, r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000017000101812cb437ca217eedbf8cd419abaf5e08e6ec12d904000000"], 0x14}}, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x4, 0x4) getsockopt$inet6_int(r1, 0x29, 0x5e14983476b0f84d, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 734.395144][T30558] binder: 30552:30558 ioctl c018620c 20000600 returned -22 18:19:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8982, &(0x7f0000000140)={0x2, 0x0}) 18:19:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') r1 = socket(0x10, 0x80002, 0x0) sendfile(r1, r0, 0x0, 0xf0d) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000340)='y\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300090468fe07000000", 0xe}], 0x1) 18:19:26 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x300000000000000, 0x0, 0x0}) 18:19:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8983, &(0x7f0000000140)={0x2, 0x0}) 18:19:26 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x89a0, &(0x7f0000000140)={0x2, 0x0}) [ 734.766761][T30777] binder: 30776:30777 ioctl c018620c 20000600 returned -22 18:19:26 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:19:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x362, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 18:19:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:19:34 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x400000000000000, 0x0, 0x0}) 18:19:34 executing program 3: clone(0x801102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$TIOCGSID(r0, 0x5429, 0x0) 18:19:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x89a1, &(0x7f0000000140)={0x2, 0x0}) 18:19:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x5) [ 742.774079][T30908] binder: 30906:30908 ioctl c018620c 20000600 returned -22 18:19:34 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x500000000000000, 0x0, 0x0}) 18:19:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) lstat(0x0, &(0x7f00000005c0)) socket$inet6(0xa, 0x3, 0x3a) r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8482) bind$bt_rfcomm(r2, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x6, &(0x7f00000003c0)=""/192) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@mcast1, @in6}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000740)=0xe8) setresuid(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='fuse\x00', 0x5b22eb56399de2fa, &(0x7f0000000b40)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000000000,user_\ad=', @ANYRESDEC, @ANYBLOB="2c67726f75705f69643dc8d652b7f968374f1aec6d3e94505897db2636c6c3ae54a2e7165a52fb24cd64cb9d9f853179e1eecd50f69c76e91d90eacffd520e6daebb6720b01a9efd0db74892d485765ed5bb9a6ef0b062facde35863a085e1966f1f3dbc0e7fbc7540f899af1396eb1133140dc45d14914e52786e279921c44f23a8214dd99bd02a7246ca7c23b49f0a611ba80403ebf7091afe75e9ac2e971ec983011c95360fa9c9ee44", @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="00000000000000000000000000007c9abf363f00010000000000007d26414b19789bcf1ac1bad151a3da168bec2c156624a875e1877815bac98835e6bd1c0741eb0180f8c200a2528f9678139ca351181cafb0447e56586eacff1d86409c259a7bf44f4a3cd41d3fff637cfd3a2eddb1e2f6411eb098a49f4234f11ff10bb32e6cdcec9caecf4fde7ca4286d3b55b431a69404deee0b52573889a1da9ee321f31a1e4ce67402381eb1364d0a9dd19103", @ANYBLOB=',smackfsroot=sha1-generic\x00,smackfshat=wlan0&vmnet0\')cpuset+']) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) rmdir(0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r6, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) 18:19:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x89e8, &(0x7f0000000140)={0x2, 0x0}) [ 743.030568][T31051] binder: 31050:31051 ioctl c018620c 20000600 returned -22 18:19:35 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x600000000000000, 0x0, 0x0}) [ 743.289249][T31240] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.298952][T31240] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.313117][T31240] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.325306][T31240] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 18:19:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8b14, &(0x7f0000000140)={0x2, 0x0}) [ 743.338122][T31240] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.350849][T31240] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.362070][T31240] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.373939][T31240] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.385512][T31240] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.399183][T31240] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 18:19:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 743.677034][T31249] binder: 31246:31249 ioctl c018620c 20000600 returned -22 18:19:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0xffffffffffffffff, 0x1ff, 0x4}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x9}, 0xf) 18:19:46 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x700000000000000, 0x0, 0x0}) 18:19:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x8b29, &(0x7f0000000140)={0x2, 0x0}) 18:19:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) lstat(0x0, &(0x7f00000005c0)) socket$inet6(0xa, 0x3, 0x3a) r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8482) bind$bt_rfcomm(r2, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x6, &(0x7f00000003c0)=""/192) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@mcast1, @in6}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000740)=0xe8) setresuid(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='fuse\x00', 0x5b22eb56399de2fa, &(0x7f0000000b40)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000000000,user_\ad=', @ANYRESDEC, @ANYBLOB="2c67726f75705f69643dc8d652b7f968374f1aec6d3e94505897db2636c6c3ae54a2e7165a52fb24cd64cb9d9f853179e1eecd50f69c76e91d90eacffd520e6daebb6720b01a9efd0db74892d485765ed5bb9a6ef0b062facde35863a085e1966f1f3dbc0e7fbc7540f899af1396eb1133140dc45d14914e52786e279921c44f23a8214dd99bd02a7246ca7c23b49f0a611ba80403ebf7091afe75e9ac2e971ec983011c95360fa9c9ee44", @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB="00000000000000000000000000007c9abf363f00010000000000007d26414b19789bcf1ac1bad151a3da168bec2c156624a875e1877815bac98835e6bd1c0741eb0180f8c200a2528f9678139ca351181cafb0447e56586eacff1d86409c259a7bf44f4a3cd41d3fff637cfd3a2eddb1e2f6411eb098a49f4234f11ff10bb32e6cdcec9caecf4fde7ca4286d3b55b431a69404deee0b52573889a1da9ee321f31a1e4ce67402381eb1364d0a9dd19103", @ANYBLOB=',smackfsroot=sha1-generic\x00,smackfshat=wlan0&vmnet0\')cpuset+']) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) rmdir(0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r6, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) 18:19:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:19:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0xffffffffffffffff, 0x1ff, 0x4}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x0, 0x9}, 0x4) 18:19:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0xffffffffffffffff, 0x1ff, 0x4}}, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLERROR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a8eecf8473d58e370"], 0x9) [ 754.216080][T31478] binder: 31467:31478 ioctl c018620c 20000600 returned -22 [ 754.342888][T31586] __nla_validate_parse: 25 callbacks suppressed [ 754.349247][T31586] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.358927][T31586] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.374223][T31586] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.385102][T31586] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.397904][T31586] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.410100][T31586] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.423624][T31586] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 18:19:46 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0}) 18:19:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0xae01, &(0x7f0000000140)={0x2, 0x0}) [ 754.436125][T31586] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.447377][T31586] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.469300][T31586] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 18:19:46 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) write$UHID_CREATE2(r2, 0x0, 0xfffffec0) getdents64(r0, &(0x7f0000000140)=""/4096, 0x1000) [ 754.703023][T31700] binder: 31693:31700 ioctl c018620c 20000600 returned -22 18:19:46 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100)) 18:19:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0xae41, &(0x7f0000000140)={0x2, 0x0}) 18:19:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) 18:19:52 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0}) 18:19:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:19:52 executing program 3: vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write$P9_RLERROR(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00p7-'], 0x3b8) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 18:19:52 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x1, {0x7, 0x8}}, 0x50) 18:19:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0xae60, &(0x7f0000000140)={0x2, 0x0}) [ 760.503095][T31826] binder: 31824:31826 ioctl c018620c 20000600 returned -22 18:19:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002000010200000000000000000200000000000000000000000b0000000800b3330000000008000a0004000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000012}, 0x0) 18:19:52 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x4878020000000000, 0x0, 0x0}) 18:19:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0xae80, &(0x7f0000000140)={0x2, 0x0}) 18:19:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 760.730958][T32043] binder: 32042:32043 ioctl c018620c 20000600 returned -22 18:19:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009f00000048b4f6f68a886769485aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dddff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c587c5db4ecaf4ad2dca0c8983bac03b390ae9c03d76f93d7b27dedd9f95e317d2b57eae278aa743d5aeeea569b70a06a984e5c97fbfd4b5a4ab5c836b997ad9b2d95c0f98a6020000000000000046931ad93bd000233b1aa2b4ef004cada744ed258ca8eb243592000de583ccd0c46aa47ea2bd354e574ede07b1ce8a058210f4d4a7c1825973f886426e56c31e84fba623a0df8b5db9c79b1fc37606786b963081cc5dfca933ad8ff2c162f3ea6036582d6cb6d8ada93b938e6b5678a3822af0f6186cdb94ba3e2fd8ea04b06e38309d082fccd02459856897f35090b55babb41617da4048e322f78272ef52c0305cbe2971fcbb7247fa5e5a69e559a06c2813e403b680f5df5ef845c7c76ed653c3ab4356781c2607faa735950cf7f3fb79f29a533e08e4d1ad3ee387"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:19:53 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0}) [ 761.029620][T32258] binder: 32257:32258 ioctl c018620c 20000600 returned -22 18:20:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:20:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c8, &(0x7f0000000140)={0x2, 0x0}) 18:20:01 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0}) 18:20:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:20:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x97}, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000040)={r3}) mkdirat(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) socket(0x4, 0x3, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x3) 18:20:02 executing program 5: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r3 = gettid() r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x20c820f192dfcd4, 0x20000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x1f) accept4$inet(r4, 0x0, &(0x7f0000000040), 0x80000) tkill(r3, 0x1000000000016) [ 769.963309][T32380] binder: 32377:32380 ioctl c018620c 20000600 returned -22 [ 770.025929][ T26] audit: type=1800 audit(1573755602.097:90): pid=32383 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16817 res=0 18:20:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x40045431, &(0x7f0000000140)={0x2, 0x0}) 18:20:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:20:02 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/.yz1\'\xff@\x8a?\x9b+\xfc\xb5\x9fq!\xdb\xfb\xb2\xd8Om\x84k\xca\x82\xd9\xb2$\xd4\xda\xba\xc9\x0eb\xb4D\x04\xe4\x82\xe0\xe2p\x99\xb5\xc8J\xe3B.y\x17\x1ae!n|\x8a\xd2k\x0f\x94$$\xb6\x1c@c\x86\xf4\xcc\xfc;t;[\xab7\xf0\xb8\xd8\xbb\a\xe9]\xef\x11i', 0x1ff) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r5 = creat(&(0x7f0000000640)='./file0\x00', 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x36) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0xc000, 0x80000003) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)) fallocate(r7, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x3, 0xfffffffc, 0xfffffffc, {0x16, 0xcf}, 0xa, 0x6}) getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6}, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f0000000500)) r9 = socket$inet6(0xa, 0x2, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x50) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x0, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) r11 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x1c) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f00000005c0)=0xc) r13 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f0000000000)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r13, 0x3, 0x0, 0x80000003) r14 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r14, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r14, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r15 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r15, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r15, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r15, 0x29, 0x5, &(0x7f0000000000)=0xffffffffffffff31, 0x4) accept$packet(r5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000940)=0x14) sendmmsg(r15, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)="19504bba9436a1b7547b7acae6500b6d0ee8e36216371eb50605081da7ebefab9b5792bbd9bf487c47c108aa342b32c3fea03176d62ca18edf56c4a7e34c5d2af34831410400ed8f2f115e439764ca374cf27d396c08820ce8000a7445d8700bd09efbc7668e847c1f9f753f6f35e5325c7a50aefbc40f5e4c0e1e8ed28e82b5bda6ac977a893253eaf746e4c5ce1ba7416dbce51d1d4ed4835b73b7c4e53f9522233306bec427bea01103e33d84540c55588a83", 0xb4}, {&(0x7f0000000780)="0c438100cb7722c50a38519a622fff0b39a9baeb1229aa9693eb3671e4ff9208d2376513b7882474781bd03d06290cacc6ef436ad9c5f6f9aa48f380d90e88b1a3462c8dd8c16a40a14d2f8da09b5c92fa821eb919e58d5fa844262c2d69bc705d97a8dc", 0x64}], 0x2}}, {{&(0x7f0000000980)=@hci={0x1f, r16, 0x3}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a00)="7a54e09dd32e7da1ce1ab811843403b5f8202bab70834ee2449593d6a308b23ecbabf5222e", 0x25}, {&(0x7f0000000a40)="29f025e9653d0c445b3b9447fd6d86482a73295518ab992c711f44161220dfd9280663f94d0b78e1b32ffc6d1feaccc326fccdae9cd4e1dcbf097ab31adfa4a7adff04a00011593f983a3a424fc3bf56dcfb7bae78df8e9983119f8e7cbd592df8872054c956553629490b250fd53c46908c1d7c37b55e533f5681c39ede9d079a99e894ee071b8f1c81b03c3bd7fa205aea2da2c9ebeaf38696c488f25728ee8c6cd07d41e3ef3f0f68798c4f8a476de4ad1f03e93ad5b03f4de05ebff0ca05cc936184e11435894653f45c7f88", 0xce}, {&(0x7f0000000b40)="ebfd0cebfcd57898458d8b8bc386af64a2c4e5090a145e7134e8163e8b82f81c9901081df143ec995a3763ca268954eb623d7ec64fa40ad08784b56aaa0b3ed6d425511b293cac76d212c0e88b4ddd0dd25676b2439ee25eb3234404a24ff0386c9ec8c384586a5eec9b05ef2bd2cdce9b41a51fa7a580d8866f093896ff441cec6e3986336dd48f4636fe51ae10cd746ace0a302d9d35461b8c29c1cfa85174dd4def707198c3f30e672974e35898ba475103bcccd88187451546ea5c7faf0a7ed76ce8fb5c731aa09d3ea1471a7b2126614f68d3233c8de8c5c3932c00e3da9e957b13d5ce25b1f4680b9422c2ad819b3643786155a5", 0xf7}, {&(0x7f0000000c40)="ec0a86e00e6fa659587e8c5c280a20617c0d23cf485dd0ac684c8c4a050639e1e91d8645a4687d885244b24e3b8a9e9ea5879b232bd4cfb0108b7ed41341867f90cf28d233d2fb72b09eb879b7072caf01967be59fa55f24e9e38767ef1f55867848fe64086090b1ad70c06918363e50f77281431e0b", 0x76}, {&(0x7f0000000cc0)="fdc739518b8a980c883e0e17636171e4aed2e5712bcea89ecdb465293542d6d47692", 0x22}, {&(0x7f0000000d00)="238e336cd8f63b419dbfe7b5ca5a0e54", 0x10}, {&(0x7f0000000d40)="49a1a9d157d8d69afbe8524cf3ef7b871341a77f9487f6edd89da9978b02f92f258f042cae0f1ed87e423af4ad54e3ec02609ef6779cd4da2ff76da74e2c774181ed5af96bfbf35fd2690bf86fbc1977e1d16853399f186ef9d7b494fc6f0815cba88d7ba8583a475f991b79aabb5d9d53084429328a7376", 0x78}, {&(0x7f0000000e00)="2d9ec7338053c5d342c00afb882f89b24bdd8ba36b0fe5b8000034ace0123ccfadc9aa2576bbb7851edb4d1f548e82f57960b70cf89a1340b3d2acc2ee62321292f979a0e0383352ddb6f8b0831348d9f23bfe5a93f2feb23eee9b22e377bfbab5030e9814712a53acb8c178ce36419991e13df5a09a1e5353b1388ef56bb2e60e751ad62d16947e1e811dfb0b31c624d420181d48a40beb16ca", 0x9a}, {&(0x7f0000000ec0)="359b122e126145a60507cc2cb3c3da5639112a3eced7b8ea63d06a2dff06d7e58d5b396a239a8aa3d43bd1583cda11b5f3724b5798f980c42343bb0c351a47f9fee46e84654f93dadb4977730db9608f550042", 0x53}], 0x9, &(0x7f0000001000)}}, {{0x0, 0x0, &(0x7f0000001040), 0x0, &(0x7f0000001080)=[{0xb8, 0x10c, 0x7, "0f374afba0071d58d70ef0c561a89c45208bffdf21fc4ce06b77965258faa9ad370bb89c30bd063a1596fe98817416463277bb6d06c0a879ecc5dc29a5214e2f681d8418e754f4592b53bd8a054664f5eb517ef0ad09e4e2a7b11a8f2e78989b2244767966a15e43219b2c7523c21694c0458432936ce3f7126f41b785b79dd2ba179d6258a4df3bd19a7ea9c1fd71d78cbbdbe87aef494fc699d9e62b4e0963eff2"}], 0xb8}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)}, {&(0x7f0000002180)="4134fdb637d1f75012e8a23fd1af9157bcfac06f4eebec3bb730041c4388bbf368b3f0212d3125f3b22f50f715394d9f92facf356f80775dbaac74992f1d7c0e3463d02daa98f880994ea86f3dcb714d3a4879878e4e7e76a5568bc0c365974ba2953d436bb5936031f6", 0x6a}, {0x0}, {&(0x7f0000002300)="10e91a45629c63fd716a75725b93b82f2fb26c5f7581ca4e63be7c08091d165dd42769f030523a7c1f689ae5bd4885f69e375a5e1864c26bc6dc15475ff1424e396cbca87b26e761584274c53410b3adca58dd52f1a34de13a9a2017785e12714d2a3b43f60bd08153a5c6dc0e5223827fc9de5e671260cb0b3955e96a42ade73cf62c2d9418557e5f45e97f358ead2bd2bda33505c4501465d428f9394e7f51c7d04961a67523909fa93e7d250a7009cbd7439275ee27b4dd2be43e2f9172f9170c1f22a5e7e1e2b516a616b353aa0dae23c7fc039ad32a57ffab8ed12105b54e85678fedfc", 0xe6}, {&(0x7f0000002400)="145977af35bbbea98bce19fbeb4207af08cc26154fb0e7e215b0737a95deb200772582b2d7dba79d41ee3688ea585766245a979f8db9abe25e036374aecf6ae15e8db27889947317819c021f4ecf48b08338c88f56410690eddfc99ce4d510a50e559dd6", 0x64}], 0x6}}, {{&(0x7f0000002500)=@caif=@dgm={0x25, 0x6, 0xfb}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002580)="45a04a43e5aaeda78334ba8b5452cb1ef450a548689765d45e7e9ce6170a07b4c214cb946d2fc49a7b83375af2b7acd47859f84f04da63a5c96ab36261059e24f4d2f2bf7e9443d2093cd2d9f121cfc4dd0a9cb758901ebe5a0be801b63a8ad60ed904611cd7baec69dce5231513b515e9a0172acd6498e8d6f4f097e55197a9ebab988a4dc463a7c9b59d804d768239ed51170fded7812d695a54a6689acfbde4b1e2045c5ed2f6f8b78960b98bd0de261b054d06cfe10a65a977beaad62412", 0xc0}, {&(0x7f0000002640)="f453d19f6b26c097084819148f2703ec779c88ce8b7b3567e1e8a146db8c1aebbdbca3172060b68027256f13c496c617f7275275b973418c429480a20ed65a19cfde2f9d7960db4ce919d3c54b20ba22159249686aaf8c51d0e92979340e24a3dfc588ffffb91bc621dcb5416113db788e00330bdae2da7479a92c24697cf47fdfb05c1cd76bfd7b66102c5d7c77e57540a0b92e63", 0x95}, {&(0x7f0000002700)="39ab35e59b695e0b843603683575eb642c281110d5d41f920b510ae2437eb96ca92da982670b829ec2b70e3adff070e99fb2988ca103041cd21447cb9b94c73ba07e80bfaa8f65c4af3371134f5aa009b83989b7342749fb59d098f001cb03e72fbbe6872119fd21cc59f9ec", 0x6c}, {&(0x7f0000002780)="721fabd14bf9f8e19dbe969e7c1f14ff6b2b009d27022b6b22a0922c14f488052dc46cace4467505310e0785c437115bf5a927c99b3b251867ea32c290445e4571274453f8", 0x45}, {&(0x7f0000002840)="a21dc2295bea8e60b197a40eef37165d405cad1c7e039e7f9463374f75168bebc67c000a5894f1c38c930c2f114ab825823c3bcdbe470cd272ed1a6ee4a361db030cd2b0ee7de285a2c874dcf63ea2d924d6374c1fccbf3cdbcb93911bfe390a7fec54bbbde17326f393194b5e0f0fe6819118f6d14cc8a3bc7b12b0e2726302e597a75ed63683529b0097792e1340d08ccd3724de42ad2d068257d1d3bc6f4f11c6d78c628c9762a49ccfd6bebcdfe6abe03d5f62c58b322f45b3e4c33e0e44927fe3539843c7af7ab8a808b11ea98b59cc9a0d057a4dfe232c8309ff8789db373021eb2f1640966ced49", 0xeb}, {&(0x7f0000002940)="3139e742a6e8a0145fb5a304fc1d65d4ab9378ffb9b26cb02eaa78dc8701f33f3a0d5d3fd7bca452f8103ee874f719b04a6c65ff8de207039e39af", 0x3b}, {&(0x7f0000002980)="2b58edfea2f58e0b8ba0cba5660885d83d6e21a276bc1b7e1b64e43e7068817e1000de52e9821251a7ab456f", 0x2c}, {&(0x7f00000029c0)="283689ade1f8eca485ca02a4d8452a9e155102a13ff5d7b9e8e5f284fbc8b2ac56af19f129ff4a849ffef54b0bc8feb1739a819ee2d60790fd89ce0ff49e05b44c435a0c6c209473c45cc36dd896e81b80072d829f6c66e045", 0x59}, {&(0x7f0000002a40)="96cce5cb2f8f55cfe777e3258f1eab12544843d4b11c38fa5366085573431412a9739a46c648bd25ab6ecc0639051775014e98a6aa92b39ed0bf364fb09cc325dce1f37a7f9ffd00684a43384f10", 0x4e}], 0x9}}, {{&(0x7f0000002b80)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000002c00)="bd71e0f7c0a93faae1e11cfd2508e8a3c631562f4b49143855cfb8f8c4c6819bd871b658123b668321328099ce7918ad62432cb1cd01435fefedb775fb8b078b4bf92e33650074db5888fa6dfda3fc1412defcdf085ddc143253903f93ca098f156ba8244a96070f95a0b4a03cc91e3fff304ddaa87e1707f7c4f60ed49c2d64cd08cbacd168382636e254d57584aab486f60edf0e71d8687bfbf2ee1c7fe2a36db43f83999e396b27031ab912ad6ff32824c1b9c209e2b01744da3e75d660006db47158c2688e66f92647151f1d92fbc5df8bf696af1340edc95906194af3e292aa49e6331ef8591f6c6319e1c564a74c99", 0xf2}, {&(0x7f0000002d00)="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", 0xfe}, {&(0x7f0000002e00)="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", 0x1000}], 0x3, &(0x7f0000006a00)=ANY=[@ANYBLOB="b0000000000000000e01000001000000dec912653d764f2ef530a1a73187abef54cb83eb8ed2ca05eb0377d2ff863e52b03ca85032a2f9dea2d9fcc8dbdb5857861a4988bbabd4444a9562efcc96e21690d3761e679db660f09fd605da9ab7368870f56767f5e4ef41333ab7a9c0d82d85c8fafdd585303b53a98b42865e5a797801fe909bca912476b79c9b7129996bd745a0db19ea6a1dd4123299a45275892f9986320525b051c995c84eaf42150167bdfc0c00000000c00000000000000011000000050000006c75d6624d7f667209dbf16b205df011732666d59e9d7b32d19ad6b4411fb03b0efdac06c0239a435c3ab9c84d74298b25c9e09b0449b7abb711b58f28886e774f8b430299bd25e1d32e9210f04c0da347d04788dedc65bceebfdc48e0f7757343a02c63199486997ab83c72168862b9210adb368d0ca476b6f658bac20467d15a06e0e98a11a878edb4b98dd01c6570e00bbbcf67307b163ccfc00702dcf6fdad0c1dd07a8a79a923d288240e000000c80000000000000001000000575a0000c260ca1094a3d82f49bfe872c4869ea8f977928973ba3afd29fd2889627f8eba64b9fa2a0d19e4083855aa17c5c014c079e09bce96df67fd50e85d9f0aa06d59dc463f1b8b5c55b0512910ea608ab473d68c5e0c67b64438a3c611fb7c53aca543cf9093d00bd9e12c5a92f4cd6dd15d5c66c86d316e23c0f0201adc1db113fed4264490a78a09c0a75a5f47890d862a411254119ec523835b75033d3fb1a49b8205831233a7114eaf81ee1750be2baa280000000000000010100000000000000801000000080000757d5fec301487e93e44caa630f0a80902dcdc47b80bf2b34db7d2270350a53e7abd9feaf0bd8fd1e41004491b0c6b7836c59de5fc1b58136f7cdc45029b9a894b3a280aca42cfbfb4160c6bc3bd8f21eb323004739c7361c646d10eec99e43ba061f6008092dc122e650f4274928b782e1571d0f58d704874b69a6928f4801c9f5bccf601509035fdd44bed921b9857b4604586610e391860e185eba4d29c2ce7e80fed4e8d5d9c0280d65d197ead97ed7c45111b15306fe9f644fe006cc48d72bf46e68c004ea03693d311b9b6e22bcdf429003ce3419d5000e69b510c1224f1c0f2a01875a19004382d5e4de0239b2fc317c1e8da22b0afd9e3e886352f3600f93aa8d53bcb4378433091b0112c13a601a228cccc19d0a1e9fbdc5bc0183078792b678abba4afd82f8b01b91440f14b1d046f31799c6b37a1fec42664ec62eda9093e125f34ed9908f7958174b223ec045c32e501cfdb632bcc03c37d809388bd8c36e45c27840a3f3386c77a6901a1104201bc4ff90c8d45a2df037c95676f2cc37eedc508fbc21dda6df14c0245f57b30de2318d31f7762ab0505e108444a6622a55072a2ddf18f2b45d4179722ca8fe2867fd80117d700aad386a2e02c26a8e0ff0b45224953f22f99a9183185a2323927815a962d0734e4bb6f59c1829826d16f3f576e9df200510fab3b6c9cd865967ffe24dc58d53ddbf470495c7647d506e6527cab2e8990053d7a7a039c075e56a070426c3a67393351ab8d2ede26a4d5c96d5c73a3d96291563ca34926b7a2bb3dbc9c596ad35c8a0004f753f196e69f0af344ad447d85517fb23db4ab8d97d23d49323d34c1f0003f7420f128a14bf08c466ceb0e202ed2fdf36b87827065054542d60f753cdc6636d66cb8e4bf40fb33bf4b21de1c928ebeec6ef4cb2d0c11bf9945d977779e63dc098cd64e7f1d85fa21f3d7883584cd6ec39502f4767a6a9642c4d36923c39d18deb9523783c19062185cea307de7431f66111b0e429778d68c7b8d9700ee5c578e2a34d1e06e283a77128f9402532176d707b175e2deac337e7870cf7f78ecf6e247685385e852e40d5bc1dfd9ab9af5721de14af38de722fb82eb9524cd8f06aa3f08755c4e45e3a1bfe3a3ce3a4bed078db8fcd24fa412acaff9c4a4c0fde2624ec73be6a942d3b25e2c5ea300bad8e1289283b5ada888e415f45c1d606ed7b5e174b5a5c740a7781576b677f281b150a03397294474bd59603d8cf81b0a2dbe0c9cfffb9bcd8f00e786e8a4c7de1f4b165e0401c3b02dac5cb6587f1b56b522d8d1e275364b241fcd3372806e34e550bbb0c253dc506bfbf1ce3ab3028891ec43288bb103b14ff26a48dda85749659248baf448c6c34cb2126878751fc6469cfc788a3a0516659b95774fb5da5b4da4916f294c104d4c534b3107f6ad592758df4bfbdb0584fda52156615eaabec10d796a32e3686fd2bd0e7398df847f2097524a07f2d48cf2671ecc3f885366391fdcc4aba79575c63d38edead7b2f6ba47c8105122a3bee4691a4decc5f5d0a91ecfeba0a17c2941f78fb6019b7ff42a213e9eda59bb94fb058f437eed239ee951b87e7b14fb68b1eae54fddf0ab432c3e7f7e593cff0de21acc0317ef897246d1083253a2b7d9892c59515a442fc8e2179e08f5eba1cea37159a033ded09a08f2d7835e7a487494565d02f46381aea80541e4510e446996d7e6ffee6885007cfd74c699f1b648f32602df85ba0e8d20d24b2c793443f98397d3f0850a04deb2b491c8a6974bc4afab740cefee18b664da7adfef47d10b6e402bd3668bc41c1cbc5bd4c276469bc7c1798a7925fcc29d7a5fb1eef473cb872ea73ff08023a3e631b3608c9f6baa196ef5b5cc2de4abf56453ada51ad0d0edd9ccccef3df929cec2f83df330cfd73d5ddae9cc64b2ebb3f186237089f361369db96e90ad357466480288916740de907df124684c7d2a49285a2ddbca59de0970cd881e173b994bbaf77b51a9e011b9921391a7d7ed6cd595994419fde58a8ce758b8f55aff07a90ba921bda3942ab2b966b6be944ca74fea668d2826baf0eda9cc1379e6e532ff4939d90e958301c2f71573f70a73b3be889974c134be4649daadeb844c992ed837314f2e3de470a6df4e2c6fa060b9008b85733edde26fe37ddee78d5d23fd07208a3c32cc973c065f0e65876914550960e5e786c627958e310a5632d06f6255e53454f9b4b8bf7d9a971fb51047693fe2aa3e9a91b5d046aee5456ba689324f86d47df9b6671d23380ad3c39d972082ae0ef319f8b4cd7c5eb33b48772273f92d5bb906d8f8c51e4510524e142d550cb8920a7b65f33245af4a30acbbb3b64925ed05d5713f1f1c415eb85fd00ef6e014cb499ef568c57bd4e000569da8978ba4803ae5962627821b9e5a53744f2a29e7a9837b79378f2f42fce5a3e13335f90868e2a1248e6bdbd2f9a904252a12717ec793150da2651b8ffa2c62817dba85c6bbed17790e4772a32c0730b3157c457740263bd00b88e20080820a403b69acd80fe4ee865177c6407fd34b0e0ccc034904dc4a76352e14ec5ffdce0d6990537d267ed83c0f1bbc90109011415e8f35a012ae883cae3b57518a1d2ab9eefa1dd0ab50d5e655647bbabbd434835dee0cca65c3c4cbc1d65e4f0c715f87bab3dddd82d16960947b8ff5e82d614539bfee58de4aae79a380f4c68401d271b71387bf191ea9e7100da03b65175e9166a81a9dd39320a6412cf8e90d4ef659fadcb8d852be796ecca52255beac6509895b8812c7f0c3d8f75cc53b8a2e0889e8b6732b703beabb57c80d20676431210b7c5e543643acfa0398dca95a17c13fbe76cd68fa193cf61f5cf82f20a20450ee524f1f0ad5eafc039a2fcb5b21612fbbbe87ef99fecacffabe4148b63e1657e88a531265380aa9763f209354f9b931410b153c221272ce78f725295f560842c12719ecf2e8b3968358f6697b94ddaa7037c767f041ec6dad541ba57df9bd8a73ef86a344e92eb75639e25aa249325781640e970798905b08c7356cb493da73ddc314c2c4089791f522ad9a4c1bfdd0a88ea522add7fe6639211a8be6391119daf7f631fdb3b05eb756bb8581d0bee8c3b62eee1acc4987c4656503bcd1eb8d7a7c8ac6cc6bb62e3b4903d5910624887c8288e4cbcec9bb9e16a1d68dd84335dff46e0535eca1deed9d7757511420e4d755a14c5a0bb4ec1a1fd93b61bae8cf369f8a98b2990ea4bb9b30d82f773face779f6d059f06b102486b5cd26af95b15ae4a630721477015e2a003e2d5a20498ce292bcf5075d991551111a3c581fe443b28addcf3820153393871f55c2d885fd46eed4da0961c1ddf6fb2270ab48f226b5ae078e2b12f7f68f559c27883af8f41fc79587326f7f2e1d7a612dee583f2384ad1374520fc58a1cb4946a83a1440330413a409c45a6acb1b3be2a5e5c5c60dd2fb8d13514ada29172a4a810f30013f8c8a182d29a05c33311775ab5531bd6d08094b2df980b5d22b471741c58a541575a0c9736cb4baacb3eec02f24c5d476adb672e7a486d3c92dd26d7604afb4966b38824dfd3b1ec8ed9dc6eb0a5878cf2f274df7ab2f6191308e7895814e2acee78dc562b07da4adef0ee859581c9076f8bbec01cc8636de9c13ffc2f387d67ce10176c5dcfcfca6b4a67a35e7b2cc6eb36c800a1016132f1fa6c32fe98dd5a101a85f60b2e40712cc3a8c25a12c6d84c66f9aac405655b0dc25744d2db03b1ada5480558fb0cb638d70bdb3edf228347322dce92dbe6bf4fb0ce5be71f994a39c0d026e62087bdaf4614eb73c6626b1d1d3322f333c9ffa31a2e520708cc94284520f9bda3c102bd37f09e669b67ef999c0c8ab08af13fa58eb3c08d0dd580e468872c423ba0d2938f69054f90366955191e152fc8c16e57658b0700c3f4eced8d883f2de0818f561ec360e97925f24098b13cd43d8b08a7145aac2c98683dbbe10c412802775c7e16c5b875e58e5f36b545480d5943244db382f5a91dfd4b9054578c8ad867790fbf4f183f651872d6d445030e3cbd6d41c39c7cc3435381683791d4b48e1b810b2c5c261acece7de5a8cc1f04b0eadba204f3200106fa40cf1cbfe915d52aeb11dae906da8336e757de175c7d5a5937b6760565fb886c04160427342b2cf038d06aed277acc624bd5168f0846fc531b44cf9cd7c3f8c3a95af1f73c84b510c0fbc58bda9bfa2f82422fd34c0bb59a50575a5f79d85f8f86b62f233efa30b90eb907bba118cc31592ef8dcd93b08c5bd8728faeda6939466aa8f5abb5bd5757321158fe9645c24d21ca55fbe53da821302fac7d454e98d1ebae11b84d6da01be191f6f0f00486e39be4f94ebda335f9a10f08be2111a26e5b9434d7c1358030e623ab6754106656826f882d1d5f814f9573697af633aae7e265ef825d7c0284c461d324c214bcf4673dd160b87aba72f89f3b6b43afd7abdf5c1fff827dffac8cc908988a1ca0e69cc8ddddcb2784313ad51d6193f58ea04f86e4b752c4d24c5811e1a63e1274e573bde04c9358c5ee2333d9cebc0582673665a0c9b37866e80deec91f6e98ad1100f549bbc42e9101d82520a5db69eabdc278b352b47186bd22862359d58fae2d7b8e3feb61ae0ef09be8862a3c1b1166a19ff1ec3f9c3c574049b146db308ffb184ddb24dee24d4188e506897f131f04c173c9f1d6215dc404af2992d6fbbd827bac76ccc0fc81aa74ccddffc1dd5c953a1467bd6277a06f32a7af5db7248847cffd8597c44d5c75b74ee41b63936f352f6ae37b0b256876a181a968129892def17d79acd6362c8d060a0c95fe48a898b277f1e3f0dff0726454fac2b9ac95db1723a090c516a03487b4e8632a59f169fbe231a68b419f252d3fd6a167e57cac0d83d7259b1eaba65891e9adea734a8b68fccb3b957510d6a0f8f64b7ba8fd50c1c3379114b21621084d20c92fde3caa02cce3eb1926cd422f86c59e4e0ec8603bb3fe7b385a14f22492dc83026c5fff8dbe01729e20b19c073acb0dc6f23fdec80a90765c04dde0943a073d76677b25aa37b193602ffe4cfde192b039120b4337ceb88abd2fc65339ba96b718cff418f57de0667fdc8d6d3ae086ff8c84e2ef74b7e20b7deec378e1b24679b6f07ae2e0b5994b452b948e87003d7a6135e0910f8556d8b8a356a8965dfefeb6ab7a7e7d0335c71a86421e1efcfb0c9a753c347dabb6bf8736d991816d132be46c1af16f5bfb61d655579668232c4c8390b073c9740f5ef61c91349896baccd502dd6f01fd1634919d9360182bb6abc29777b1b93a5d73a64ff80975dc5449fb4354ccacd1b2ba0f146e92ea10e5bae5d0b4d962d0aabf029d5808273cf85993ccbf17e7106b51400a967d1416391aa58741d3ad7dfa94db640ed4cfe0f987034969763468d453fec2ecdbdf6d4975c623787c2af3f385b1f131d6722e877e1a13cfddcbfb216cfc33ece8e96d047c46c6fd6fa7355942048ecd1955c11ab30aadfb848f66942197ba4613c2a2f921ba46fb8330bbea782d827d1d739d89bc9d704aa214c9872cfa06776b47cfe0d5fa643de62af3dff6b39c20c6eaecfcccd9f71a6648e569292737a60c4920cada506ca3daeef4f3cfbf22cb0ed54c4e9fdff2d5efeebcff1a846e8342b641fecd6577d1ceec8b99fc6ace1a996a14c1a4f46b202a29bb2e5e5396c25c6e70af1df6811e6be05d7287d0bf58e657d2741014d73aa0bba48735f0a1c28547fdde504f1068cc9bce45f66febba80000000000000000000000cd000000019fc4aafcdc62c652ff0aa2b396c09e90614e3e5290036794402cd8b490edf0cac8f43515d37ccc58ce283fb81ba6659c71136017bb5f006d896b67b1db8b7f762b61ad45410cee1a53a7cb39f2fece02675aada5dd9d07f99357c95caf25f4aa82bdf6aff064db2cea8b38270cd54345cb069b115ee8709a5ee8d33540b5a4fc330f96ba761dc7941bcd68f1e3ae0e717fab087c000000500000000000000018010000010000001521f12c6afc5b083d5654585a7bddb072990b530a578dfe65ed21242a472bcdc399665216c2a209fadc5e06ab5852d3843b981ac837a01728dc7e00000000006800000000000000080100000180ffffb0414cb038d4281d65b1bf2baa3631c7f7ab9b1f2d794034bc91ab5a986aaf591cbe52dec5fe00205c08c221017b874bd56fcec16090d64a7cdf60ebb1c59f8ec305bf3bdd1aa04876a9e559150823bfa7b1bfd00000000070000000000000001201000007000000e2a6a63f9185d835b719aeab54da7c23b0ea0a12c6373eba303518a47a74fa69311b19789be78014be9f24199868467d69e768f7d923a50683999431e1a5acdd0934e3468ad4d6ece905a5f2cc224d7274d4165f5a25c8891500000000000000ff2f9714c12a2c660756f3b4e2073a6474919bdecfd38e395e59962ec6d390d3bec5940b7c72e3e6424611ab2c4c12ecd075a91a6661ccba53fc7e7ae4957bc8300843c2d36a50f6288ece1d77a2fff7f95705"], 0x1418}}, {{0x0, 0x0, &(0x7f0000006480)=[{&(0x7f0000005280)="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", 0x1000}, {&(0x7f0000006280)="a976b37003373f44e6d5b9000343749db690eeed99664ab25f2c4692d8038f7782aa92101ef54735050d7e550fee784512653833f23a13dcd0c4cd8a15654189d74cc85fb659a0e264c1d80d2af1f30d1fdc481f1d9f6dcb9e060e9c9636bffdf8b7030be0c2e42c935ae23946f519b214e689aea34d1d03cc84667f2f9f865d1b17689e07f2641eca67163642546a8f461825907a07ae8ab6824d6b6e", 0x9d}, {&(0x7f0000006340)="ee473700d79630ff631f7e3e556ee34529847dd4695cdd5d5b118ea41dfac1fe104db47751c276e7ae18748c216fbc376b89e118962b4a89a729c2c443a916199a9950b42c4367a02ad9da51ac2c8b720cf290a28862693322a904699b7646d5e2c796", 0x63}, {&(0x7f00000063c0)="0623dcdd2d5c90302c9493736888df42ce3379b69a", 0x15}, {&(0x7f0000006400)="3741e63f0da86f921c4e888a5380aee4a367dc9b7aaa9e271120e3cb8e8e1508a599fb62f0fcb34639133a498c23554c64bf6ed96457444b83a37a615964c68ae5c7e896d1396a2a43a99f3c", 0x4c}], 0x5, &(0x7f0000006500)=[{0x10, 0x0, 0x4}, {0xd0, 0x100, 0x0, "d2e4b2d809b2423719811e004b362786c5c312954390137f6258976895dabe210014cb823da70d13a284b9f92d368ed2a529a6185d825936e75081bd7bc5d047cfd6b9361f0258ba7a89c3d4238643f1b20bd3d1762676fc073788955a6bf7e54c76993012a266a406ff4b2809d2ff20b337ce6c8a3eae2103226d395f45927645e40cfb9c25b87b86932103ed2ea6cbf684f1b72b609d967edab3baa9658ba00ccbad56806f74e76706945f0461e895913586eb8cf7ea10fc4a9140"}, {0x38, 0x10d, 0x3, "b0603d824d6044f82a3785d0682a1e5d1a996a162506e90d362149678e838f6a783462"}, {0x60, 0x107, 0x1, "b5dda3d5e5ceb5f7b257a9988955ea2430b299dabecae91a2c6081d0cbf0c51ec6b4da760fc12fe660892283f0e67c1cb378a852eb8d8c4a8a75b4b607401eb4394ddbae1baf38bb78f626ee92dd85ec"}, {0xf8, 0x10c, 0x0, "02fd7b5b424847689ed9791223a04a70f115ef6db9a3f6f7e0289937ababb0aa799ffb3849bd79ee8bb6d0c561a8771db218a575ffe048b2cb0accb5c9d9f8943527c0c116a0e56f4dfa3a48f6fb47529a7c819eaa29a95db609201343d8a9df7c0edb647ff3febc03662e29667d999a1933441334f31236519664694cdff2bfc65be3c1c8a40b58daee230333167c4b20f7fce7472ac8a057f309ab4f53162f525d4b8840ab49f7e2ed178b0fd218e267ed6abac1c60380588365b7672448b506034c7f3fa94a2d897c23a04058a9738159c5646fa25041c802c0efe5cbb121cde3c2"}, {0x50, 0x116, 0x1, "c96ed02c1acabf60c8a32c81c423447de1160b164fd199e604e561ecb1b3b0cfe478b26945ee2e661619be8e14d68049ac35a4dbe9fa3be352"}], 0x2c0}}], 0x7, 0x4061) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f00000004c0)={r14}) kcmp(0x0, r12, 0x4, 0xffffffffffffffff, r17) clock_gettime(0x0, &(0x7f0000000240)) timer_settime(r8, 0x0, &(0x7f0000000400), 0x0) timer_settime(r8, 0x2, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140)) write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269) 18:20:02 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0}) [ 770.309122][T32602] binder: 32600:32602 ioctl c018620c 20000600 returned -22 18:20:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400454ca, &(0x7f0000000140)={0x2, 0x0}) 18:20:02 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0}) 18:20:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x4004743a, &(0x7f0000000140)={0x2, 0x0}) 18:20:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCGPTPEER(r0, 0x5441, 0xeafc) r6 = accept4$alg(r5, 0x0, 0x0, 0x80000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0x50, r6, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, {0x7, 0x3, 0x3, 0x22, 0x3, 0x3b}}, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x1, 0x400000000000000) 18:20:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009f00000048b4f6f68a886769485aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dddff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c587c5db4ecaf4ad2dca0c8983bac03b390ae9c03d76f93d7b27dedd9f95e317d2b57eae278aa743d5aeeea569b70a06a984e5c97fbfd4b5a4ab5c836b997ad9b2d95c0f98a6020000000000000046931ad93bd000233b1aa2b4ef004cada744ed258ca8eb243592000de583ccd0c46aa47ea2bd354e574ede07b1ce8a058210f4d4a7c1825973f886426e56c31e84fba623a0df8b5db9c79b1fc37606786b963081cc5dfca933ad8ff2c162f3ea6036582d6cb6d8ada93b938e6b5678a3822af0f6186cdb94ba3e2fd8ea04b06e38309d082fccd02459856897f35090b55babb41617da4048e322f78272ef52c0305cbe2971fcbb7247fa5e5a69e559a06c2813e403b680f5df5ef845c7c76ed653c3ab4356781c2607faa735950cf7f3fb79f29a533e08e4d1ad3ee387"], 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 770.636254][ T344] binder: 342:344 ioctl c018620c 20000600 returned -22 18:20:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x40049409, &(0x7f0000000140)={0x2, 0x0}) 18:20:02 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0}) [ 770.973031][ T464] binder: 459:464 ioctl c018620c 20000600 returned -22 18:20:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009f00000048b4f6f68a886769485aff0808c869b96c8b0b0f32e92604635db8d9eb6eda51f1dddff4c9a4e0652f1c5a27ba0715ba76ace96a68065b0cc350d5258127dd905f13e9019cd06fb2c587c5db4ecaf4ad2dca0c8983bac03b390ae9c03d76f93d7b27dedd9f95e317d2b57eae278aa743d5aeeea569b70a06a984e5c97fbfd4b5a4ab5c836b997ad9b2d95c0f98a6020000000000000046931ad93bd000233b1aa2b4ef004cada744ed258ca8eb243592000de583ccd0c46aa47ea2bd354e574ede07b1ce8a058210f4d4a7c1825973f886426e56c31e84fba623a0df8b5db9c79b1fc37606786b963081cc5dfca933ad8ff2c162f3ea6036582d6cb6d8ada93b938e6b5678a3822af0f6186cdb94ba3e2fd8ea04b06e38309d082fccd02459856897f35090b55babb41617da4048e322f78272ef52c0305cbe2971fcbb7247fa5e5a69e559a06c2813e403b680f5df5ef845c7c76ed653c3ab4356781c2607faa735950cf7f3fb79f29a533e08e4d1ad3ee387"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:20:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000001c0)="04", 0x1, 0xfffffffffffffffd) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @rand_addr="3dafe3eac2d35ca1725b41f2a1f2cbfa", 0x3}], 0x1c) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2000000, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r4, 0x3a69}, &(0x7f0000000200)=0x8) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x806}, 0x20001040) r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r0, r5}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\n\x00'}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 18:20:09 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x40086602, &(0x7f0000000140)={0x2, 0x0}) 18:20:09 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0}) 18:20:09 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x400000000000288, 0x0) r6 = fcntl$dupfd(r2, 0x406, r5) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x5c, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x56cd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d2ccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88") r7 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r7) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername(r8, &(0x7f00000002c0)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80) getpgid(r7) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0xd81c83534925dc4e, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f00000000c0)=0x2, 0x4) r10 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x4, 0x0) fstat(r12, &(0x7f0000000180)) r13 = socket$inet_udplite(0x2, 0x2, 0x88) r14 = creat(&(0x7f0000000200)='./bus\x00', 0x100) r15 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r14, 0x0, 0x2) sendfile(r14, r15, 0x0, 0x40d09) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') r17 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r17, &(0x7f0000000180)='./file1\x00', 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r14, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xd080ab4d75818687}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="000225bd7000fcdbdf250c0000000800040008000000140002e24d23b7ab00a70101004e240000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4000c11}, 0x55b0a6fab8e39875) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r18) 18:20:09 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1810, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000288, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x400000000000288, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='ovgrhay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES64=r1, @ANYRESHEX=0x0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYRES64=r2, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR64, @ANYRES16], @ANYRES16=r3, @ANYRESOCT, @ANYRESHEX], @ANYRES16, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r2], @ANYRESHEX=r5, @ANYRES32=0x0]) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 777.459622][ T581] binder: 580:581 ioctl c018620c 20000600 returned -22 18:20:09 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0}) 18:20:09 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0xa907000000000000, 0x0, 0x0}) 18:20:09 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0}) [ 777.851617][ T802] binder: 800:802 ioctl c018620c 20000600 returned -22 18:20:10 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0xaa07000000000000, 0x0, 0x0}) 18:20:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:20:10 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400c6615, &(0x7f0000000140)={0x2, 0x0}) [ 778.153684][ T910] binder: 909:910 ioctl c018620c 20000600 returned -22 18:20:10 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x0, 0x2, 0x0}) [ 778.493728][ T1131] binder: 1130:1131 ioctl c018620c 20000600 returned -22 18:20:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000001c0)="04", 0x1, 0xfffffffffffffffd) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @rand_addr="3dafe3eac2d35ca1725b41f2a1f2cbfa", 0x3}], 0x1c) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2000000, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r4, 0x3a69}, &(0x7f0000000200)=0x8) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x806}, 0x20001040) r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r0, r5}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\n\x00'}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 18:20:10 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x4010ae67, &(0x7f0000000140)={0x2, 0x0}) 18:20:10 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x0, 0x3, 0x0}) 18:20:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) [ 778.926286][ T1246] binder: 1245:1246 ioctl c018620c 20000600 returned -22 18:20:18 executing program 5: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="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"/445], 0x1}], 0x1}, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@can={0x1d, 0x0}, &(0x7f0000000300)=0x80) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000540)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@multicast1, @in6=@remote, 0x4e21, 0x0, 0x4e23, 0xa2db, 0xc, 0xa0, 0x80, 0x33, r1, r2}, {0x8, 0x1000, 0x8, 0x2, 0x1000, 0x3ff, 0xffffffff}, {0x7, 0x408, 0x0, 0x4000}, 0xed, 0x6e6bb5, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0xff}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x2, 0xff77524828710606, 0x15, 0x1, 0x6, 0x9}}, 0xe8) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8000, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x480c0, 0x8) ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f0000000140)) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000000000009381100080000000c00000010000000140000030000000100000002", 0xffb8, 0x1400}], 0x0, 0x0) 18:20:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:20:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x40189206, &(0x7f0000000140)={0x2, 0x0}) 18:20:18 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x0, 0x4, 0x0}) 18:20:18 executing program 0: shmctl$IPC_RMID(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000600)=""/55) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) epoll_create1(0x80000) preadv(r4, &(0x7f0000000500)=[{&(0x7f0000000240)=""/197, 0xc5}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000003c0)=""/64, 0x40}, {&(0x7f0000000400)=""/143, 0x8f}], 0x4, 0x0) clock_getres(0x0, &(0x7f00000001c0)) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000007900)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, "bf329ee90034fe680d25bc171081714c7e4396b4f0a9a54b1ba9f2d30dc7798e1d8fd8446740071f613f0a031c7a6b6dba2f3a43ae52e3480593d3302efeb74e7c0f9b8e9789dd8ad62064c0576b165a"}, 0xd8) recvmmsg(0xffffffffffffffff, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}, 0xbd6e}], 0x1, 0x2, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x400000000000288, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{0x7fff, 0x8, 0x5, 0x1ff}, {0x1, 0x3, 0x4e, 0x10001}, {0xffc0, 0xfb, 0x2, 0x3ff}]}, 0x10) ioctl$TCGETS(r3, 0x5401, &(0x7f00000005c0)) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x18000, 0x0) syz_genetlink_get_family_id$SEG6(0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0x0, 0x0, 0x2}}, 0xa) 18:20:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x400000000000288, 0x0) splice(r4, &(0x7f00000000c0)=0x100, r5, &(0x7f0000000140)=0x6cab, 0xfffffffffffffff9, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000040)=0x401) r7 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r6, &(0x7f0000001400)="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", 0x600) sendfile(r6, r7, 0x0, 0x10000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4000000) [ 786.723410][ T1373] binder: 1367:1373 ioctl c018620c 20000600 returned -22 18:20:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x4020940d, &(0x7f0000000140)={0x2, 0x0}) [ 786.826293][ T26] audit: type=1804 audit(1573755618.887:91): pid=1380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir534009452/syzkaller.U9td29/192/file0" dev="sda1" ino=16840 res=1 18:20:19 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x0, 0x5, 0x0}) 18:20:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0}) [ 787.105574][ T1603] binder: 1602:1603 ioctl c018620c 20000600 returned -22 18:20:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x8000, &(0x7f0000000380)=0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000000c0)=0x68) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000400)='/dev/video#\x00', 0xd25e, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000200)={0x1fc00000}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) listen(0xffffffffffffffff, 0x4) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) sched_setaffinity(0x0, 0x3, &(0x7f0000000600)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x500) accept(0xffffffffffffff9c, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001300)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 18:20:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x40286608, &(0x7f0000000140)={0x2, 0x0}) 18:20:19 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0xffffffffffffff22, 0x0, 0x0, 0x0, 0x6, 0x0}) [ 787.467533][ T1713] binder: 1712:1713 ioctl c018620c 20000600 returned -22 [ 787.879909][ T1380] ================================================================== [ 787.888068][ T1380] BUG: KCSAN: data-race in hsr_register_frame_out / hsr_register_frame_out [ 787.896636][ T1380] [ 787.898971][ T1380] read to 0xffff8880a1dd5f52 of 2 bytes by task 1372 on cpu 0: [ 787.906515][ T1380] hsr_register_frame_out+0x41/0xc0 [ 787.911717][ T1380] hsr_forward_skb+0x50d/0x1160 [ 787.916563][ T1380] hsr_dev_xmit+0x58/0x70 [ 787.920891][ T1380] dev_hard_start_xmit+0xef/0x430 [ 787.925910][ T1380] __dev_queue_xmit+0x14ab/0x1b40 [ 787.930928][ T1380] dev_queue_xmit+0x21/0x30 [ 787.935433][ T1380] neigh_connected_output+0x28a/0x2e0 [ 787.940802][ T1380] ip_finish_output2+0x4af/0xe40 [ 787.945735][ T1380] __ip_finish_output+0x23a/0x490 [ 787.950758][ T1380] ip_finish_output+0x41/0x160 [ 787.955513][ T1380] ip_mc_output+0x143/0x620 [ 787.960018][ T1380] ip_local_out+0x74/0x90 [ 787.964351][ T1380] ip_send_skb+0x35/0xb0 [ 787.968593][ T1380] udp_send_skb.isra.0+0x3ce/0x8c0 [ 787.973701][ T1380] udp_sendmsg+0x1568/0x1900 [ 787.978289][ T1380] inet_sendmsg+0x6d/0x90 [ 787.982625][ T1380] sock_sendmsg+0x9f/0xc0 [ 787.986951][ T1380] ___sys_sendmsg+0x2b7/0x5d0 [ 787.991625][ T1380] __sys_sendmmsg+0x123/0x350 [ 787.996297][ T1380] __x64_sys_sendmmsg+0x64/0x80 [ 788.001127][ T1380] do_syscall_64+0xcc/0x370 [ 788.005610][ T1380] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 788.011469][ T1380] [ 788.013779][ T1380] write to 0xffff8880a1dd5f52 of 2 bytes by task 1380 on cpu 1: [ 788.021388][ T1380] hsr_register_frame_out+0x8d/0xc0 [ 788.026567][ T1380] hsr_forward_skb+0x50d/0x1160 [ 788.031448][ T1380] hsr_dev_xmit+0x58/0x70 [ 788.035786][ T1380] dev_hard_start_xmit+0xef/0x430 [ 788.040816][ T1380] __dev_queue_xmit+0x14ab/0x1b40 [ 788.045865][ T1380] dev_queue_xmit+0x21/0x30 [ 788.050352][ T1380] neigh_connected_output+0x28a/0x2e0 [ 788.055706][ T1380] ip_finish_output2+0x4af/0xe40 [ 788.060623][ T1380] __ip_finish_output+0x23a/0x490 [ 788.065625][ T1380] ip_finish_output+0x41/0x160 [ 788.070364][ T1380] ip_mc_output+0x143/0x620 [ 788.074844][ T1380] ip_local_out+0x74/0x90 [ 788.079148][ T1380] ip_send_skb+0x35/0xb0 [ 788.083371][ T1380] udp_send_skb.isra.0+0x3ce/0x8c0 [ 788.088459][ T1380] udp_sendmsg+0x1568/0x1900 [ 788.093024][ T1380] inet_sendmsg+0x6d/0x90 [ 788.097331][ T1380] sock_sendmsg+0x9f/0xc0 [ 788.101641][ T1380] ___sys_sendmsg+0x2b7/0x5d0 [ 788.106304][ T1380] __sys_sendmmsg+0x123/0x350 [ 788.110959][ T1380] __x64_sys_sendmmsg+0x64/0x80 [ 788.115792][ T1380] do_syscall_64+0xcc/0x370 [ 788.120284][ T1380] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 788.126144][ T1380] [ 788.128446][ T1380] Reported by Kernel Concurrency Sanitizer on: [ 788.134577][ T1380] CPU: 1 PID: 1380 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 788.142350][ T1380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.152380][ T1380] ================================================================== [ 788.160422][ T1380] Kernel panic - not syncing: panic_on_warn set ... [ 788.167029][ T1380] CPU: 1 PID: 1380 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 788.174807][ T1380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.184839][ T1380] Call Trace: [ 788.188113][ T1380] dump_stack+0x11d/0x181 [ 788.192429][ T1380] panic+0x210/0x640 [ 788.196308][ T1380] ? vprintk_func+0x8d/0x140 [ 788.200920][ T1380] kcsan_report.cold+0xc/0x1a [ 788.205621][ T1380] kcsan_setup_watchpoint+0x3fe/0x460 [ 788.210989][ T1380] __tsan_unaligned_write2+0xc4/0x100 [ 788.216349][ T1380] hsr_register_frame_out+0x8d/0xc0 [ 788.221532][ T1380] hsr_forward_skb+0x50d/0x1160 [ 788.226423][ T1380] ? __sanitizer_cov_trace_const_cmp8+0x10/0x20 [ 788.232655][ T1380] hsr_dev_xmit+0x58/0x70 [ 788.236968][ T1380] dev_hard_start_xmit+0xef/0x430 [ 788.242013][ T1380] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 788.248235][ T1380] __dev_queue_xmit+0x14ab/0x1b40 [ 788.253252][ T1380] ? delay_tsc+0x8f/0xc0 [ 788.257481][ T1380] ? skb_push+0x96/0xb0 [ 788.261636][ T1380] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 788.267519][ T1380] dev_queue_xmit+0x21/0x30 [ 788.272007][ T1380] neigh_connected_output+0x28a/0x2e0 [ 788.277362][ T1380] ip_finish_output2+0x4af/0xe40 [ 788.282280][ T1380] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 788.288158][ T1380] __ip_finish_output+0x23a/0x490 [ 788.293163][ T1380] ? ipv4_confirm+0xdc/0x160 [ 788.297735][ T1380] ip_finish_output+0x41/0x160 [ 788.302481][ T1380] ip_mc_output+0x143/0x620 [ 788.307011][ T1380] ? __ip_finish_output+0x490/0x490 [ 788.312191][ T1380] ip_local_out+0x74/0x90 [ 788.316500][ T1380] ip_send_skb+0x35/0xb0 [ 788.320727][ T1380] udp_send_skb.isra.0+0x3ce/0x8c0 [ 788.325826][ T1380] udp_sendmsg+0x1568/0x1900 [ 788.330399][ T1380] ? ctx_sched_in+0x66/0x360 [ 788.334974][ T1380] ? apic_timer_interrupt+0xa/0x20 [ 788.340065][ T1380] ? ip_reply_glue_bits+0xb0/0xb0 [ 788.345086][ T1380] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 788.351305][ T1380] ? aa_label_sk_perm+0x89/0xe0 [ 788.356145][ T1380] ? aa_sock_msg_perm.isra.0+0xa5/0x140 [ 788.361677][ T1380] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 788.367897][ T1380] inet_sendmsg+0x6d/0x90 [ 788.372858][ T1380] ? inet_sendmsg+0x6d/0x90 [ 788.377382][ T1380] ? inet_send_prepare+0x200/0x200 [ 788.382473][ T1380] sock_sendmsg+0x9f/0xc0 [ 788.386784][ T1380] ___sys_sendmsg+0x2b7/0x5d0 [ 788.391446][ T1380] ? __rcu_read_unlock+0x66/0x3c0 [ 788.396452][ T1380] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 788.402330][ T1380] ? __fget+0xb8/0x1d0 [ 788.406422][ T1380] ? apic_timer_interrupt+0xa/0x20 [ 788.411518][ T1380] ? __sys_sendmmsg+0x13b/0x350 [ 788.416365][ T1380] __sys_sendmmsg+0x123/0x350 [ 788.421026][ T1380] ? __read_once_size+0x5a/0xe0 [ 788.425862][ T1380] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 788.431572][ T1380] ? _copy_to_user+0x84/0xb0 [ 788.436153][ T1380] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 788.442378][ T1380] ? put_timespec64+0x94/0xc0 [ 788.447038][ T1380] __x64_sys_sendmmsg+0x64/0x80 [ 788.451877][ T1380] do_syscall_64+0xcc/0x370 [ 788.456364][ T1380] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 788.462238][ T1380] RIP: 0033:0x45a219 [ 788.466119][ T1380] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 788.485702][ T1380] RSP: 002b:00007ff20e497c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 788.494089][ T1380] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a219 [ 788.502126][ T1380] RDX: 0400000000000288 RSI: 0000000020007fc0 RDI: 0000000000000008 [ 788.510074][ T1380] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 788.518060][ T1380] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff20e4986d4 [ 788.526011][ T1380] R13: 00000000004c7f9d R14: 00000000004de3c8 R15: 00000000ffffffff [ 788.535351][ T1380] Kernel Offset: disabled [ 788.539672][ T1380] Rebooting in 86400 seconds..