cuous mode [ 275.086246][T10022] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.093727][T10022] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.103530][T10022] device bridge_slave_1 entered promiscuous mode [ 275.265213][T10022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.334656][T10022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.457551][T10022] team0: Port device team_slave_0 added [ 275.481253][T10022] team0: Port device team_slave_1 added [ 275.551473][T10022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.558560][T10022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.584871][T10022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.607303][T10022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.615449][T10022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.642546][T10022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.900639][T10022] device hsr_slave_0 entered promiscuous mode [ 275.930643][T10022] device hsr_slave_1 entered promiscuous mode [ 276.039246][T10022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.046898][T10022] Cannot create hsr debugfs directory [ 276.382287][T10022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.460022][T10022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.561252][T10022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.671195][T10022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.000581][T10022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.040103][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.050226][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.076199][T10022] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.109878][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.121502][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.131359][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.138624][ T6879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.155903][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.180581][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.190898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.201010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.208185][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.274615][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.286651][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.298194][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.309457][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.320231][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.331316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.366619][T10022] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.377313][T10022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.405712][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.416464][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.426555][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.437480][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.447717][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.466029][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.514573][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.522879][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.560600][T10022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.623299][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.634371][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.699682][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.709701][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.732532][T10022] device veth0_vlan entered promiscuous mode [ 277.752910][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.763846][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.786910][T10022] device veth1_vlan entered promiscuous mode [ 277.883985][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.893995][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.904641][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.914936][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.936072][T10022] device veth0_macvtap entered promiscuous mode [ 277.956170][T10022] device veth1_macvtap entered promiscuous mode [ 278.017698][T10022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.028484][T10022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.041807][T10022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.052495][T10022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.062600][T10022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.073284][T10022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.088008][T10022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.096512][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.106433][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.116445][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.126985][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.192294][T10022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.203083][T10022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.214332][T10022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.224978][T10022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.235188][T10022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.247131][T10022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.261958][T10022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.294878][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.306243][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:23:50 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x11, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x1, 0x7, 0xff, 0x9, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x401, 0x1800000}, 0xa040, 0x6, 0x1f5ed67b, 0x8, 0x3, 0x83, 0x4}, r2, 0x6, r0, 0x8) 18:23:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={r6, 0x5}, 0x8) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffff0, &(0x7f0000ffb000/0x4000)=nil, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:23:50 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:23:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r5, @ANYBLOB="0000000000000000280000001800020014000100"/36, @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x30000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r9, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000280)={'wg0\x00', r9}) bind(r2, &(0x7f0000000080)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000640)={r11, 0x4, &(0x7f0000000380)=[0x0, 0x66d, 0x20, 0x100], &(0x7f0000000500)=[0x2, 0x866c, 0x2], 0x30, 0x2, 0x1, &(0x7f00000005c0)=[0x800, 0x6], &(0x7f0000000600)=[0x7, 0x0, 0x8, 0x3339ad5f, 0x40, 0x3, 0x20, 0x0, 0x1]}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) [ 279.290134][T10280] binder: 10276:10280 unknown command 0 [ 279.295935][T10280] binder: 10276:10280 ioctl c0306201 20000200 returned -22 [ 279.363649][T10280] binder: 10276:10280 unknown command 0 [ 279.369643][T10280] binder: 10276:10280 ioctl c0306201 20000280 returned -22 18:23:50 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:23:51 executing program 3: syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "093ff2", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x400000000000032c, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x784, 0x8200) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@bcast, @null, @remote, @bcast, @netrom, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x180800) 18:23:51 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x200200, 0x0) syslog(0x4, &(0x7f00000001c0)=""/83, 0x53) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendfile(r1, r1, 0x0, 0x5) write$P9_RREMOVE(r1, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000240)='attr/keycreate\x00') socket(0x11, 0x800000003, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r2) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000380)={0x0, @bt={0x1, 0x7fff, 0x1, 0x0, 0x5, 0xd807228e, 0x7, 0x0, 0xdc, 0x10000, 0x4, 0xffff0001, 0x7fffffff, 0x1, 0x1, 0x11, {0x6, 0x4}, 0x1f, 0x81}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='bond_slave_0\x00') set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) 18:23:51 executing program 0: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x1d, 0x38, r3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r4, 0x2, 0x0, 0x25dfdbfa, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20041900}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x200008a0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000082f0f0000000000000000002700000000f1ff029500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 279.682078][T10289] binder: 10288:10289 unknown command 25348 [ 279.688217][T10289] binder: 10288:10289 ioctl c0306201 20000200 returned -22 [ 279.744040][T10289] binder: 10288:10289 unknown command 0 [ 279.750088][T10289] binder: 10288:10289 ioctl c0306201 20000280 returned -22 18:23:51 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 280.302996][T10303] binder: 10302:10303 unknown command 25348 [ 280.309239][T10303] binder: 10302:10303 ioctl c0306201 20000200 returned -22 [ 280.341936][T10303] binder: 10302:10303 unknown command 0 18:23:51 executing program 0: r0 = openat$autofs(0xffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x202002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x63, 0x6d, &(0x7f0000000100)="38d6bfa098d194b2fbc5ff118f0c77af9ce208887e38375df9035d95e92a410782c8d9ba70a275531a8b14de21e707c65cf76378e4b68280849f60b8140dd2ea43c4687d7f33fa9b416a556e9075e186d720ebecb4d899d461a0e0958190e9ef6d4c1b", &(0x7f0000000240)=""/109, 0x3, 0x0, 0xa5, 0x39, &(0x7f00000002c0)="a26a28bddca7251f603b775ccbf6a128453eeb772f40c1ed8b7fe93466618b96db43921bb9885c6c240fb92ece17b11483267f7cf3542ec07ce00071319ca3d85cd0b594f50197d92e64af11f876f4723a623c05bf5e4dc6c7ce1782a751c6007cb6d4bc686442408a386882cad09069e029bf59d1d5fd1f6485e8c4363e845dd1ee4edf4b3ec080f29ed15676dcda45f713b1620c45e5a2f755c3e2d0fa919fc0f897d265", &(0x7f0000000380)="21367277df258ef73579f448b062a5b4ca50281bbfd406ac3a25b99a5790ee65097f1dc2388c1b5a6c57864d75368dc7b52438265d61e5567d"}, 0x40) [ 280.346409][T10300] IPVS: ftp: loaded support on port[0] = 21 [ 280.347654][T10303] binder: 10302:10303 ioctl c0306201 20000280 returned -22 18:23:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={r6, 0x5}, 0x8) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffff0, &(0x7f0000ffb000/0x4000)=nil, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:23:51 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:23:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) accept4$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630452"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f00000002c0)={0x0, 0x100, "34f5fc7884da6eb9aeaf0b66604d7ba1ba38a228a501dfc2315163f8e5285d71", 0x7, 0xfffffffc, 0xedb, 0x0, 0x15b}) [ 280.797164][T10311] IPVS: ftp: loaded support on port[0] = 21 [ 280.800775][T10313] binder: 10309:10313 unknown command 25348 [ 280.809687][T10313] binder: 10309:10313 ioctl c0306201 20000200 returned -22 [ 280.843215][T10315] binder: 10309:10315 unknown command 0 [ 280.849093][T10315] binder: 10309:10315 ioctl c0306201 20000280 returned -22 18:23:52 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 281.125353][T10360] binder: 10342:10360 unknown command 1376019205 [ 281.132036][T10360] binder: 10342:10360 ioctl c0306201 20000280 returned -22 [ 281.167678][T10360] binder: 10342:10360 ioctl 80045439 20000080 returned -22 [ 281.209051][T10360] binder: BINDER_SET_CONTEXT_MGR already set [ 281.215257][T10360] binder: 10342:10360 ioctl 40046207 0 returned -16 [ 281.253795][T10360] binder: BINDER_SET_CONTEXT_MGR already set [ 281.260360][T10360] binder: 10342:10360 ioctl 40046207 0 returned -16 [ 281.275636][T10363] binder: 10362:10363 unknown command 287492 [ 281.282008][T10363] binder: 10362:10363 ioctl c0306201 20000200 returned -22 [ 281.295425][T10360] binder: 10342:10360 unknown command 114 18:23:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={r6, 0x5}, 0x8) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffff0, &(0x7f0000ffb000/0x4000)=nil, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 281.302179][T10360] binder: 10342:10360 ioctl c0306201 20000280 returned -22 [ 281.326530][T10360] binder: 10342:10360 ioctl c0445624 200002c0 returned -22 [ 281.343183][T10363] binder: 10362:10363 unknown command 0 [ 281.349549][T10363] binder: 10362:10363 ioctl c0306201 20000280 returned -22 [ 281.364770][T10360] binder: BINDER_SET_CONTEXT_MGR already set [ 281.371684][T10360] binder: 10342:10360 ioctl 40046207 0 returned -16 [ 281.386840][T10365] binder: 10342:10365 unknown command 1376019205 [ 281.393552][T10365] binder: 10342:10365 ioctl c0306201 20000280 returned -22 [ 281.408103][T10366] binder: 10342:10366 ioctl 80045439 20000080 returned -22 [ 281.434662][T10368] binder: BINDER_SET_CONTEXT_MGR already set [ 281.441054][T10368] binder: 10342:10368 ioctl 40046207 0 returned -16 [ 281.454707][T10360] binder: 10342:10360 unknown command 114 [ 281.460745][T10360] binder: 10342:10360 ioctl c0306201 20000280 returned -22 18:23:52 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 281.516819][ T1464] tipc: TX() has been purged, node left! 18:23:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={r6, 0x5}, 0x8) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffff0, &(0x7f0000ffb000/0x4000)=nil, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 281.833139][T10373] binder: 10372:10373 unknown command 287492 [ 281.839724][T10373] binder: 10372:10373 ioctl c0306201 20000200 returned -22 [ 281.884259][T10374] binder: 10372:10374 unknown command 0 [ 281.890292][T10374] binder: 10372:10374 ioctl c0306201 20000280 returned -22 18:23:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={r6, 0x5}, 0x8) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffff0, &(0x7f0000ffb000/0x4000)=nil, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:23:53 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:23:53 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000010022000b000100666c6f77657200000c0002000800548004f70080f428d3d06ad9a5b4eb7f01f6d61ca49f406b247204093d6ce405e7ae38c741f34d0379b54b85eabce48e04e978bc057e961d1bd0cfed7bd2e5c8b4edca252ddfce0cc31bdb32e3b9aa2837a67010deac95c9540520a76d8cc4f0dfbbda02c85d9fdf3242542753f41ca1a7d95e04b0a9e0ebfe947e8d10b074a87cffc8a24bdca818627bc85e6b38025a3854b2b9ef6cc379c96577d741bb8886a6e65a36a4ad5f7778e0253f78dc3f069d4809aefcadad1ff66f0a2faeb930665841864bf58fbf0373abb2c995d8bde7e9429aa32a18b45cf338733552661dff116c924e71e7e6"], 0x3c}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) r1 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) 18:23:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={r6, 0x5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 282.365253][T10382] binder: 10381:10382 unknown command 287492 [ 282.372256][T10382] binder: 10381:10382 ioctl c0306201 20000200 returned -22 [ 282.443617][T10382] binder: 10381:10382 unknown command 0 [ 282.450505][T10382] binder: 10381:10382 ioctl c0306201 20000280 returned -22 18:23:54 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:23:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syncfs(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6020920400200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000000000000000000000000000000000000000020eefd4101cbc41554eea304d6c2bbcfb92236ec6c28897b6d7c013e4b945004bdfd9f065e8c6c43268cf59c22a0752e8e6e0541"], 0x0) syz_emit_ethernet(0x26b, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "817ed6", 0x235, 0x8, 0x0, @private0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@fragment={0x2f, 0x0, 0x1, 0x1, 0x0, 0x5, 0x68}, @srh={0x32, 0x10, 0x4, 0x8, 0xba, 0x60, 0x5, [@private2={0xfc, 0x2, [], 0x1f}, @ipv4={[], [], @private=0xa010101}, @remote, @dev={0xfe, 0x80, [], 0x40}, @remote, @dev={0xfe, 0x80, [], 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, [], 0x1}]}, @srh={0x3c, 0x14, 0x4, 0xa, 0x7, 0x28, 0x6c, [@ipv4={[], [], @remote}, @ipv4={[], [], @loopback}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @mcast2, @remote, @empty, @loopback]}], "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"}}}}}, 0x0) 18:23:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:23:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x2000000000000089, &(0x7f0000000940)=ANY=[@ANYBLOB="b700000001edffffbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff000000000f040000000000007e400300000000002704000001ed00007c000000000000006c44000000000000630a00fe000000001f00000000000000b7000000000000009500000400000000023bc065b7a379d17cf9333379fc9e94af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50becb19bc461e91a7168c51815540700000050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e59391ed0000000099b0eaebbdbd7359a48f5b0afc64ee4d3b7611d97b2af503adc20e5d1f626cb7798b3e6440c02a54ffffffffff6b1d4fd67c90cdc710e4cdbf4fc41fbba4f94329e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463b7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008c89a5923906f88b53987f0139d2409cd367e0c33d39000d06ad99edc3a6138dcadfd55429707f64176d5fcfba53f8d0c67ffaa6236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf01000000f523d228a40f9411fe7226a4040996e37c4f46756d3bcd507ed3dddf79f6cd3b8537d89431bd20f146ac1800d7982148681042fc3198ebca5ea67e07e0774392a0a158dd2b3f21cf23397e724419b80050f1cf236d8fb900"/569], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x18}, 0x48) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x5) 18:23:54 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:23:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 283.327480][T10402] binder: 10400:10402 unknown command 0 [ 283.333540][T10402] binder: 10400:10402 ioctl c0306201 20000280 returned -22 [ 283.379135][T10405] binder_alloc: 10400: binder_alloc_buf, no vma [ 283.407820][T10402] binder: 10400:10402 ioctl c004500a 20000080 returned -22 [ 283.437538][T10405] binder: 10400:10405 unknown command 0 [ 283.443604][T10405] binder: 10400:10405 ioctl c0306201 20000280 returned -22 18:23:55 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:23:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:23:55 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x10000010000193, 0x1040) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f0000000100)={0x0, 0x0, 0x8}) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)={0x80, 0x8001, 0x0, 0x8}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) write$P9_RWALK(r2, &(0x7f0000000080)={0x4a, 0x6f, 0x1, {0x5, [{0x1, 0x1, 0x5}, {0x8, 0x0, 0x4}, {0x80, 0x0, 0x8}, {0x0, 0x4, 0x8}, {0x0, 0x1, 0x4}]}}, 0x4a) [ 283.968785][T10414] IPVS: ftp: loaded support on port[0] = 21 18:23:55 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 284.021742][T10415] binder: 10413:10415 unknown command 0 [ 284.027711][T10415] binder: 10413:10415 ioctl c0306201 20000280 returned -22 18:23:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 284.333640][T10440] IPVS: ftp: loaded support on port[0] = 21 [ 284.358022][T10435] binder: 10413:10435 unknown command 0 [ 284.364824][T10435] binder: 10413:10435 ioctl c0306201 20000280 returned -22 18:23:55 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x10000010000193, 0x1040) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f0000000100)={0x0, 0x0, 0x8}) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)={0x80, 0x8001, 0x0, 0x8}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) write$P9_RWALK(r2, &(0x7f0000000080)={0x4a, 0x6f, 0x1, {0x5, [{0x1, 0x1, 0x5}, {0x8, 0x0, 0x4}, {0x80, 0x0, 0x8}, {0x0, 0x4, 0x8}, {0x0, 0x1, 0x4}]}}, 0x4a) 18:23:56 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 284.715290][T10470] IPVS: ftp: loaded support on port[0] = 21 [ 284.747393][T10458] binder: 10452:10458 unknown command 0 [ 284.753915][T10458] binder: 10452:10458 ioctl c0306201 20000280 returned -22 18:23:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:23:56 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:23:56 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce0", 0x7a, r0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r4 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={r7, 0x0, 0x2, [0x0, 0x1f]}, &(0x7f0000000140)=0xc) 18:23:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 285.398912][ T1464] tipc: TX() has been purged, node left! 18:23:57 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:23:57 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce0", 0x7a, r0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r4 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={r7, 0x0, 0x2, [0x0, 0x1f]}, &(0x7f0000000140)=0xc) 18:23:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000240)={0x990000, 0xa6a9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a70, 0x3, [], @string=&(0x7f0000000100)=0xff}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:23:57 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:23:57 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x48}, @generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) r0 = openat$null(0xffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x288080, 0x0) bind$l2tp(r0, &(0x7f0000000380)={0x2, 0x0, @remote, 0x3}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x188000) write$tun(r1, &(0x7f00000000c0)={@void, @void, @x25={0x3, 0x1, 0xf3, "a4d4e215f1240789da23e8e9c94895de84a95ed57a825223240f7083f5445e3d1d1444ae125bfcacf48454d2746ef1db940316efc805b4ac7279a883c2eb1550873590eca2cf455457e670513b29b02dbf6bea678f4121b84762806bbcf01cd0618d3f0934949d2abed00f1c55cc5e39297a02157863446bbd2b101a70e4e56ad00789331f6b3ffa633e2d3bc9038811"}}, 0x93) 18:23:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:23:57 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:23:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:23:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="9a890568e1da72286caaef0738efba7bb9a8325f261467a0cfa10124e0f870e747dfc87b9b60b246cbae56861613250fc62232846447d614b675cef0caa212fee97fe2df876a0a1136360ea8a78786b63a06c425d052a0d646f18c5414503a557f6b09e6201f6476b001e11bba271c577c8bfc8baf307d355d91e4f5d43969436465b4c9fc3614"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000580)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffd16) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000a6ff00000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newchain={0x24, 0x25, 0x6, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x0) 18:23:58 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 286.923220][T10531] binder: 10529:10531 unknown command 1745193370 [ 286.930339][T10531] binder: 10529:10531 ioctl c0306201 20000200 returned -22 [ 286.963185][T10531] binder: 10529:10531 unknown command 0 [ 286.969829][T10531] binder: 10529:10531 ioctl c0306201 20000280 returned -22 [ 286.999807][T10531] binder: 10529:10531 ioctl 80045200 20000140 returned -22 18:23:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 287.131433][T10539] binder: 10533:10539 ioctl c0306201 0 returned -14 [ 287.186133][T10531] binder: 10529:10531 unknown command 1745193370 [ 287.187467][T10541] binder: 10529:10541 unknown command 536870912 [ 287.193238][T10531] binder: 10529:10531 ioctl c0306201 20000200 returned -22 [ 287.207485][T10541] binder: 10529:10541 ioctl c0306201 20000280 returned -22 [ 287.233912][T10537] binder: 10529:10537 ioctl 80045200 20000140 returned -22 18:23:58 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 18:23:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03f28b48fd0010", @ANYRES32, @ANYBLOB="004e7c6e64000000060c00020008dba4"], 0x3c}}, 0x0) [ 287.615513][T10547] binder: 10546:10547 ioctl c0306201 0 returned -14 18:23:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:23:59 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 287.785627][T10550] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 18:23:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 288.127177][T10555] binder: 10554:10555 ioctl c0306201 0 returned -14 18:23:59 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:23:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 288.508394][T10561] binder: 10560:10561 ioctl c0306201 20000280 returned -14 18:24:00 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:24:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 288.914138][T10567] binder: 10566:10567 ioctl c0306201 20000280 returned -14 18:24:00 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:24:00 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r2, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r2, 0x4) 18:24:00 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 289.343008][T10576] binder: 10574:10576 ioctl c0306201 20000280 returned -14 18:24:00 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:24:00 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) 18:24:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) openat$vicodec1(0xffffff9c, &(0x7f0000001300)='/dev/video37\x00', 0x2, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x240380, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001380)={0x0, 0xce8, 0x0, 0x4, 0x5, 0x1}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000013c0)={0xa0002008}) r4 = openat$nvram(0xffffff9c, &(0x7f0000001400)='/dev/nvram\x00', 0x42000, 0x0) move_mount(r4, &(0x7f0000001440)='./file0\x00', r3, &(0x7f0000001480)='./file0\x00', 0x12) r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000014c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc25c4111, &(0x7f0000001500)={0x80, [[0x189, 0x491, 0x6, 0x7fffffff, 0x3, 0x6, 0x4a, 0x8], [0x8, 0x3, 0x0, 0x2668, 0x5, 0x284c, 0x6, 0x7782], [0x3, 0x100, 0x20, 0xffffffe5, 0x5, 0x59c, 0x1, 0x45b]], [], [{0x7fffffff, 0xffff, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x7, 0x0, 0x1}, {0xffffffc8, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x943, 0xa6, 0x0, 0x0, 0x0, 0x1}, {0x7fffffff, 0x401, 0x1, 0x1, 0x0, 0x1}, {0xe5f2, 0x1fcd, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x55, 0x1, 0x1, 0x0, 0x1}, {0xbb6, 0x101, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x40, 0x0, 0x0, 0x0, 0x1}, {0xf47, 0x7fff, 0x0, 0x1}]}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001780)=0x0) move_pages(r6, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 289.795113][T10585] binder: 10584:10585 unknown command 809004142 [ 289.801632][T10585] binder: 10584:10585 ioctl c0306201 20000280 returned -22 18:24:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7823b6f8e22acb93cc99a31f68b946abf1e5dbbe62f7bc1288374380aa191bbb505bb2b91db38dc6a1657eac52126a4247dd58c71c288c54d894ac76f935137219312cfd93662e71c6c289149041d9dbf1d51ca9b5f3c700"/125], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000800002276000004000000a8c5000000000020038a00000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x74) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000140)={0x2, {0x20, 0x1ff, 0x0, 0xfd6}}) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x76e}}, 0x18) 18:24:01 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) [ 290.083689][T10590] binder: 10589:10590 unknown command -122281096 [ 290.090407][T10590] binder: 10589:10590 ioctl c0306201 20000200 returned -22 18:24:01 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 290.125433][T10590] binder: 10589:10590 unknown command 0 [ 290.131406][T10590] binder: 10589:10590 ioctl c0306201 20000280 returned -22 [ 290.183847][T10591] binder: 10589:10591 ioctl 4014563c 20000140 returned -22 [ 290.242850][T10591] binder: 10589:10591 unknown command 114 [ 290.248713][T10591] binder: 10589:10591 ioctl c0306201 20000280 returned -22 [ 290.259307][T10590] binder: BINDER_SET_CONTEXT_MGR already set [ 290.265423][T10590] binder: 10589:10590 ioctl 40046207 0 returned -16 [ 290.278312][T10593] binder: 10589:10593 ioctl 4014563c 20000140 returned -22 18:24:01 executing program 0: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xb053, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000af1b85225f00000000002700000000000003950000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') [ 290.464669][T10599] binder: 10595:10599 unknown command 809004142 [ 290.471507][T10599] binder: 10595:10599 ioctl c0306201 20000280 returned -22 18:24:02 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:24:02 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) 18:24:02 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:24:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) listen(r0, 0x8) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x10) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000000c0)=0x10000, &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 291.026844][T10605] IPVS: ftp: loaded support on port[0] = 21 [ 291.060407][T10608] binder: 10606:10608 unknown command 809004142 [ 291.066789][T10608] binder: 10606:10608 ioctl c0306201 20000280 returned -22 18:24:02 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 18:24:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 291.665648][T10642] binder: 10638:10642 unknown command 809004142 [ 291.672389][T10642] binder: 10638:10642 ioctl c0306201 20000280 returned -22 [ 292.043450][T10605] chnl_net:caif_netlink_parms(): no params data found [ 292.312203][T10605] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.319965][T10605] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.329911][T10605] device bridge_slave_0 entered promiscuous mode [ 292.347063][T10605] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.354621][T10605] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.365757][T10605] device bridge_slave_1 entered promiscuous mode [ 292.450199][T10605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.470675][T10605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.551814][T10605] team0: Port device team_slave_0 added [ 292.571019][T10605] team0: Port device team_slave_1 added [ 292.631979][T10605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.639877][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.666137][T10605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.687219][T10605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.697154][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.723319][T10605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.837780][T10605] device hsr_slave_0 entered promiscuous mode [ 292.871507][T10605] device hsr_slave_1 entered promiscuous mode [ 292.939451][T10605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.947119][T10605] Cannot create hsr debugfs directory [ 293.332131][T10605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 293.402329][T10605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 293.463946][T10605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 293.578285][T10605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.867895][T10605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.904450][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.914552][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.938625][T10605] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.966807][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.978069][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.987771][ T2640] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.995235][ T2640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.014449][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.024016][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.034628][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.044884][ T2640] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.052235][ T2640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.116671][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.127206][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.138656][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.150893][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.202810][T10605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.214294][T10605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.230987][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.241527][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.252277][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.265146][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.275732][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.286208][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.296291][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.384147][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.394666][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.402874][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.424860][T10605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.633201][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.643709][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.722545][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.734211][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.762964][T10605] device veth0_vlan entered promiscuous mode [ 294.776030][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.785516][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.821058][T10605] device veth1_vlan entered promiscuous mode [ 294.838482][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 294.924786][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.939249][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.967897][T10605] device veth0_macvtap entered promiscuous mode [ 295.005626][T10605] device veth1_macvtap entered promiscuous mode [ 295.058912][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 295.069685][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.080278][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 295.091011][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.101111][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 295.111748][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.121844][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 295.132497][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.147428][T10605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.161403][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.171324][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.181248][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.191560][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.250213][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 295.261088][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.271339][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 295.282077][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.292187][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 295.303000][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.313328][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 295.324582][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.339603][T10605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.356688][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.367517][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:24:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) openat$vicodec1(0xffffff9c, &(0x7f0000001300)='/dev/video37\x00', 0x2, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x240380, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001380)={0x0, 0xce8, 0x0, 0x4, 0x5, 0x1}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000013c0)={0xa0002008}) r4 = openat$nvram(0xffffff9c, &(0x7f0000001400)='/dev/nvram\x00', 0x42000, 0x0) move_mount(r4, &(0x7f0000001440)='./file0\x00', r3, &(0x7f0000001480)='./file0\x00', 0x12) r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000014c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc25c4111, &(0x7f0000001500)={0x80, [[0x189, 0x491, 0x6, 0x7fffffff, 0x3, 0x6, 0x4a, 0x8], [0x8, 0x3, 0x0, 0x2668, 0x5, 0x284c, 0x6, 0x7782], [0x3, 0x100, 0x20, 0xffffffe5, 0x5, 0x59c, 0x1, 0x45b]], [], [{0x7fffffff, 0xffff, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x7, 0x0, 0x1}, {0xffffffc8, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x943, 0xa6, 0x0, 0x0, 0x0, 0x1}, {0x7fffffff, 0x401, 0x1, 0x1, 0x0, 0x1}, {0xe5f2, 0x1fcd, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x55, 0x1, 0x1, 0x0, 0x1}, {0xbb6, 0x101, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x40, 0x0, 0x0, 0x0, 0x1}, {0xf47, 0x7fff, 0x0, 0x1}]}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001780)=0x0) move_pages(r6, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX=r3, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) sendto(0xffffffffffffffff, &(0x7f0000000240)="04e5b6877d124a04f65f75", 0xb, 0x8002, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [{0x0, 0x0, 0x0, 0x0, 0x800}]}, 0x54) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1af5ef04f25331f2c060d7db7959a2f8d4cb0baf48ba8a24a25b0101000095fb747f57b7490700000000000000239f3b62d2e25f348b729db5ccf8a8c771329c6867a9e6d3616c829a9eb1c09f07", @ANYRES16=r5, @ANYBLOB="000000000000cb000000000000000700"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0804}, 0x1c890) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000100}, 0x40) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x1b8, r5, 0x24, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44e9d10}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x352a6acc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4263426e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44ae77a2}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21a67150}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x401}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67c61b85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f5c3563}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6685450b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d3304f8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x104, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c6f59e3}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75a22ed3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4682039a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19e4cdc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79cce475}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6543c7cd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79fceccc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x705df4f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8bd084c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45a249b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64df8ca4}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x221e178b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40040}, 0x1) 18:24:07 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 18:24:07 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) socket$inet6_sctp(0xa, 0x1, 0x84) 18:24:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 296.386893][T10860] binder: 10856:10860 unknown command 809004142 [ 296.393633][T10860] binder: 10856:10860 ioctl c0306201 20000280 returned -22 [ 296.414398][T10859] device lo entered promiscuous mode 18:24:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:24:08 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 18:24:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x6, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0x3, 0xb, 0x2, 0xfffffffffffffff8}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000180)=""/143, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) openat$vicodec1(0xffffff9c, &(0x7f0000001300)='/dev/video37\x00', 0x2, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x240380, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001380)={0x0, 0xce8, 0x0, 0x4, 0x5, 0x1}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000013c0)={0xa0002008}) r4 = openat$nvram(0xffffff9c, &(0x7f0000001400)='/dev/nvram\x00', 0x42000, 0x0) move_mount(r4, &(0x7f0000001440)='./file0\x00', r3, &(0x7f0000001480)='./file0\x00', 0x12) r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000014c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc25c4111, &(0x7f0000001500)={0x80, [[0x189, 0x491, 0x6, 0x7fffffff, 0x3, 0x6, 0x4a, 0x8], [0x8, 0x3, 0x0, 0x2668, 0x5, 0x284c, 0x6, 0x7782], [0x3, 0x100, 0x20, 0xffffffe5, 0x5, 0x59c, 0x1, 0x45b]], [], [{0x7fffffff, 0xffff, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x7, 0x0, 0x1}, {0xffffffc8, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x943, 0xa6, 0x0, 0x0, 0x0, 0x1}, {0x7fffffff, 0x401, 0x1, 0x1, 0x0, 0x1}, {0xe5f2, 0x1fcd, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x55, 0x1, 0x1, 0x0, 0x1}, {0xbb6, 0x101, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x40, 0x0, 0x0, 0x0, 0x1}, {0xf47, 0x7fff, 0x0, 0x1}]}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001780)=0x0) move_pages(r6, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 296.948750][T10864] Y­4`Ò˜: renamed from lo [ 297.079118][T10878] binder: 10871:10878 unknown command 809004142 [ 297.085784][T10878] binder: 10871:10878 ioctl c0306201 20000280 returned -22 18:24:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4044084}, 0x20040000) r3 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000176000000000000002700039500000000000000cd29da12a9fe1bad9a1015284cf23d48cc36f6de535a3bb7c2b86ff38e6fd401f0bdba4e434563b9747d85552be10640e02d4eb266c53ece216ae35112734f65525d13664ec370c43c525da3e99e93ec030000008e3c65"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:24:08 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x300) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="9cb292a903b25151a36e144c403e9b80955e2c8f34e1b13b9a6492c67d3fd4973715931bd5c156299cea702264433b2675d5428ff503ee893e33a96a85401c748bc4d042c5a025e27b4b79e4116925b56bcd5bc4c04fd3dd8f453c9a2d7020c45b70aea7f163dd62ff49424c8c55fe11cb16ce39abda1c2145bc05deee894797c6b3883fd0666b334d121ed2f280c64d08a64dd8ccb8a997d6a5006655e402000000563d382f22ce6e923ad5de278a51d4fa8503287714b345972b964fddbfc5f5afa514e61da657725404410156c70f722eb236afbcd117c96671dbad8c003989c5077e56214147d627a9370ddb266e2e5b5d", 0xf3}], 0x1, 0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYRES16=r6], 0x40}}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r2}) setsockopt$sock_attach_bpf(r0, 0x1, 0xe, &(0x7f0000000040), 0x4) 18:24:08 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) [ 297.600603][T10892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=10892 comm=syz-executor.0 [ 297.661896][T10895] binder: BINDER_SET_CONTEXT_MGR already set [ 297.668175][T10895] binder: 10888:10895 ioctl 40046207 0 returned -16 [ 297.695805][T10894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10894 comm=syz-executor.2 [ 297.715993][T10897] binder: 10888:10897 unknown command 0 [ 297.722036][T10897] binder: 10888:10897 ioctl c0306201 20000280 returned -22 18:24:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 297.758005][T10892] binder: 10888:10892 ioctl 80044dff 20000000 returned -22 [ 297.767591][T10898] sock: process `syz-executor.2' is using obsolete setsockopt SO_BSDCOMPAT [ 297.816941][T10896] binder: 10893:10896 unknown command 809001733 [ 297.823609][T10896] binder: 10893:10896 ioctl c0306201 20000280 returned -22 [ 297.829521][T10895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=10895 comm=syz-executor.0 18:24:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) openat$vicodec1(0xffffff9c, &(0x7f0000001300)='/dev/video37\x00', 0x2, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x240380, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001380)={0x0, 0xce8, 0x0, 0x4, 0x5, 0x1}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000013c0)={0xa0002008}) r4 = openat$nvram(0xffffff9c, &(0x7f0000001400)='/dev/nvram\x00', 0x42000, 0x0) move_mount(r4, &(0x7f0000001440)='./file0\x00', r3, &(0x7f0000001480)='./file0\x00', 0x12) r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000014c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc25c4111, &(0x7f0000001500)={0x80, [[0x189, 0x491, 0x6, 0x7fffffff, 0x3, 0x6, 0x4a, 0x8], [0x8, 0x3, 0x0, 0x2668, 0x5, 0x284c, 0x6, 0x7782], [0x3, 0x100, 0x20, 0xffffffe5, 0x5, 0x59c, 0x1, 0x45b]], [], [{0x7fffffff, 0xffff, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x7, 0x0, 0x1}, {0xffffffc8, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x943, 0xa6, 0x0, 0x0, 0x0, 0x1}, {0x7fffffff, 0x401, 0x1, 0x1, 0x0, 0x1}, {0xe5f2, 0x1fcd, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x55, 0x1, 0x1, 0x0, 0x1}, {0xbb6, 0x101, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x40, 0x0, 0x0, 0x0, 0x1}, {0xf47, 0x7fff, 0x0, 0x1}]}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001780)=0x0) move_pages(r6, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 297.871087][T10894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10894 comm=syz-executor.2 [ 297.893948][T10898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10898 comm=syz-executor.2 18:24:09 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) 18:24:09 executing program 0: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)={0xff, 0x9, "f897bc338b9c7999a496bc376cd5d96f814f7ab62371f6df4e831a247a8e5e2c906c4c903773bd088653e28a0725cca444997d083f9f7e3901f8269c877410f22182f04ef5d3c9ebd73c1db36724d14d36b25e43ec5de34e59972f7093bcdee9da0af0b4e2ea92956caeadd15cf6a844ee31d7c0998bb8e72e2a4da81049fffc8616482195762d64fafdb07e2bcdc5b33b1e3e9cf6a83fdd68f58f18665a493944cc13318096d130d97871ffa343844ce656dc83b954f2efabc2c81b023f799ca9b3444e672a8a298f8a2673f4bbcfc9a6cb1a375b6ca13dfcfc3a3e30ffe133ff742180ee243505a164bbfd6139ca715f4beb140e9b22"}, 0x480481) 18:24:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @enum={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000001240)=""/4103, 0x3e, 0x1007, 0x1041}, 0x20) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001600010000ffffffdd0000000a000000", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000000000000000000000000aa14000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e23, 0x3, @empty, 0x8001}}, 0x1, 0x80, 0xfffffffc, 0x7}, &(0x7f0000000240)=0x98) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x20000000) 18:24:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) openat$vicodec1(0xffffff9c, &(0x7f0000001300)='/dev/video37\x00', 0x2, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x240380, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001380)={0x0, 0xce8, 0x0, 0x4, 0x5, 0x1}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000013c0)={0xa0002008}) r4 = openat$nvram(0xffffff9c, &(0x7f0000001400)='/dev/nvram\x00', 0x42000, 0x0) move_mount(r4, &(0x7f0000001440)='./file0\x00', r3, &(0x7f0000001480)='./file0\x00', 0x12) r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000014c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc25c4111, &(0x7f0000001500)={0x80, [[0x189, 0x491, 0x6, 0x7fffffff, 0x3, 0x6, 0x4a, 0x8], [0x8, 0x3, 0x0, 0x2668, 0x5, 0x284c, 0x6, 0x7782], [0x3, 0x100, 0x20, 0xffffffe5, 0x5, 0x59c, 0x1, 0x45b]], [], [{0x7fffffff, 0xffff, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x7, 0x0, 0x1}, {0xffffffc8, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x943, 0xa6, 0x0, 0x0, 0x0, 0x1}, {0x7fffffff, 0x401, 0x1, 0x1, 0x0, 0x1}, {0xe5f2, 0x1fcd, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x55, 0x1, 0x1, 0x0, 0x1}, {0xbb6, 0x101, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x40, 0x0, 0x0, 0x0, 0x1}, {0xf47, 0x7fff, 0x0, 0x1}]}) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 298.396487][T10912] binder: 10909:10912 unknown command 809001733 [ 298.403192][T10912] binder: 10909:10912 ioctl c0306201 20000280 returned -22 18:24:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="6250c6943b4ead29aa0000000600000027000000000000039500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x1d, 0x38, r3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r4, 0x2, 0x0, 0x25dfdbfa, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20041900}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x16, 0xfff, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x24000010) [ 298.497789][T10913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=10913 comm=syz-executor.2 18:24:10 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) 18:24:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:24:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) openat$vicodec1(0xffffff9c, &(0x7f0000001300)='/dev/video37\x00', 0x2, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x240380, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001380)={0x0, 0xce8, 0x0, 0x4, 0x5, 0x1}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000013c0)={0xa0002008}) r4 = openat$nvram(0xffffff9c, &(0x7f0000001400)='/dev/nvram\x00', 0x42000, 0x0) move_mount(r4, &(0x7f0000001440)='./file0\x00', r3, &(0x7f0000001480)='./file0\x00', 0x12) openat$proc_capi20ncci(0xffffff9c, &(0x7f00000014c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 298.938434][T10924] binder: 10922:10924 unknown command 809001733 [ 298.945211][T10924] binder: 10922:10924 ioctl c0306201 20000280 returned -22 18:24:10 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x9, 0x5, 0x77, 0x7f, 0x10, "0f2dd8105064048e"}) openat$cachefiles(0xffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x4200, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000100)=[0x5, 0x401, 0x401, 0x3e7e47e, 0xdc, 0x401, 0x6000, 0xb9d], 0x8, 0x0, r5}) 18:24:10 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) 18:24:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 299.230142][T10931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=10931 comm=syz-executor.2 18:24:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) openat$vicodec1(0xffffff9c, &(0x7f0000001300)='/dev/video37\x00', 0x2, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x240380, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001380)={0x0, 0xce8, 0x0, 0x4, 0x5, 0x1}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000013c0)={0xa0002008}) r4 = openat$nvram(0xffffff9c, &(0x7f0000001400)='/dev/nvram\x00', 0x42000, 0x0) move_mount(r4, &(0x7f0000001440)='./file0\x00', r3, &(0x7f0000001480)='./file0\x00', 0x12) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 299.411448][T10935] binder: 10933:10935 unknown command 114 [ 299.417464][T10935] binder: 10933:10935 ioctl c0306201 20000280 returned -22 18:24:10 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @enum={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000001240)=""/4103, 0x3e, 0x1007, 0x1041}, 0x20) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001600010000ffffffdd0000000a000000", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000000000000000000000000aa14000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e23, 0x3, @empty, 0x8001}}, 0x1, 0x80, 0xfffffffc, 0x7}, &(0x7f0000000240)=0x98) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x20000000) [ 299.464327][T10938] binder: 10934:10938 unknown command 805593861 [ 299.471298][T10938] binder: 10934:10938 ioctl c0306201 20000280 returned -22 [ 299.485051][T10940] binder: 10933:10940 ioctl c01064c7 20000240 returned -22 [ 299.548537][T10940] binder: 10933:10940 unknown command 114 [ 299.554636][T10940] binder: 10933:10940 ioctl c0306201 20000280 returned -22 [ 299.605129][T10942] binder: 10933:10942 ioctl c01064c7 20000240 returned -22 18:24:11 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) 18:24:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:24:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000008000000765140003500000027000000000000039500000000000500"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:24:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) openat$vicodec1(0xffffff9c, &(0x7f0000001300)='/dev/video37\x00', 0x2, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x240380, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001380)={0x0, 0xce8, 0x0, 0x4, 0x5, 0x1}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000013c0)={0xa0002008}) openat$nvram(0xffffff9c, &(0x7f0000001400)='/dev/nvram\x00', 0x42000, 0x0) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 299.913908][T10949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=10949 comm=syz-executor.2 [ 299.949668][T10950] binder: 10948:10950 unknown command 805593861 [ 299.956104][T10950] binder: 10948:10950 ioctl c0306201 20000280 returned -22 18:24:11 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) 18:24:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:11 executing program 0: r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000100)) r2 = syz_open_procfs(r0, &(0x7f0000000080)='net/mcfilter6\x00') ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850008000800000000000027000000000000039500"/32], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x10f0c0) 18:24:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) openat$vicodec1(0xffffff9c, &(0x7f0000001300)='/dev/video37\x00', 0x2, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x240380, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001380)={0x0, 0xce8, 0x0, 0x4, 0x5, 0x1}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000013c0)={0xa0002008}) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 300.488658][T10961] binder: 10959:10961 unknown command 805593861 [ 300.495802][T10961] binder: 10959:10961 ioctl c0306201 20000280 returned -22 18:24:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4044084}, 0x20040000) r3 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000176000000000000002700039500000000000000cd29da12a9fe1bad9a1015284cf23d48cc36f6de535a3bb7c2b86ff38e6fd401f0bdba4e434563b9747d85552be10640e02d4eb266c53ece216ae35112734f65525d13664ec370c43c525da3e99e93ec030000008e3c65"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:24:12 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x2a8, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x174, 0x7f, "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"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac0b, 0xfac08, 0xfac08, 0xfac03, 0xfac01, 0x0]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_FTM_RESPONDER={0xf0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4b, 0x3, "ba3c638ffac83ac18068adc8090231cd583e58bd3b1e0ea0db605eff4574105f011ea13641b29d441bb4b456791cb29d37dad63f7b0209d87e24a3b3799a687f8a097fa6c7a9e7"}, @NL80211_FTM_RESP_ATTR_LCI={0x99, 0x2, "63c87e63a07d5b3af6baf4692bcdb4ec7ce7073208da6157cbb68ba7db9ef7dfbde8535d21dc05c7817537e805c73405817f63f115dc78b6c942f271f69418e853eda408057d7eb0dd0156e5414925cacfd99f1e2333bd80bfb04d77a5742379c222b81a4603060a5a28fa18387c168bc3f28692e4398f45a761a953dab83444f66a16aa82953e3a7e55534123d1d42710cfe6ee1a"}]}, @NL80211_ATTR_PBSS={0x4}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x20008010}, 0x24040000) 18:24:12 executing program 1 (fault-call:6 fault-nth:0): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) openat$vicodec1(0xffffff9c, &(0x7f0000001300)='/dev/video37\x00', 0x2, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x240380, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001380)={0x0, 0xce8, 0x0, 0x4, 0x5, 0x1}, 0xc) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 301.064098][T10974] binder: 10971:10974 unknown command 0 [ 301.070123][T10974] binder: 10971:10974 ioctl c0306201 20000280 returned -22 [ 301.101482][T10976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=10976 comm=syz-executor.2 18:24:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 301.159084][T10978] binder: 10972:10978 unknown command 0 [ 301.165014][T10978] binder: 10972:10978 ioctl c0306201 20000280 returned -22 [ 301.220296][T10980] binder_alloc: 10972: binder_alloc_buf, no vma [ 301.252765][T10976] binder: 10972:10976 ioctl 80044dff 20000000 returned -22 18:24:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = socket(0x25, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1000}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x6}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'ip6gre0\x00'}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x1000}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x800}]}, 0x50}}, 0x4000000) 18:24:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={{0x2, 0x0, @reserved="bdb06c012bc27144c85db00d451928398d44e1313f28a729c54eb29d3c85a1e9"}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x8) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0xa0000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:24:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) openat$vicodec1(0xffffff9c, &(0x7f0000001300)='/dev/video37\x00', 0x2, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x240380, 0x0) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 301.624923][T10988] binder: 10985:10988 unknown command 0 [ 301.630894][T10988] binder: 10985:10988 ioctl c0306201 20000280 returned -22 18:24:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 301.721844][T10990] binder: 10985:10990 unknown command 0 [ 301.727826][T10990] binder: 10985:10990 ioctl c0306201 20000280 returned -22 18:24:13 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) pipe(0x0) mknod(&(0x7f0000000380)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000005b000000000000000700000000000003950000000000000045aebb9454d667412b6e7a7244cfbc1dec6bf6f4b8bfa4c44fc0a3d55fdb5ea4170020db02c434e7030010a28d7f65218f4e26fb7d5c"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 301.819131][T10993] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:24:13 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x6c, 0x0, &(0x7f0000000140)=[@exit_looper, @dead_binder_done, @request_death={0x400c630e, 0x2}, @exit_looper, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x1, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x46, 0x0, &(0x7f00000002c0)="bb7befa9360a34037ba4fb9f923faa20849936f25224f7ba765d5088678b383bc5406417fad038db29e51526357eeff4afa6de2ed719bf696268eb9ea0500c5f4e4ba5377aaa"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) openat$vicodec1(0xffffff9c, &(0x7f0000001300)='/dev/video37\x00', 0x2, 0x0) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2835961fc8b421c2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="617155d270030000003ea730a344"], 0xe) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x4800, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0xffffffff) socket$rds(0x15, 0x5, 0x0) 18:24:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:24:13 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000100)={0x990000, 0xfff, 0x9, r2, 0x0, &(0x7f00000000c0)={0x9b0950, 0x40, [], @string=&(0x7f0000000080)=0x3}}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) linkat(r3, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000180)='./file0\x00', 0x1400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440f7b8622c0e2e3737bbbb02010b54c45fd33ed172d755567b70c8108cc8e644e97a7943de2f7f1de848d4e85de1135a57afb1fd16fefe67d7561f9f15abff15337d2db10183cfe3d62f85af4ba32f1b6016789adb7d1efce2c811ab3e2b950a2c78e0a1569ff494008bd81e9fa1d7b693f3901ea36d58611eea0cb56d06a362a219ccdfe53d98ae70a12d9da19e26118023ae31d5f4"], 0x0, 0x0, 0x0}) r7 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:13 executing program 0: get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x2, &(0x7f0000ffe000/0x1000)=nil, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = openat$pfkey(0xffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80800, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000100)=0xd000) 18:24:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)=""/11, 0x3, 0x2}}, 0x48) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:14 executing program 2: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) r3 = openat$mice(0xffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x40000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r6, 0x5}, &(0x7f0000000140)=0x8) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) [ 302.794224][T11023] binder: BINDER_SET_CONTEXT_MGR already set [ 302.800668][T11023] binder: 11021:11023 ioctl 40046207 0 returned -16 18:24:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 302.857985][T11023] binder: 11021:11023 unknown command 0 [ 302.864009][T11023] binder: 11021:11023 ioctl c0306201 20000280 returned -22 18:24:14 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc044565d, &(0x7f0000000080)={0x62, 0xa, 0x4, 0x1000, 0x9, {0x0, 0xea60}, {0x1, 0x1, 0x8, 0x0, 0x9, 0x7, "cf991bf0"}, 0x4, 0x1, @offset=0x2, 0x7fff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000240)={{0x3, @name="9c312f90a93eafd143e6f1d84f9f8b33477d8eb10e4497f177c1444500a18c32"}, "a5fbea768362dffe996da513fc633b2c6516c3e2ee851b5f8a2c41706244f627"}) [ 302.953580][T11026] binder: 11021:11026 unknown command 0 [ 302.959330][T11026] binder: 11021:11026 ioctl c0306201 20000280 returned -22 [ 303.105670][T11031] IPVS: ftp: loaded support on port[0] = 21 18:24:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) r2 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x100, 0x3, 0x1}) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:14 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05ff0440"], 0x0, 0x0, 0x0}) [ 303.331502][T11040] binder: 11036:11040 unknown command 114 [ 303.337530][T11040] binder: 11036:11040 ioctl c0306201 20000280 returned -22 [ 303.386833][T11046] binder: 11036:11046 ioctl c044565d 20000080 returned -22 [ 303.463211][T11051] binder: 11047:11051 unknown command 1074069253 [ 303.470221][T11051] binder: 11047:11051 ioctl c0306201 20000280 returned -22 18:24:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 303.525464][T11046] binder: BINDER_SET_CONTEXT_MGR already set [ 303.531946][T11046] binder: 11036:11046 ioctl 40046207 0 returned -16 [ 303.547267][T11063] binder: 11047:11063 unknown command 1074069253 [ 303.554264][T11063] binder: 11047:11063 ioctl c0306201 20000280 returned -22 [ 303.571784][T11040] binder: 11036:11040 unknown command 114 [ 303.577702][T11040] binder: 11036:11040 ioctl c0306201 20000280 returned -22 [ 303.594882][T11046] binder: 11036:11046 ioctl c044565d 20000080 returned -22 18:24:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:15 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000080)={0x400, "976823"}, 0x6) [ 303.816555][T11031] IPVS: ftp: loaded support on port[0] = 21 18:24:15 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x0, 0x800, 0x9, 0x9, 0x4, 0x800, 0xfffffe01, {0x0, @in6={{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}, 0x0, 0x1, 0x5, 0x5, 0x3dbb}}, &(0x7f0000000240)=0xb0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc044560f, &(0x7f00000014c0)={0x2, 0x7, 0x4, 0x2, 0x0, {0x77359400}, {0x3, 0x8, 0x0, 0x18, 0x1, 0x8, "89026f5b"}, 0x2, 0x5, @userptr=0x6f, 0x101, 0x0, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) ioctl$TUNGETFILTER(r3, 0x800854db, &(0x7f00000000c0)=""/183) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001540)={r6, 0x4, 0x3, 0x2}, &(0x7f0000001580)=0x10) 18:24:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 304.156886][T11095] binder: 11073:11095 unknown command 0 [ 304.162910][T11095] binder: 11073:11095 ioctl c0306201 20000200 returned -22 18:24:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r1) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 304.215462][T11097] binder: 11073:11097 unknown command 0 [ 304.221354][T11097] binder: 11073:11097 ioctl c0306201 20000280 returned -22 [ 304.276303][T11099] binder: 11094:11099 unknown command 114 [ 304.282798][T11099] binder: 11094:11099 ioctl c0306201 20000280 returned -22 [ 304.296998][T11097] binder: 11073:11097 unknown command 0 [ 304.302907][T11097] binder: 11073:11097 ioctl c0306201 20000280 returned -22 [ 304.333211][T11102] binder: 11094:11102 ioctl c044560f 200014c0 returned -22 18:24:15 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100), 0x4) r3 = openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:16 executing program 0: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) connect$caif(r0, &(0x7f0000000080)=@dbg={0x25, 0x7, 0x80}, 0x18) 18:24:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x104) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000010000000e40f000000000000066836e2b2db2417df000000000000000180000000000000"]) dup2(r1, r0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r4 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001180)={{{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xfffffefd) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) r6 = getpid() r7 = gettid() rt_tgsigqueueinfo(r6, r6, 0x11, &(0x7f0000000100)={0x33}) sched_getaffinity(r7, 0x8, &(0x7f0000000040)) 18:24:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 304.799975][ T1264] tipc: TX() has been purged, node left! 18:24:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:24:16 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000000)='md5sum\x00', 0x7) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x80}]}, 0x28}}, 0x0) 18:24:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x9, &(0x7f0000000080)=@raw=[@map={0x18, 0x1, 0x1, 0x0, r2}, @exit, @ldst={0x0, 0x2, 0x2, 0x9, 0x6, 0x10, 0x1}, @jmp={0x5, 0x0, 0xa, 0xa, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xc, 0xc, 0x4, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x7, 0xb, 0x5, 0x20, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f4dc8bd}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:16 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) semget(0x1, 0x3, 0x200) openat$btrfs_control(0xffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="fb620540"], 0x0, 0x0, 0x0}) 18:24:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) set_thread_area(&(0x7f0000000180)={0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 305.361510][T11129] binder: 11126:11129 unknown command 0 [ 305.367369][T11129] binder: 11126:11129 ioctl c0306201 20000280 returned -22 [ 305.419042][T11133] binder_alloc: 11126: binder_alloc_buf, no vma [ 305.452573][T11133] binder: 11126:11133 unknown command 114 [ 305.458583][T11133] binder: 11126:11133 ioctl c0306201 20000280 returned -22 18:24:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:24:17 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto(r4, &(0x7f0000000140)="120000001200e7ef007b", 0xa, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001280)=""/222, 0xde}, {&(0x7f0000000080)=""/60, 0x3c}], 0x3}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0xac0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000057b8dd281a96261662d6acc4065b8d3c03d76794a4927da06085ff2abeaa93e58116ffa82b82f93d9c12807698f50ffe5471aceff1928d1206053327f13ea6892bc7cef50aec8513c80884bb6763863f72e77298c7746d4614ba51", @ANYRES16=r5, @ANYBLOB="00042cbd7000fddbdf25000000001400080076657468305f6d616376746170000000050005000100000005000500010000000500220000000000"], 0x40}, 0x1, 0x0, 0x0, 0x44014}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1400, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 305.535101][T11135] binder: 11131:11135 unknown command 1074094843 [ 305.542133][T11135] binder: 11131:11135 ioctl c0306201 20000280 returned -22 [ 305.646935][T11137] binder: 11131:11137 unknown command 1074094843 [ 305.654164][T11137] binder: 11131:11137 ioctl c0306201 20000280 returned -22 18:24:17 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/22) 18:24:17 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046304bc387e8611c59d47655f73ffac81b0232b0cd7b1152d090c0bd2a6d07f814fe3179088a7f86416afcaaf7f69e9759b53896ac46bcc0d0f8c8d37b11b7596b6a88a4486a9bb5461281185e06f7d749bbc5c03de97e55874a4fd5d6aef99e3fc9eba2fdc02d7e41d496696ff38cdc7b455b86d48459a0dce5463d60f1c6b44ef57f0a765bd8ffe24f3b9d9735481e71c6b7e3b37e6c3e8bd8d1ddcc3c220386b89adc8904500"/179], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r8 = dup2(r7, r0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:17 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:24:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 306.163240][T11152] binder: 11146:11152 unknown command 114 [ 306.169204][T11152] binder: 11146:11152 ioctl c0306201 20000280 returned -22 [ 306.223933][T11153] binder: 11146:11153 ioctl 80044584 20000080 returned -22 [ 306.268178][T11154] binder: 11151:11154 unknown command -1140563196 [ 306.274953][T11154] binder: 11151:11154 ioctl c0306201 20000200 returned -22 [ 306.329476][T11155] binder: 11151:11155 unknown command 0 [ 306.335414][T11155] binder: 11151:11155 ioctl c0306201 20000280 returned -22 [ 306.393178][T11157] binder: BINDER_SET_CONTEXT_MGR already set [ 306.399483][T11157] binder: 11151:11157 ioctl 40046207 0 returned -16 [ 306.438269][T11154] binder: BINDER_SET_CONTEXT_MGR already set [ 306.444601][T11154] binder: 11151:11154 ioctl 40046207 0 returned -16 [ 306.464767][T11152] binder: 11146:11152 unknown command 114 [ 306.471136][T11152] binder: 11146:11152 ioctl c0306201 20000280 returned -22 [ 306.590527][T11155] binder: 11151:11155 unknown command -1140563196 [ 306.598310][T11155] binder: 11151:11155 ioctl c0306201 20000200 returned -22 [ 306.608825][T11157] binder: 11151:11157 unknown command 0 [ 306.619411][T11157] binder: 11151:11157 ioctl c0306201 20000280 returned -22 [ 306.652962][T11154] binder: BINDER_SET_CONTEXT_MGR already set [ 306.659200][T11154] binder: 11151:11154 ioctl 40046207 0 returned -16 [ 306.672102][T11157] binder: BINDER_SET_CONTEXT_MGR already set [ 306.678380][T11157] binder: 11151:11157 ioctl 40046207 0 returned -16 18:24:18 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x5, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}, @jmp={0x5, 0x1, 0x5, 0xb, 0x1, 0x10, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/245) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:18 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x6, 0x2}, {0x936, 0x8}]}, 0x14, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) syncfs(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:18 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto(r4, &(0x7f0000000140)="120000001200e7ef007b", 0xa, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001280)=""/222, 0xde}, {&(0x7f0000000080)=""/60, 0x3c}], 0x3}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0xac0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000057b8dd281a96261662d6acc4065b8d3c03d76794a4927da06085ff2abeaa93e58116ffa82b82f93d9c12807698f50ffe5471aceff1928d1206053327f13ea6892bc7cef50aec8513c80884bb6763863f72e77298c7746d4614ba51", @ANYRES16=r5, @ANYBLOB="00042cbd7000fddbdf25000000001400080076657468305f6d616376746170000000050005000100000005000500010000000500220000000000"], 0x40}, 0x1, 0x0, 0x0, 0x44014}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1400, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 307.212400][T11175] binder: 11171:11175 unknown command 0 [ 307.218215][T11175] binder: 11171:11175 ioctl c0306201 20000280 returned -22 18:24:18 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x0, 0x801}, [@generic={0x8, 0x2, 0xe, 0x41, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x104, 0x99, &(0x7f0000000080)=""/153, 0x40f00, 0x6, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x8000) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:18 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x40000, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000500)=0x10000, 0x4) socket$phonet(0x23, 0x2, 0x1) r2 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2, 0x0) sendto$packet(r2, &(0x7f0000001780)="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", 0xffffffffffffffb7, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0xc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0560c685f7164a9ae8c71ba589a5e54944ca59f8695562b26102c2262ce38712efc766f45bc9c96ed4d35ee446accd6d861251b4567b5410587fdabe3bcba56b518835813964544c94e73a09e4d48f87fec5a7beb3ebaccb7a5bd1e95cb51e5883997ad7f5b7a1825720a726521ee12f30bc2c4b689266f2eb9b540d7a11acb2ba27637d55d82cac7e3e1841a57fd46876687a3b404f551e29bf187b04f675902322b268e68870a4062a21a9d7073935c57b1b34d2767a21f546c79811c774ae1f9d3e950e1d92cc586a6d89d4aa435c7f6eaf7957285b9d82a1c0041d1c81843363401ae186d9a4b10b396e2c1cae9f4b13a9"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="5658f074941dcca90fad8400000000000010006d3c2ecf88a3a43c2c6313000000001500000000"], 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000140)={0x3}, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)) 18:24:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 307.822091][T11189] binder: 11187:11189 unknown command -2050596859 [ 307.828750][T11189] binder: 11187:11189 ioctl c0306201 20000200 returned -22 [ 307.889261][T11190] binder: 11187:11190 unknown command 1961908310 [ 307.901522][T11190] binder: 11187:11190 ioctl c0306201 20000280 returned -22 18:24:19 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008f400007600"/32], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:24:19 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 308.140949][T11190] binder: 11187:11190 unknown command -2050596859 [ 308.147467][T11190] binder: 11187:11190 ioctl c0306201 20000200 returned -22 18:24:19 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x68001) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) dup2(r3, r2) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000080)=0x200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:19 executing program 4: move_pages(0x0, 0x7, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) openat$vimc2(0xffffff9c, &(0x7f00000003c0)='/dev/video2\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0x4}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0x3, 0x6}, &(0x7f0000000140)=0x2699, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x74) 18:24:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0xb5, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000100)=0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000240)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, @random="462a1f65ea88"}, 0xc, {0x2, 0x4e21, @rand_addr=0x64010101}, 'vxcan1\x00'}) r5 = dup(r3) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmmsg(r2, &(0x7f0000004f00)=[{{&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6}, 0x80, 0x0}}], 0x1, 0x0) 18:24:20 executing program 3 (fault-call:0 fault-nth:0): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 308.928880][T11213] binder: 11204:11213 unknown command 1651733807 [ 308.935580][T11213] binder: 11204:11213 ioctl c0306201 20000280 returned -22 18:24:20 executing program 4: move_pages(0x0, 0x0, 0x0, &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 309.022600][T11215] binder: BINDER_SET_CONTEXT_MGR already set [ 309.028876][T11215] binder: 11211:11215 ioctl 40046207 0 returned -16 [ 309.042968][ T1264] tipc: TX() has been purged, node left! [ 309.058882][T11206] binder: 11204:11206 unknown command 1651733807 [ 309.066047][T11206] binder: 11204:11206 ioctl c0306201 20000280 returned -22 [ 309.076398][T11219] binder: 11211:11219 unknown command 0 [ 309.082373][T11219] binder: 11211:11219 ioctl c0306201 20000280 returned -22 [ 309.156380][T11219] binder: 11211:11219 unknown command 114 [ 309.162791][T11219] binder: 11211:11219 ioctl c0306201 20000280 returned -22 [ 309.179127][T11221] FAULT_INJECTION: forcing a failure. [ 309.179127][T11221] name failslab, interval 1, probability 0, space 0, times 0 [ 309.184869][T11215] binder: BINDER_SET_CONTEXT_MGR already set [ 309.192709][T11221] CPU: 0 PID: 11221 Comm: syz-executor.3 Not tainted 5.6.0-rc7-syzkaller #0 [ 309.192741][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.192758][T11221] Call Trace: [ 309.192824][T11221] dump_stack+0x1c9/0x220 [ 309.192899][T11221] should_fail+0x8b7/0x9e0 [ 309.193001][T11221] __should_failslab+0x1f6/0x290 [ 309.199006][T11215] binder: 11211:11215 ioctl 40046207 0 returned -16 [ 309.207721][T11221] should_failslab+0x29/0x70 [ 309.207808][T11221] kmem_cache_alloc_node_trace+0x109/0xe60 18:24:20 executing program 4: move_pages(0x0, 0x0, 0x0, &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 309.207917][T11221] ? __get_vm_area_node+0x30c/0x800 [ 309.257338][T11221] ? kmsan_get_metadata+0x11d/0x180 [ 309.262662][T11221] __get_vm_area_node+0x30c/0x800 [ 309.267803][T11221] ? avc_has_perm_noaudit+0x58c/0x780 [ 309.273315][T11221] __vmalloc_node_range+0x297/0x11c0 [ 309.278713][T11221] ? bpf_prog_alloc_no_stats+0xe1/0x580 [ 309.284362][T11221] ? kmsan_get_metadata+0x4f/0x180 [ 309.289602][T11221] __vmalloc+0x104/0x120 [ 309.294035][T11221] ? bpf_prog_alloc_no_stats+0xe1/0x580 [ 309.299681][T11221] ? bpf_prog_alloc_no_stats+0xe1/0x580 [ 309.305366][T11221] bpf_prog_alloc_no_stats+0xe1/0x580 [ 309.310866][T11221] bpf_prog_alloc+0x72/0x320 [ 309.315583][T11221] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 309.321505][T11221] __do_sys_bpf+0xbfe9/0x13510 [ 309.326429][T11221] ? kmsan_get_metadata+0x11d/0x180 [ 309.331749][T11221] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 309.337664][T11221] ? kmsan_get_metadata+0x11d/0x180 [ 309.342967][T11221] ? kmsan_get_metadata+0x11d/0x180 [ 309.348284][T11221] ? kmsan_get_metadata+0x11d/0x180 [ 309.353586][T11221] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 309.359489][T11221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 309.365771][T11221] ? prepare_exit_to_usermode+0x1ca/0x520 [ 309.371603][T11221] ? kmsan_get_metadata+0x4f/0x180 [ 309.376806][T11221] ? kmsan_get_metadata+0x4f/0x180 [ 309.382097][T11221] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 309.388011][T11221] __ia32_sys_bpf+0xdb/0x120 [ 309.392685][T11221] ? __se_sys_bpf+0xa0/0xa0 [ 309.397291][T11221] do_fast_syscall_32+0x3c7/0x6e0 [ 309.402449][T11221] entry_SYSENTER_compat+0x68/0x77 [ 309.407645][T11221] RIP: 0023:0xf7f6cd99 [ 309.411819][T11221] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 309.431615][T11221] RSP: 002b:00000000f5d670cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 309.440142][T11221] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000202a0fb8 [ 309.448194][T11221] RDX: 000000000000003f RSI: 0000000000000000 RDI: 0000000000000000 [ 309.456249][T11221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.464318][T11221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 309.472368][T11221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.480721][T11221] syz-executor.3: vmalloc: allocation failure: 4096 bytes, mode:0x100dc0(GFP_USER|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 309.495028][T11221] CPU: 0 PID: 11221 Comm: syz-executor.3 Not tainted 5.6.0-rc7-syzkaller #0 [ 309.503774][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.513913][T11221] Call Trace: [ 309.517297][T11221] dump_stack+0x1c9/0x220 [ 309.521717][T11221] warn_alloc+0x4cc/0x680 [ 309.526229][T11221] __vmalloc_node_range+0xe62/0x11c0 [ 309.531633][T11221] ? kmsan_get_metadata+0x4f/0x180 [ 309.536891][T11221] __vmalloc+0x104/0x120 [ 309.541252][T11221] ? bpf_prog_alloc_no_stats+0xe1/0x580 [ 309.547165][T11221] ? bpf_prog_alloc_no_stats+0xe1/0x580 [ 309.552816][T11221] bpf_prog_alloc_no_stats+0xe1/0x580 [ 309.558306][T11221] bpf_prog_alloc+0x72/0x320 [ 309.563013][T11221] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 309.568936][T11221] __do_sys_bpf+0xbfe9/0x13510 [ 309.573869][T11221] ? kmsan_get_metadata+0x11d/0x180 [ 309.579220][T11221] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 309.585156][T11221] ? kmsan_get_metadata+0x11d/0x180 [ 309.592651][T11221] ? kmsan_get_metadata+0x11d/0x180 [ 309.598013][T11221] ? kmsan_get_metadata+0x11d/0x180 [ 309.603366][T11221] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 309.609716][T11221] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 309.615886][T11221] ? prepare_exit_to_usermode+0x1ca/0x520 [ 309.621708][T11221] ? kmsan_get_metadata+0x4f/0x180 [ 309.626914][T11221] ? kmsan_get_metadata+0x4f/0x180 [ 309.632118][T11221] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 309.638020][T11221] __ia32_sys_bpf+0xdb/0x120 [ 309.642695][T11221] ? __se_sys_bpf+0xa0/0xa0 [ 309.647292][T11221] do_fast_syscall_32+0x3c7/0x6e0 [ 309.652435][T11221] entry_SYSENTER_compat+0x68/0x77 [ 309.657605][T11221] RIP: 0023:0xf7f6cd99 [ 309.661754][T11221] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 309.681434][T11221] RSP: 002b:00000000f5d670cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 309.689955][T11221] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000202a0fb8 [ 309.698013][T11221] RDX: 000000000000003f RSI: 0000000000000000 RDI: 0000000000000000 18:24:21 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 309.706051][T11221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.714110][T11221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 309.722254][T11221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.730526][T11221] Mem-Info: [ 309.733796][T11221] active_anon:93713 inactive_anon:4800 isolated_anon:0 [ 309.733796][T11221] active_file:7055 inactive_file:42336 isolated_file:0 [ 309.733796][T11221] unevictable:0 dirty:88 writeback:0 unstable:0 [ 309.733796][T11221] slab_reclaimable:7852 slab_unreclaimable:18527 [ 309.733796][T11221] mapped:51341 shmem:5017 pagetables:1077 bounce:0 [ 309.733796][T11221] free:290497 free_pcp:618 free_cma:0 [ 309.771892][T11221] Node 0 active_anon:374820kB inactive_anon:19200kB active_file:28076kB inactive_file:169408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:205376kB dirty:372kB writeback:0kB shmem:20068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 305152kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 309.801509][T11221] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 309.828318][T11221] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.857415][T11221] lowmem_reserve[]: 0 908 1140 1140 [ 309.862861][T11221] Node 0 DMA32 free:207728kB min:38596kB low:48244kB high:57892kB reserved_highatomic:0KB active_anon:357684kB inactive_anon:80kB active_file:2060kB inactive_file:145576kB unevictable:0kB writepending:344kB present:3129332kB managed:933900kB mlocked:0kB kernel_stack:636kB pagetables:2692kB bounce:0kB free_pcp:1916kB local_pcp:524kB free_cma:0kB [ 309.895544][T11221] lowmem_reserve[]: 0 0 232 232 [ 309.900761][T11221] Node 0 Normal free:12392kB min:9860kB low:12324kB high:14788kB reserved_highatomic:0KB active_anon:17136kB inactive_anon:19120kB active_file:26016kB inactive_file:23832kB unevictable:0kB writepending:28kB present:786432kB managed:237568kB mlocked:0kB kernel_stack:3240kB pagetables:1600kB bounce:0kB free_pcp:520kB local_pcp:236kB free_cma:0kB [ 309.933487][T11221] lowmem_reserve[]: 0 0 0 0 [ 309.938084][T11221] Node 1 Normal free:937792kB min:41480kB low:51848kB high:62216kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:8kB present:3932160kB managed:999424kB mlocked:0kB kernel_stack:16kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.968830][T11221] lowmem_reserve[]: 0 0 0 0 [ 309.973557][T11221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 309.985675][T11221] Node 0 DMA32: 0*4kB 2*8kB (UM) 4*16kB (UME) 1*32kB (M) 2*64kB (UE) 1*128kB (E) 0*256kB 1*512kB (E) 2*1024kB (UE) 4*2048kB (UM) 48*4096kB (M) = 207728kB 18:24:21 executing program 5: [ 310.001642][T11221] Node 0 Normal: 26*4kB (UME) 70*8kB (U) 35*16kB (UM) 17*32kB (UME) 6*64kB (U) 14*128kB (UME) 17*256kB (UME) 4*512kB (U) 2*1024kB (ME) 0*2048kB 0*4096kB = 12392kB [ 310.019111][T11221] Node 1 Normal: 6*4kB (UME) 3*8kB (M) 5*16kB (UM) 6*32kB (UME) 4*64kB (ME) 2*128kB (E) 0*256kB 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 227*4096kB (M) = 937792kB [ 310.035855][T11221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.045638][T11221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000000)=@generic={0x6, "dc92c40e89d70f8c1bfb57473eef475d20ffb137f2d4a11b3af9e0c2de21cb879a60692441873980a0d421465339624a4d61c7d12eb1459d2fa742660514f22c9177a8d4f94e2581e9dc28d16a185dbea25b0cd33d344470d7c584d18c601962df2a63bd7d762e2751e7b6cb7365e3946634af7e6d6ae9fd02718b730a76"}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000080)="198441bd1c9afdbe3a05a96927f9", 0xe}, {&(0x7f00000000c0)="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", 0xff}, {&(0x7f00000001c0)="e11742ba802e6896e94eb21bc8ac33e900b96d64214b5a44b41fb2cdc118f0cf6b1e0834a896279a7c5b2704d9a725a59bacec17018cfd9ccc8b0e66bccbe6eed2c9f06622aa811d7780614109bde1a2", 0x50}, {&(0x7f0000000240)="7f224d50ed6acffce950c6ea144356c2fe6cffd9157de672d54f63548ecbddedd10d92a1a92bf1f37c9189b863e6d4cf05493ba96e123de24b24b65676be34e0bd076220c3cf803cd2aded5faeab236cadddf2179b5132a37f3aa688a70090f01d1a06ea3d7b6dd4d12662c514937c898846fba33fd93d29962d9132ccfaa42a4bc997d85cf284dd102043f41b3b427be5e47e0f3011469767767170ac1904ee093c284f7f4a185dce8fa13b1299", 0xae}, {&(0x7f0000000300)="85fece04193f187377eb0ff7d2cbf36a8cea47c5548ba9bfef06e0785ad77ef136aeac74a69349168a3f8f1ef6bd05beff1cfc0b2ee28fd78346110e", 0x3c}, {&(0x7f0000000340)="788a0c0202b822c51d80400da40b6cc7afa02854eb4571128040eb59e863", 0x1e}, {&(0x7f0000000380)="52eff4e103a52fd4c88794c28308df80c4d4a3740869c368fec660e42e4d72502334a752c97a95e62ca25f980bd3502830a1f3ea3b94948d616de57ccba5c1a54a82b38275d392511a7cc9af572be697bf864a6cf8f1e70aec03db518a90dd13cad1a4e47bba4c9833dbac664a71dff6faa65bba8ad61960285b81b73a2b3c42dc02674cdd5ae0a71ef849895670486491e2f921d90b344ce9c56dde51cf4d7ebf90969024581e89b358638af35266dec57ba92f9bec5d", 0xb7}, {&(0x7f0000000440)="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", 0x1000}], 0x8, &(0x7f0000001480)=[{0x100c, 0x88, 0x5, "9fd4826e7ba09d1031b63204bacd058f784bae01c9036327c45136858adb4b585155381e87f3acf90919d2b493df6f03a224f662186f5b3438735830149aa52b91f8a62494fcc46e182a4171a789fa4d85436ab6942f1d5ea8ce4e6461596735c134cace28b4117fc5e72e75abb9d730f4d7a21c1952bd24e4d8ecef9753472377a4f1cbaa9a3f03057d7e95a1ec3360ad39bcf95ae84fc84e078757287174a1abeb7ca8c3f1c88f0894fadb485e512a6b3042697a4da753cc5dacc0eb7cf8a41f439baa45e2f8201102cfd2471d44b3f6d03af132825f70d817f6bc32b576d67b5bcefcf0624d5ae62360d3514bbebfd86f12d4e9b6de6ae76e9440a7fb931c6d04a1853ad9836e2115998d0708578973abb958bd1373eb06069eea93f481d9d7490fbb1f77b001ebdcaaa45fe66e587443c2d59f62adaa5b2cbf22c6295d3878b56656e3fe479f0a51bde6ca273a1c8500c54e5829edf699c84daf67c76123765505ae089380e891e509721e2860460351040fff1ca7ba758c5bb85c2d0dff997caded5f1c95c3e08c0222a61111048122d2e4b4c59501eea8febc1515c64cb898fe01715d2aa01c25753e6f04e48a2392a6972b2b1160de81c09e23e2ad414167dca624e37cb424417f515358e0f29c97d78e25c33022721de1c8cd10a540a4535a533fc6bead977e38aaf1be50c9a8fe6cc20db5b1fa75fd9e61e07c90b5293a252b07bb94fc9095515b5b2698acb571537c5949f802e84707f2c423460e4c74cdf489983b415f3ae8066cbaa05c3a2f13f290ac68f7e01d3bc81373522112a92c18e22fd2042b73f25139fb125cbc2369b072321875be70b639b07275daf0086e40eef63a1fadcccd077c6c57da6e2456cfb16bba443ac86a944e6980b29b3c6f8c03ab16b0d34741ee97cc30b0248fdec55dbb50cd3738bc17bc4b3ca2fc284767e17934ae2b2f19a6460f624b8f224e93308fbcd26e6a89d697d63aa6beed61ce4b3daad6470cf76b58fb12a218e383f6f9e108618c113017a59b7b58968d62812864c7369ff1b383b40170537a614cb43b8f8e0cb41fd5601c6660fcb525a730b4d545b98e70d9e6c031a6fce66ca3a078ae0f605a3d553cd754cbb7ef511b995f52690904b81a4e0f09d63cdf8665ff76e809145856f61bbbe3911bb8092c0355dd064f1b41f08d14d1332a91257d15cec099ba72bfb49a4dcc187f615da9a48af6a13a8a58fdbe4208fbe886aa602c5462e140254bb660fcfd452f247ee07646626da521e46dca7bbcc2f5f55d120eeeb05672dc93690718f505a9658ae6c2c4a45a5b1ff41f873ff767c2a3c276a091cf6fce7679df806ea833d8a095d15726b0774db878dca8fff81d3ef7c3fd61ebf2f71f63a3c5539866faab1ec6d1e3138ea5e9ed8f34d628b6a0fd7a69721747be65b5de9eaec9987b4d28eb7962be12662faa32295d446500f0838e5bbcd35bc535233b4f0ffdc86e72e763c312c884f56334a2d98ea995b846674fc7df405d8f74dc27e580e75fb5497b8f3adaa4c63595a1929100e8d90cac391a25cb39b906d87c4db9a3d009a4875d64b65185d163bd2a4fc41b0fc0e578cdf1b4da02ed82f88a82924ac2e28817475d539eeac58fa3417a0d51231a9c5a805e37707022af5a4dc25cac813dcdddd49f2176f53ec1b482e5cfe4a2022a51c1cccf3b59f5dd1a19cbd62ed0f9b4d258cb12036596cbee1d9a43805becc583a2fdf76583c2e0f5b115220d2a1180aab97a674f000d02a3cb66a4925d20c9161e3bfd8c2e9f645cdc21aaa7f02265599d26c2d053907c6c91e5f844f4d9fbc6dd4b3a0c934dce389e15bb00f41b9fa7af71ef2a0710069c7d3032ba67f8da108bcbe7ba0baa8c56f045d2f033441110dcf5b14907a524c514cddb6835e9cf08c3dcdcef153355414ac068f11c4e3908615ec155800ffec066ed26a06402b0a06dc90856ca34e0c31767a500f3638b9d681e0d4e3954578cfc429ce05acbb8c4f7cec35315d3cea4fc9771280d06acb713898a3bc64e29fe758fb2eac15371f86efa1d3744b5d77c2742996a316f1baab31f7573c54f9617a572c89470d8f59d58022b3e57c8780c136851a37d5932f4a720de6dabe62f85169682ec88e7d475a0178c763eb06474805ed0acaa5225727ba921c050d3f9bf7cd14131e6e88928fc5f9c626222ff4ae20ac479b39c0dd367731c913244c41cf017f263ffed39dd9f726e5015fa0826ff21f68653cef3862f519ccbcd9a4f75448079a918e9e40f8b4667c890c50bdaa4b27ba401b036f8f43d3f9a017c630073731dad561d3fbd97bc1a95b1464522fbb6fc2468d274980430dbd1dabf971466f0f54f96aba9f3ec2ffd4eabc9c834b4e2c384400f14345431a8681a4a6970378d9759021ab2e6d23855c4f4cc26a54b2e3283f465dace5d244ba208a77301cceb5da92a17e8e89c68f978614848209937bd8a76f8ef3cfbaca11503e76bb98720ba74be19b4b353df914e8f5b407d477343042a55c4a914c28d81b40065e6594f4373aed5a4e73f4be57ab52dee138a52ff112b9bbae2f30e6202f82e111ce5268b2066791fb0d15ed8a0541239763213241d757f97f35706c26f5d179dd38da3b353a61ce412c12ddecb6a31f72b97ee276acb7e4382354d17ba590d319dc09cf7707dfc7714432e49d2e7d0b402152f7312c9f6c4ee2e87e622a5b8e2c2522e70641c43e3ff63eceae77b6716885a39e02993a7bc86e89e7904f3cf8edd028f4bf86d0f17d8113120be9b708cb3309f7fb4a83c231445948ed6d4f28d8d9372ce9785a5064797657b16d7e86b8a6972ec500db6b55106a9b633ccb9d44563351817552fbde60bbe00b6e8d28b6751f949c87b6bd1c73cde1a579db959b50dfa5e04579c4d32a331f9d1378c7c8c28f3b975e2c97f5706b5beaac94c45938652e66fe9203913e41f4db9ca713a248536ca087a986ec7d1afcb848684984f0db500ad0449f4380ae47d001fc18b1e325d505ea5cc8f60bbe2ed2e9f64f173fcd9200e5355a73fe1d1af79dd595714a78515aa0c8ad0de8860c07b16aceca5190793730003d363619dd8fc1daddee1e448b4c4330fc9135100b8b782cadd5a08d4e2f91278b647cd506709caffaa338f7d344ca9a4080c1550cb223aff7000264e4dd6d1e7f9bad060293f1c191589439096376afa3d0b77733756d66ffdd17b5ec182fcb7aaa18103f761fc95ed882726ba58266a631118b4261a005142c2f5e8524ce22e51a3ff92a20e24c35ea5e3407e526a316aab57efd40179aa8e4978869de48ccbb21bc0002d20f2126ddeca43dd5d67d95d35bf853450a0362bc2453fab89212e4cc1a662fe5bdfc602e0c350b92b02c8f209fa9766310085a8e56d75d1ff334ab4ceaba05ca35c8d777bc6fbea4caa0e379a4e43d4a8a7ee753d3a33a57b242c3aa13d6000148e4f221eb93e2408f297f62b6a230c3614ba816b85979c5be017228a402fcc22e97af67549303fae7855faeb94e40bc017fb9c6acf87eeb14820b94c3b5f22b3f2ef01862f9a6117cc95d62842b782cef8fedb68b7b4f5b37a4efaa1f8625bb2beecf7570a5b87542ab83d923ffa08eb318b72ef18731f27673e4374433872c28a8c057362759cfb88054296378d687601b151f218b2d704f770780211d305abeae435f7bb64d7aa9b411cb8c57633f9d9c757d014e25a328c24c068f3bf3c1d222c9e7cbb8f0726f4f3f6889fc0ba9b14397b0fda215410c750fa953af3699ebe7d11d1d927ebb4c9b3a2bb836a4b26efa220fdceac6bd46ce4211cba9bfd9f19e213fb73053b201492f30b5109e58798279f30d4b9eb2851e7cf000fe7242cf89fd9b4c9d5f642287077dd6d2d5e6b86daeef34f6a3e92041f95dcbd445de8196f1044efe431fa3c19ff41acfbda3860df951b8ec20d611a9ff937c61ab39f7cd6dfbfb16b7828c344614ba2b01ade7c9c47ff2bed559acde0000ae2a704d2eadbbe026d4cbfc9cc704a58c40f5badc2fb8c2bc2b04b6ee282c013f760cd848f163b9482aee941fe347cf075482adb1ae7b6b0567ce7d36145e39dbcbdd7308fc6507ff7cf3b819def36d81d1ada3c6f65ef93640ddbea544696f51b42cfdf5f73de5f4f5974be4131fb52850ff5e3494cc68a57770b787f7bcf62bbb08a3e395d80eb41ac09d2aeca19e0a2eeec9ed544a4583b1e8e5d4e6053996e4f64c44d9b0763808de5eef144f0ca98761924b1a085462a9ad4298cdc3e237ecad0bbf9fe56b4ef39b6e9a03cbae41f92ec05d78fac4b779560552677ba3ca2ad10698883fe4e5ab2cb00f910ca635ad351c75afe4265574dc7593fe5cfa17b6ed203587312912f6a9ccdf0c8cc94efee671bce87468e895bfe08e985bc85b8e7c24d9dc381bcc624c71703b9aa02ca792fc5836b7ff2497762648ff9d67452d0fae8c8113fc10cddd1118c9fd82397c5a809bc01b568f217f6a3bfe06479118fdd64c974d85209010963ef97ddce8384b8d091b165f612275d6b2fba330c258abbe0c87e4482ee2e21a7ba9b3495d8efaa6305912e95ce9cde96f76e330da0de0c0fca74c05fe74345835045e9f35929eb79fdc8aae184d59dac3fecd92bbe0214d7a2c3725f6e154e9ddd2f97c18dc9f1c05d19fc25605a0e22cdc159747f1c3105e7ea8a1f50b3b574e819830b458734a99028b3d20845db1ce7c910da4b7e00496733b20c3a4d8fefc9b7c33ccfdada59de466661fb6efda0ed86a48ad84cd6818adecb3673ba563b21e9c66981921f222d32df107fd485e1b7fdf0711d7d19ac9c622b305ec19f25a9f14578246caf77850f116aae61789ef28caabbca9b9893e47b0323b4b2e1c2130a3929896c3d9f6056a09a03546fece6b0aad42e500848e7cc46e7a5fb695ca0ababa9554f65d5c87e2f9afed50183ec9d39f152b020392a56102664091d7c862e4750277a1b7b74ba08256dc32d9ac9e73a043528084beddc28fa3bf894dfde3b3e5f3ab4e55d24694dc9d67a8dce19ad91537218072a1dde053dd16a2dbcede6a2fb636cba074a8b43c53edf1104d43bb2f25baa4b8244978b335fee34cd60d793a95064a3b1eaed7adca70f771ccc07da4106a096d35835fa559bb1579edda86ac41dc452ae10362a42cbd3107cb3db25681691fca8a52b8139c34ad47ff182614b446f4573aadfc8837d261bde0a7893c0e7f77007ea97a141d54a2f6867bf2099a931b7671a2b0a8c7eb3baca48cf90f1104bbada63e21267beca6c73a591b2744d5e168bb466bf8f5f0860f9557620fe7a4f382ee7073f3b78cfe78e23c4c0d1b6fab9dd3adfbe033d5bacdc5ceaa759e005dfe4f04c0c112776261d31a6b5be88eef999fc53d33a219864c399124864e9f594addb68eb3cf7f821476a4d4269431c7c0dbb4b74d3dab001242b20f342da6f7b857b0beb2b0984626149be2e0c1b4624494bef791008fd9a73b93a0252ab643c46755c4ce8f1f6ad554b64c9680bf860f3ed555b5bb0a9d4245f361ce9e14eca3a999b567af58048f89636e76bf04b3a8dd059fe8a7f9e67bb49025cacca44b8ada75deb02d10d15e496ceb5629bc1514f4d51f89cafd2eb1dee0c49f9e67fb24146e5617d47d4eedbb30e381184306ee80d42f2923b44ac23709602d0f2670ab3eedf971d51fe2d09ea9aef456b29c6bd3df972ee9df06ed91acd7f8b6d4f8e9e583e0373b51f1ebfe7961330c61da43f3a90e70f6597620dcddc7ae40f9136e166423b78368bf5046f45bb9db4"}, {0xb0, 0x3a, 0xb7, "3e941a6355a663cc71d9ddf72c875273711bbcf5ebef3f843158ee361f2b4984c264352491122573e9b4089cdc79aff7993d0691c260afc32623627fc4c602dcb73b8113227dd2f2932cc6dd66c10b02327f559c5615c5dc61955a06851d34492943153bce7f245c8c5e78b36bc793ddacad116ef6a39a223a92124829e1ec710fbc023195a98448a7934e0670c9c558d066be392ec37870282c515751a1b7d9774fa3"}, {0xd0, 0x6, 0x4, "9ea6d1e1463f37dbb593b66314436cdd38827d5bd63cdb31b154df3a4739cc59d6983a6728bd24b6a8c962ca812670e9668f7787247c80f807224df7a6dad10a089e8050c842251dea4825d19a8096844b7b8f4336ecec7db3646c467bbaf9879fd1a574f48fd340908622cfaf3589d48971facc51209bd9dc3c4c9558ce155351d1fe424b522fbe8e65f8ad0b4d6d60768bf75c83339b3e9ec99bff1d1b84c62e134446fa57fd21dec946c66dddc70292e2fe440cefd121d220b1076a1abc68cedb6355"}, {0x34, 0x10b, 0x1000, "2502962f57124db46b00e70a2c89bf9d7445b5da1ab4632582fedfa4573d222bd0ffe142b1b589"}, {0xa8, 0x111, 0x80000000, "de0da96d1218fb5443cb0da0037eac8bf8e582137eb934215950730637e0f7978d2a7f034c7be91a25e948e2e2344ea86f66fc8e2bdf1156154c9d75c7890c54eb69054a14df33eb86f57b9ea050432f4dd90ccadf422298aea06ee66ad4ae5fb3a9bbacd75ae36c29d3a16c5130e1431d7299ce899585ce5349bb1f852b926fc4db146c235cfbf03122212d4ce351dd881024d0a070e4964272cf"}, {0xb8, 0x183, 0x0, "d151d9605eada384aa3b1fa364094e5405531a0001dbc061565109f5a039e7b2539ec78b691b4ba98d58527532388bd61c9cd435e8d4ae642e270a6dab4d85a051fdf15b2ed6e1f775910c6a34a4e437d23161984d0c9e39a3bf65452433b6843101e25aa3695d3205fa7190afc00b5fea4cb08f1a819c7fa44d11cb7c4b3b3de416f3e2282d37afc7aae0c9f08beeaea1b249f287d633df6cb6583069a8b60377ed172c8c2d007d93c6"}, {0x100c, 0x6, 0x8, "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"}, {0x94, 0x0, 0x3, "f414f46e3350220e2adbd7beecd747fd3efaf0db6364fb069c04bcc1de88aa6570ffbc2888784a57031bffca3f0a008cbfb76702e1156ff2f559ea94366c4efeac7c1057caab29e29ec6253378a581000523a7bb8b9f8b91ac814447c4c5dba8251a1af5c32da8b9576d046e61e181695492eb8c92f9ec10bcddd1e81e533785c60d107af1306d"}], 0x23c0}, 0x4008000) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0445611, &(0x7f0000003880)={0x100, 0x8, 0x4, 0x0, 0x6, {0x0, 0xea60}, {0x2, 0x8, 0x6, 0x6, 0x1, 0x8, "d6f2fce7"}, 0x29a05ffa, 0x1, @offset=0x1, 0x5, 0x0, 0xffffffffffffffff}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000003900)) r1 = openat$vcs(0xffffff9c, &(0x7f0000003940)='/dev/vcs\x00', 0x82000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xb153) r2 = syz_open_dev$vcsn(&(0x7f0000003980)='/dev/vcs#\x00', 0xe7d1, 0x404040) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000039c0)=""/119, &(0x7f0000003a40)=0x77) r3 = openat$procfs(0xffffff9c, &(0x7f0000003a80)='/proc/meminfo\x00', 0x0, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003b00)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000003c00)=0xe4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003c40)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000003d40)=0xe4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003d80)={0x0, 0x0}, &(0x7f0000003dc0)=0xc) getgroups(0x5, &(0x7f0000003e00)=[0x0, 0xee01, 0xee00, 0x0, 0xffffffffffffffff]) lstat(&(0x7f0000003e40)='./file0\x00', &(0x7f0000003e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000003ac0)='system.posix_acl_access\x00', &(0x7f0000003f00)={{}, {0x1, 0x1}, [{0x2, 0x2, r4}, {0x2, 0x0, r5}, {0x2, 0x2, r6}], {0x4, 0xbb15e90444047d5b}, [{0x8, 0x0, r7}, {0x8, 0x7, 0xee00}, {0x8, 0x3, 0xee01}, {0x8, 0x2, r8}, {0x8, 0x1}, {0x8, 0x1, r9}], {0x10, 0x4}, {0x20, 0x3}}, 0x6c, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000003fc0)={0x4, &(0x7f0000003f80)=[{0x8, 0x4, 0x5}, {0x100, 0x32, 0x0, 0x9}, {0x1ff, 0xff, 0x3, 0x6}, {0xdd, 0x20, 0x0, 0x9}]}) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000004000), 0x4) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000004040)) socket$inet(0x2, 0x2, 0x6) [ 310.055199][T11221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.064995][T11221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 310.074528][T11221] 51910 total pagecache pages [ 310.079265][T11221] 0 pages in swap cache [ 310.083680][T11221] Swap cache stats: add 0, delete 0, find 0/0 [ 310.089944][T11221] Free swap = 0kB [ 310.093715][T11221] Total swap = 0kB [ 310.097473][T11221] 1965979 pages RAM [ 310.101429][T11221] 0 pages HighMem/MovableOnly [ 310.106144][T11221] 1422232 pages reserved [ 310.110583][T11221] 0 pages cma reserved 18:24:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r1, 0x1}}, 0x18) r2 = socket(0x10, 0x100000000000802, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x39) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000df0800000076000000f3ffffff26000000000000039500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:24:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000680)=""/244, 0xf4, 0x14002, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8000000000000, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/375], 0x1) dup(r3) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000013c0)=@newlink={0x34, 0x10, 0x10, 0x100, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x0, 0x10400}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x81000000}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4046}, 0x4001) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x150, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf4ab3f31a92f018a}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x150}}, 0x20000081) write$tun(r0, &(0x7f00000001c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}, 0x7e) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000180)=""/35, &(0x7f0000000240)=0x23) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @generic={0x2b, "e58a7768a83c7936514e511bcefc"}, @ipx={0x4, 0x0, 0xa453, "9f68bbfde8ed", 0x3}, @phonet={0x23, 0x0, 0x2, 0x20}, 0x3ff, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='vlan1\x00', 0x37, 0xfff, 0x7}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) 18:24:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 310.782015][T11243] binder: 11241:11243 unknown command 0 [ 310.787953][T11243] binder: 11241:11243 ioctl c0306201 20000280 returned -22 [ 310.866331][T11247] binder: 11241:11247 unknown command 0 [ 310.872448][T11247] binder: 11241:11247 ioctl c0306201 20000280 returned -22 18:24:22 executing program 4: move_pages(0x0, 0x0, 0x0, &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:22 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffd90, r0, 0x400, 0x70bd26, 0x25dfdbfc}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) r4 = dup2(r2, r1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x34, 0x16, 0x300, 0x0, 0x0, {0xa, 0x1f}, [@IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x34}}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x67, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64=r5], 0x0, 0x0, 0x0}) [ 311.163560][T11251] binder: BINDER_SET_CONTEXT_MGR already set [ 311.170073][T11251] binder: 11250:11251 ioctl 40046207 0 returned -16 [ 311.221909][T11254] binder: 11250:11254 unknown command 0 [ 311.227763][T11254] binder: 11250:11254 ioctl c0306201 20000280 returned -22 [ 311.256632][T11251] binder: 11250:11251 ioctl 2400 6 returned -22 [ 311.554528][T11264] binder: 11263:11264 unknown command 808464432 [ 311.561334][T11264] binder: 11263:11264 ioctl c0306201 20000280 returned -22 [ 311.635527][T11266] binder: 11263:11266 unknown command 808464432 [ 311.642500][T11266] binder: 11263:11266 ioctl c0306201 20000280 returned -22 [ 311.756481][T11251] binder: BINDER_SET_CONTEXT_MGR already set [ 311.756512][T11254] binder: 11250:11254 unknown command 114 [ 311.756583][T11254] binder: 11250:11254 ioctl c0306201 20000280 returned -22 [ 311.762887][T11251] binder: 11250:11251 ioctl 40046207 0 returned -16 18:24:23 executing program 4: move_pages(0x0, 0x6, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 311.808058][T11267] binder: 11250:11267 ioctl 2400 6 returned -22 18:24:23 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8001, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 312.287315][T11259] IPVS: ftp: loaded support on port[0] = 21 [ 312.334153][T11275] binder: BINDER_SET_CONTEXT_MGR already set [ 312.340452][T11275] binder: 11271:11275 ioctl 40046207 0 returned -16 [ 312.391754][T11275] binder: BINDER_SET_CONTEXT_MGR already set [ 312.397930][T11275] binder: 11271:11275 ioctl 40046207 0 returned -16 18:24:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000faffff02950000000000002743c92b5a4fdd693e36d84044a52e9ea4355d645d071165b62ed3c5003e9f4cf66828a7f78d1592ad1ee7857560cffcd964c8e50f819397b1d6e6000000800000000040b153d3f0ff58f4188d12213006a196f0174ec66ea2469e"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r3 = openat$sequencer(0xffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x149100, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="06000000"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x8, &(0x7f00000000c0)=@raw=[@map={0x18, 0x1, 0x1, 0x0, r2}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x5, 0x4, 0x2, 0xfffffffffffffffe, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9d, &(0x7f00000003c0)=""/157, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000080)=0x2000) 18:24:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/254, 0xfe}, {0x0}, {0x0}], 0x3}, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000080)=""/178, 0xb2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket(0x2, 0x5, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 18:24:23 executing program 4: move_pages(0x0, 0x5, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 312.442940][T11275] binder: 11271:11275 unknown command 0 [ 312.448601][T11275] binder: 11271:11275 ioctl c0306201 20000280 returned -22 [ 312.510431][T11276] binder: 11271:11276 ioctl 7002 0 returned -22 [ 312.544392][T11275] binder: 11271:11275 ioctl 890c 20000080 returned -22 [ 312.591089][T11276] binder: 11271:11276 unknown command 0 [ 312.596757][T11276] binder: 11271:11276 ioctl c0306201 20000280 returned -22 [ 312.606032][T11298] binder: 11297:11298 unknown command 0 [ 312.612132][T11298] binder: 11297:11298 ioctl c0306201 20000280 returned -22 [ 312.633368][T11298] binder_alloc: 11297: binder_alloc_buf, no vma [ 312.653321][T11298] binder: BINDER_SET_CONTEXT_MGR already set [ 312.659560][T11298] binder: 11297:11298 ioctl 40046207 0 returned -16 [ 312.675251][T11275] binder: BINDER_SET_CONTEXT_MGR already set [ 312.681796][T11275] binder: 11271:11275 ioctl 40046207 0 returned -16 [ 312.698083][T11276] binder: BINDER_SET_CONTEXT_MGR already set [ 312.704794][T11276] binder: 11271:11276 ioctl 40046207 0 returned -16 [ 312.717496][T11302] binder: 11271:11302 unknown command 0 [ 312.723519][T11302] binder: 11271:11302 ioctl c0306201 20000280 returned -22 [ 312.751747][T11307] binder: 11271:11307 ioctl 7002 0 returned -22 [ 312.773095][T11306] binder: 11271:11306 ioctl 890c 20000080 returned -22 [ 312.782598][T11306] binder: 11271:11306 unknown command 0 [ 312.788408][T11306] binder: 11271:11306 ioctl c0306201 20000280 returned -22 [ 312.812304][T11304] binder: 11297:11304 unknown command 114 [ 312.818270][T11304] binder: 11297:11304 ioctl c0306201 20000280 returned -22 [ 312.832435][T11298] binder: BINDER_SET_CONTEXT_MGR already set [ 312.838751][T11298] binder: 11297:11298 ioctl 40046207 0 returned -16 [ 312.865445][T11309] binder: 11297:11309 unknown command 114 [ 312.872419][T11309] binder: 11297:11309 ioctl c0306201 20000280 returned -22 [ 313.447613][T11259] chnl_net:caif_netlink_parms(): no params data found [ 313.718940][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.726794][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.737410][T11259] device bridge_slave_0 entered promiscuous mode [ 313.756045][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.763494][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.773595][T11259] device bridge_slave_1 entered promiscuous mode [ 313.821902][T11259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.836974][T11259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.881807][T11259] team0: Port device team_slave_0 added [ 313.893423][T11259] team0: Port device team_slave_1 added [ 313.932389][T11259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.939457][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.965883][T11259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.982005][T11259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.989025][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.015254][T11259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.098054][T11259] device hsr_slave_0 entered promiscuous mode [ 314.152631][T11259] device hsr_slave_1 entered promiscuous mode [ 314.190337][T11259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.197982][T11259] Cannot create hsr debugfs directory [ 314.442073][T11259] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 314.487340][T11259] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.546163][T11259] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 314.608600][T11259] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.787806][T11259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.815356][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.824643][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.844688][T11259] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.859713][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.870358][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.879366][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.886775][ T6879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.901901][ T6879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.919690][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.931791][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.941452][T10250] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.948706][T10250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.968085][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.993747][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.025844][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.036072][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.047044][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.057931][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.082494][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.093700][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.103512][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.123369][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.132928][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.154418][T11259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.193196][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.201562][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.227577][T11259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.342294][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.352247][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.398640][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.408979][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.424872][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.435402][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.455689][T11259] device veth0_vlan entered promiscuous mode [ 315.481378][T11259] device veth1_vlan entered promiscuous mode [ 315.541254][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 315.551576][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 315.561057][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.571082][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.589788][T11259] device veth0_macvtap entered promiscuous mode [ 315.608511][T11259] device veth1_macvtap entered promiscuous mode [ 315.649468][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 315.662517][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.672573][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 315.684510][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.694677][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 315.705334][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.715488][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 315.726123][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.736311][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 315.747068][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.761281][T11259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.769462][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 315.779538][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.788937][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.799345][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.820399][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 315.831075][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.841191][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 315.852778][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.862922][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 315.873523][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.884834][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 315.895563][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.905981][T11259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 315.918563][T11259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.933621][T11259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.944625][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.955186][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:24:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/254, 0xfe}, {0x0}, {0x0}], 0x3}, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000240)=""/131, 0x83}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket(0x2, 0x5, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 18:24:27 executing program 4: move_pages(0x0, 0x4, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xf8000, 0x4600) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000002c0)={0x80, "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"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x4, 0x3, {0xa, 0x4e24, 0x3ff, @mcast2, 0x7}}}, 0x3a) 18:24:27 executing program 3: r0 = openat$bsg(0xffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x90001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0xd, &(0x7f00000000c0)=@raw=[@exit, @jmp={0x5, 0x1, 0x8, 0x9, 0xb, 0xc, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x54}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, @generic={0x81, 0x0, 0x6, 0xf23c, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x3, 0x3, 0x5, 0x8, 0xfffffffffffffff0, 0x1}, @generic={0x7, 0xe, 0x8, 0x3, 0x6}, @jmp={0x5, 0x0, 0x9, 0x0, 0xa, 0x50, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) getsockopt$inet6_buf(r1, 0x29, 0x3b0d7800684e2a5c, &(0x7f0000000240)=""/214, &(0x7f0000000000)=0xd6) 18:24:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x9f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffff}) [ 316.609362][T11543] binder: 11539:11543 unknown command 0 [ 316.615685][T11543] binder: 11539:11543 ioctl c0306201 20000280 returned -22 [ 316.674303][T11548] binder_alloc: 11539: binder_alloc_buf, no vma [ 316.703986][T11543] binder: 11539:11543 ioctl 4b48 200002c0 returned -22 18:24:28 executing program 4: move_pages(0x0, 0x3, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 316.756947][T11543] binder: BINDER_SET_CONTEXT_MGR already set [ 316.763710][T11543] binder: 11539:11543 ioctl 40046207 0 returned -16 [ 316.856750][T11548] binder: BINDER_SET_CONTEXT_MGR already set [ 316.863222][T11548] binder: 11539:11548 ioctl 40046207 0 returned -16 [ 316.893142][T11548] binder: 11539:11548 ioctl 4b48 200002c0 returned -22 [ 316.893472][T11543] binder: 11539:11543 unknown command 809004142 18:24:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffff9}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 316.907232][T11543] binder: 11539:11543 ioctl c0306201 20000280 returned -22 18:24:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/254, 0xfe}, {0x0}], 0x2}, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket(0x2, 0x5, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 18:24:28 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="87f8beae90a4d10802d77d0984559090d835014933ffec1a7490c1b37d9fda0c6ae68400d4decbd8c48f21ef859db0be83e372de76be8811572e3cb973c14ca1edc08bcb9b8dc5d6a60140e0335020"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) 18:24:28 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463073554e4d4d9700440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:28 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 317.626401][T11576] binder: 11570:11576 unknown command 889676548 [ 317.633139][T11576] binder: 11570:11576 ioctl c0306201 20000200 returned -22 [ 317.635855][T11575] binder: 11567:11575 unknown command -1363216249 [ 317.647570][T11575] binder: 11567:11575 ioctl c0306201 20000200 returned -22 [ 317.671307][T11573] binder: 11570:11573 unknown command 0 18:24:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/254, 0xfe}, {0x0}], 0x2}, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000080)=""/178, 0xb2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xc) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket(0x2, 0x5, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 18:24:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 317.677132][T11573] binder: 11570:11573 ioctl c0306201 20000280 returned -22 [ 317.714316][T11577] binder: 11567:11577 unknown command 114 [ 317.720558][T11577] binder: 11567:11577 ioctl c0306201 20000280 returned -22 [ 317.750640][T11576] binder: 11570:11576 unknown command 0 [ 317.756328][T11576] binder: 11570:11576 ioctl c0306201 20000280 returned -22 [ 317.777311][T11572] binder: 11567:11572 ioctl 7709 0 returned -22 18:24:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x20000000000000dd, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x800004, 0x99, &(0x7f0000000180)=""/153, 0x0, 0xed259ade0490c003, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000240)="15a449e673bcf74a9ff3985426941f93cd8529f78157ebcfcb74dda516df42b62839a3e0cdd79534420eb8b0cc27bff8bdc3d749b12bee38a5f84f9350ed3be5520fcc6f3d9e384f9d411daf61974e2f6a5642841a698cbe63724e97ab42234d9cadb3aef5cdb4ff46b989e101297f46d325674072422cb2945c3e9ab697fa8e3b2400ec365b9b6da75bef147d9ddb8e13f64a78ebc18f7648236e0df75f02f46b1acc055f15fe9bc71fab6245fe029395ebfcbd15aa6ec0eb5b62404343880ab07a8a86c34dd5f1f438b99de9", 0xcd, 0x4001, &(0x7f00000000c0)=@nl=@unspec, 0x80) 18:24:29 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/254, 0xfe}, {0x0}, {0x0}], 0x3}, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket(0x2, 0x5, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 18:24:29 executing program 4: move_pages(0x0, 0x1, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:29 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x7, &(0x7f0000000180)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x38}, @exit, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000080)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 318.268917][T11595] binder: 11590:11595 unknown command 0 [ 318.274945][T11595] binder: 11590:11595 ioctl c0306201 20000280 returned -22 18:24:29 executing program 4: move_pages(0x0, 0x1, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:29 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) r6 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x8243) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000100)=r6) r7 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:30 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r1 = openat$null(0xffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20202, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0x3, 0x1) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'veth1_macvtap\x00', 0x1000}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x8000, 0x4) 18:24:30 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000007060101f7003f0000000000000006000c00010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x47fde, 0x0) 18:24:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500000008030000760000f69f267ad4dc0000000000270000bb523e0173b6859a76700a00fdffff0295000000000000002862d0cdb33f022eb5d6e1bc5e124bfd8670a82622ed12ee31ebf34dd0486511fa4f36afe8a121cb405e2e5eb8b0141fc4218a5c2d7b63101b4f9d9ad795e71ca70f5a522bdc0eeaddaaba0a5670a4901db0c75bf137128dfc2997c565f8a719fe714c4102af1949b82e171d"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) write$P9_RLOCK(r2, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x3}, 0x8) 18:24:30 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f5f146e1bb2a4bd90930206040c000b1301021504123900090035000c030b00000019000b4006141102020022dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f0000000000)="040000006069342ef67b734bf9", 0xd}], 0x2}, 0x0) [ 318.768429][T11612] binder: BINDER_SET_CONTEXT_MGR already set [ 318.775235][T11612] binder: 11610:11612 ioctl 40046207 0 returned -16 [ 318.843683][T11612] binder: 11610:11612 unknown command 0 [ 318.849342][T11612] binder: 11610:11612 ioctl c0306201 20000280 returned -22 18:24:30 executing program 4: move_pages(0x0, 0x1, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 318.977025][T11622] binder: 11616:11622 unknown command 114 [ 318.983207][T11622] binder: 11616:11622 ioctl c0306201 20000280 returned -22 [ 319.044269][T11627] binder: 11616:11627 unknown command 114 [ 319.050960][T11627] binder: 11616:11627 ioctl c0306201 20000280 returned -22 [ 319.075161][T11629] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 319.083949][T11629] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 319.093748][T11629] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 18:24:30 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="85df00000000000000000000000000000000000000000000529bb55fe876eccbad8dd5b8f002acda964b93a158098a3463ffe01c20f4af38de015bd5ed19935d582759d18a40676378eb755b4791e00a57d816b9899d3aaf8f474f37d8034699e7b8cafb0000010025f5dc69ff886fcd358d10c71c83205eb9847bb7badac450330922d73675614ef2e540a5c5d8e200"/153], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r3, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) recvfrom$packet(r0, &(0x7f0000000240)=""/233, 0xe9, 0x0, &(0x7f0000000000)={0x11, 0x15, r3, 0x1, 0xff, 0x6, @dev={[], 0x44}}, 0x14) 18:24:30 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="2a630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000800000076ff0000e282760f3a0000000000000000000000000000003f6052659c4c9e9c160097423d71b6bcbdb5bc0031de4bfe9b5007a3f61fe9ffd3695f87e2a4eb5816ed95068a749b83ed9e2fa24b8f3c536b9263aa2b2eebaa52167d0594b5"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:24:30 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f5f146e1bb2a4bd90930206040c000b1301021504123900090035000c030b00000019000b4006141102020022dc1338d54404139b84136ef75afb83de4411000500", 0x48}, {&(0x7f0000000000)="040000006069342ef67b734bf9", 0xd}], 0x2}, 0x0) [ 319.453853][T11635] binder: 11634:11635 unknown command 1074029354 [ 319.460638][T11635] binder: 11634:11635 ioctl c0306201 20000200 returned -22 18:24:30 executing program 4: move_pages(0x0, 0x1, &(0x7f00000017c0)=[&(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 319.513385][T11638] binder: 11634:11638 unknown command 0 [ 319.519248][T11638] binder: 11634:11638 ioctl c0306201 20000280 returned -22 [ 319.577347][T11636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=11636 comm=syz-executor.0 [ 319.628735][T11638] binder: 11634:11638 unknown command 1074029354 [ 319.635432][T11638] binder: 11634:11638 ioctl c0306201 20000200 returned -22 [ 319.678663][T11644] binder: 11634:11644 unknown command 0 [ 319.684540][T11644] binder: 11634:11644 ioctl c0306201 20000280 returned -22 18:24:31 executing program 3: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) fcntl$getown(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="850000000800000076000000000000002700000016f9e81ffc4deb43cbb109894f8e98f6fdff"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:24:31 executing program 0: openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x14a03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:24:31 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={&(0x7f00000001c0), 0x0}}, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4a202, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) rt_sigsuspend(&(0x7f0000000000)={[0x8]}, 0x8) 18:24:31 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xff4a}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e000ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa39722490bdd9f2774cffe4bd03c9975ba4b0cc3d7c3788e745965108c630cc26d19369cc660d3ccbf2feaeb4603347ab0c8dd0fd14bd500000000000000", 0xffffffffffffffb6}], 0x1, 0xb) close(r1) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301", 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="240500002a"], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 18:24:31 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r1, 0xc) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x1000) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="8d380463d413047bbf667956dc7ba04283c0be76f1280038c639f3502f317ebf358d4c5dddaa073a35a792de010123306fd604943e2e44d43088c44d1eeab94ba4a6242919db8906abb4758a329eeb7ba5c89859925425130f7aef7a26091c4388fe0155e8f7e5c0961bf4fd08636fc05862ba160f7e23c75cae84ed1add5831acd0f5fc4a7195667940a61246862c807b454b401489e3cc4be7ec3a13a7053c6d5d5fa314e359298d3967ae04d8e9accd8520e3c838d12ee059bad270"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:31 executing program 4: move_pages(0x0, 0x1, &(0x7f00000017c0)=[&(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:31 executing program 3: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 320.271390][ T32] audit: type=1800 audit(1588962271.683:15): pid=11657 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 [ 320.327491][T11657] binder: 11656:11657 ioctl c0306201 20000200 returned -14 [ 320.364539][T11657] binder: 11656:11657 ioctl c0306201 20000280 returned -14 18:24:32 executing program 5: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000080)) socket(0x0, 0x0, 0x0) 18:24:32 executing program 0: r0 = openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x45}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x24000011}, 0x40000) rt_sigprocmask(0x0, &(0x7f0000000240)={[0x8, 0x400]}, &(0x7f0000000280), 0x8) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f00000002c0)) 18:24:32 executing program 4: move_pages(0x0, 0x1, &(0x7f00000017c0)=[&(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff, 0x2], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:32 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x10001, 0x2160) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0xa, 0x0, [0x7, 0x7, 0x6, 0x85e, 0x4, 0x4, 0x8001, 0x1ff, 0xa28, 0x5, 0x10000, 0x618, 0xffffff0c, 0x2, 0x287, 0xffffffff]}, {0x0, 0x0, [0x5b, 0x101, 0x5, 0xffffffff, 0x4, 0x8, 0xb4, 0x0, 0x7, 0x4, 0x5, 0x7, 0x2, 0x7, 0x5, 0xfffffffb]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x3, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @exit], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x6, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:32 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c0, 0xe0, 0x200, 0xe0, 0x3c8, 0x3c8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffffffffffffffff}, {0x2}}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'wg0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@srh={{0x30, 'srh\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) [ 321.246603][T11690] binder: BINDER_SET_CONTEXT_MGR already set [ 321.253593][T11690] binder: 11687:11690 ioctl 40046207 0 returned -16 [ 321.300500][T11691] binder: 11687:11691 unknown command 0 [ 321.306474][T11691] binder: 11687:11691 ioctl c0306201 20000280 returned -22 [ 321.356589][T11693] binder_alloc: 11687: binder_alloc_buf, no vma 18:24:32 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], 0x0, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 321.411131][T11690] binder: BINDER_SET_CONTEXT_MGR already set [ 321.417292][T11690] binder: 11687:11690 ioctl 40046207 0 returned -16 [ 321.429798][T11691] binder: 11687:11691 unknown command 0 [ 321.435848][T11691] binder: 11687:11691 ioctl c0306201 20000280 returned -22 [ 321.457080][T11693] binder_alloc: 11687: binder_alloc_buf, no vma 18:24:33 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], 0x0, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8, 0x2180) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000100)=0x80) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$CAPI_NCCI_OPENCOUNT(r4, 0x80044326, &(0x7f0000000140)=0x9) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'veth0_vlan\x00', {'caif0\x00'}, 0x200}) 18:24:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x30}}, 0x0) 18:24:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 322.143039][T11719] binder: 11713:11719 unknown command 114 [ 322.148983][T11719] binder: 11713:11719 ioctl c0306201 20000280 returned -22 [ 322.181997][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.208097][T11720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.226366][T11720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.236510][T11720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:24:33 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], 0x0, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 322.311563][T11716] binder: 11713:11716 ioctl 80044326 20000140 returned -22 18:24:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x7, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @generic={0x3f, 0x4, 0x7, 0x9, 0x200}, @exit, @call={0x85, 0x0, 0x0, 0x45}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0xffffffffffffffc0, 0x10}, @jmp={0x5, 0x0, 0x2, 0x8, 0x8, 0xfffffffffffffffc, 0xfffffffffffffff0}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000240)="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") 18:24:34 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:34 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xffff, &(0x7f0000000100)) io_setup(0x6, &(0x7f0000000140)) [ 322.866631][T11734] binder: 11733:11734 unknown command 0 [ 322.874471][T11734] binder: 11733:11734 ioctl c0306201 20000280 returned -22 [ 322.917992][T11737] binder_alloc: 11733: binder_alloc_buf, no vma [ 322.962242][T11734] binder: BINDER_SET_CONTEXT_MGR already set [ 322.968843][T11734] binder: 11733:11734 ioctl 40046207 0 returned -16 18:24:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/254, 0xfe}, {0x0}], 0x2}, 0x42) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000080)=""/178, 0xb2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket(0x2, 0x5, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 323.046134][T11737] binder: 11733:11737 unknown command 0 [ 323.052151][T11737] binder: 11733:11737 ioctl c0306201 20000280 returned -22 [ 323.063854][T11734] binder: BINDER_SET_CONTEXT_MGR already set [ 323.069984][T11734] binder: 11733:11734 ioctl 40046207 0 returned -16 18:24:34 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85845a20636100000008000000040000000000fdff26000000fdffff02950000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x100) 18:24:34 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd00007118540000000000c3640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa712f2e6388f3286c69669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fc0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe68a4ea6c213839152641dfa686c4da6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e3a118fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a7369257fcc7d86f2ce97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3b740e663fbddcf91c50f1fda40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a739aeab115cb9f9cdbf9319a56f0f9cee17deecf747f3493f1dc3c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458a59ee6d0a52aeb7bc8ebf1798515fc5de3f1bae8b4e9393f73960a9d5ce557523d056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2519fbe719a45337d2deb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3c04a0295bd9"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r3, 0x86, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x21) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r4}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000100)='syzkaller\x00', r4}, 0x30) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffb, 0xc0040) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffded, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$KDADDIO(r6, 0x4b34, 0x5) [ 323.609164][T11751] binder: BINDER_SET_CONTEXT_MGR already set [ 323.615611][T11751] binder: 11746:11751 ioctl 40046207 0 returned -16 18:24:35 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x9f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq'}}], [{@fsname={'fsname', 0x3d, 'none\x00'}}]}}) [ 323.656476][T11754] binder: 11746:11754 unknown command 114 [ 323.662546][T11754] binder: 11746:11754 ioctl c0306201 20000280 returned -22 [ 323.690949][T11754] binder: 11746:11754 ioctl 4b34 5 returned -22 18:24:35 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x74) 18:24:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4}}]}, 0x30}}, 0x0) 18:24:35 executing program 0: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@remote, @multicast1, 0x0}, &(0x7f0000000140)=0xc) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 324.134407][T11771] binder: 11765:11771 unknown command 0 [ 324.140471][T11771] binder: 11765:11771 ioctl c0306201 20000280 returned -22 [ 324.202858][T11777] binder_alloc: 11765: binder_alloc_buf, no vma 18:24:35 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 324.283044][T11780] binder: 11765:11780 unknown command 114 [ 324.289104][T11780] binder: 11765:11780 ioctl c0306201 20000280 returned -22 [ 324.304651][T11771] binder: BINDER_SET_CONTEXT_MGR already set [ 324.311429][T11771] binder: 11765:11771 ioctl 40046207 0 returned -16 18:24:35 executing program 2: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/167, 0xa7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x11}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00557) shutdown(r0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x712, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x712, 0x0) flock(r2, 0x40000003) shutdown(r1, 0x0) 18:24:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) 18:24:35 executing program 5: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x145842, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 324.796946][T11796] binder: 11791:11796 unknown command 0 [ 324.802951][T11796] binder: 11791:11796 ioctl c0306201 20000280 returned -22 [ 324.815535][T11796] binder_alloc: 11791: binder_alloc_buf, no vma [ 324.829705][T11796] binder: BINDER_SET_CONTEXT_MGR already set [ 324.836241][T11796] binder: 11791:11796 ioctl 40046207 0 returned -16 [ 324.846146][T11798] binder: 11791:11798 unknown command 0 [ 324.852582][T11798] binder: 11791:11798 ioctl c0306201 20000280 returned -22 18:24:36 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:36 executing program 5: syz_emit_ethernet(0xfff, &(0x7f0000000080)={@local, @empty, @val, {@ipv6}}, 0x0) 18:24:36 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000000800008b7600000000000000270000000000740395797b82e0b6cb3d9108b28c9293093a734d36d208e45f0321deffc234c488ef06b2f6e6e95ae1a2fb4da602e32700e7c2c765154188e4c00a1cb5a5dd3194c37fa40ce6b75f9b0b5ed744f1ec6006bfdf4e99330fb0ddfea8373fe5a172bdc3cd8b1e451a57b376a75e3069332784421b829509007e"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYBLOB="340000000b060102000700ce40a7b291d358aec9a970a248f94418000000000003000000200008801c000780180002408615716bde27cfe29b230e2a0bf1d43247518e1072cb56a0c59880b2177947f606f72ac1e9ee0634"], 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x40841) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) sendmsg$sock(r0, &(0x7f0000001540)={&(0x7f00000013c0)=@vsock, 0x80, &(0x7f0000001500)=[{&(0x7f0000000080)="26acdbef6f34b5d5c78dd1a5e26cf5a002d05f4877edf2", 0x17}, {&(0x7f0000001440)="13aeae4f690329f8a5920cce9d458a490982731a36d934a7c434ea690f56003270e7d5da88103c5c8537a163a66fa2a13341f4be4a591f8065c7f98d09b1159cf2d9423ff539be4f139c1a95ecf1570030420eff10b39d6e90ac49976b5c6eb07298bfb87b5a04698151e0627f31ccd71ac0ddf4d52f59282879b53bb5f754ea0ecf8c15f35804da", 0x88}], 0x2}, 0x4010841) nanosleep(&(0x7f00000012c0)={0x77359400}, &(0x7f0000001300)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000002c0)="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") 18:24:36 executing program 2: syz_emit_ethernet(0x86, &(0x7f0000000100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "53e2916ba000e29fe9227b245faf68e3b30038f9f66de37b9e624b0ea6eb5463", "1909cf941d24186d105cdaedd0919803", {"096009f2462e545a6e6bd7c4de353cbe", "77caa956401e42560911976043683a0a"}}}}}}}, 0x0) 18:24:36 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 325.417416][T11813] binder: 11808:11813 unknown command 114 [ 325.423998][T11813] binder: 11808:11813 ioctl c0306201 20000280 returned -22 [ 325.468652][T11816] binder: 11808:11816 ioctl 4b6a 200002c0 returned -22 18:24:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x90}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0xb, 0x75be0100) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000020}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x1) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x20058804) 18:24:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x11, &(0x7f0000000080), 0x4) syncfs(r9) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x8009}}, 0x20}}, 0x0) syz_emit_ethernet(0x5eb, &(0x7f0000001300)={@empty, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0f8fbc", 0x5b5, 0x3a, 0x0, @loopback, @local, {[], @ndisc_rs={0x85, 0x0, 0x0, [], [{0x0, 0x14, "9ee866afec2aafe49d133fcea8857dad46dd3995b486fff95d37b34ce1128452f9e8977d37b0004c3780a4204a3964bf937328166186d7590caf84d103bc5b3a20f50d10ccba59900098d6746b5109d317e815da3a627d7c4023371835e9e4467557267df49b60135e5271c3e98394f4c150706ba6522c4fd7914bb7a50885f2949c4430d03ab9d80289d9f0b04f50162b3b9a098249fec7e0cc8eeb11440bf6b8739e"}, {0x0, 0xa1, "309f41cebe4fbfd4a72e5ebcb1fdb54f99bb02563f275d05202fb01a0a068e8b2492ef7db8daba0910daa225dc44052fe364d4b8510493e5fecf7d27b21426f9a577a3cf4bc3df888c343bf82cddedd6e83dd2edeb3557bee0eecf29b6f56a15a4eb9f9b3fd82a4583659ec5b9f065708f95eaab413fb613fddf7c0eac7ee4627d20c155372a7459f90861a35aa0e806733673de58578ac05d93ba05fee2989a3b2d7c05ab271620c1465fad19735fde44543d0d45ffde0bae89ed49cb652c03b906843f427ee550bf67b639a0f67fe7bc3408a45b837e4f7182ee459b9c708eeda0b9bffe9c7ff7d271321a676a2f1298e9bbfdae9facc5fc5907243f8014be14df403f1d0d0f97b38b780afde9315d3605f671f26eda9191b3de60a088d067081ff32edd804b1b02a40a960148aa61c49c1f7f35168f290b23deb6fc5a23b31f7cad65b3c7ff35a462129a781a5f441ae3c3f0ab9b6a8aae9a90e85a1a44b013cae9779cd08ecaed3a65e31c21d11de31c62b3bb07635a9f1be23c41ae591a1bae80a81c9afa2773d4f7b2035b14fcbbcb095141e05b79211b725890f608570649be6d0ce9f9341264f08f4eb4d9e3dd60bc852c4ec5ff867032895cfd10721d13fdc28bf246bc44433d7448c4c263b705e797c39578cee73c9f663aec2e008bdd7e41091b17f27888e4741cf5a91f13bfa4761a39bc7405e23eed73f86bc8e90d550c0782b795dad6936aa1bcc138f52c142923648267bd3080146a114784cef9ee7a06e72f2b01fd59318cef6062b3c0c4fcb4cf15e75f3374444fda4b343bb54d6fd04c41cac315a527b5c33bef420b8df270a97f73d3135b8b14bff68fe45bb281406b6f12b80c5742e50f6add6b1521289ffad5aef99e5570e9abadf6afd29a1a8e761174354140bf8146dd3d7eef67d1acb080f9f7f1fcaac62a54b9745e9a54142068e7ae5c139e367dcdf094d937a9a263a7d923e18da684b9c97ece7cfbfb5e569449652536eb79c26da00808bf3f014205439bc152e9f22d273f84785b1fc238ee71d648e0f90722f3a137ffbcd79893db7486338de357b58fe54d90c54f9d31597eba64905760d3d6af1d261b9a0ce68d651ec81f5fcfcdbf7b3e7a6b57a809b542cf736a200aeaf804b8d79e49fd8536a1aef042f5cdfd7e4d026d7fc29833c7e759924ddcaf7fede41ef6b3fb0e7c113d23cb39e5a8c9814fce824aabff804133ff4c1e5975461c2c94dbcda4f01bfc01c5976df8cbb67773fc5f43fea9ea15d852043457b9940d7292cf52cf311d9f1d9713f73d1aa5fafdb92c551a98ace5245b098c74c5266e6f9d374f46f07faa17823f446db97a2de1ba7d50d379302e951489c5a9c856d6ac9b3030b703c1b0336447627899d3dc884e88b0dbdafc6a7917937356450629e30b8dca9d001db10f8d49a170f00f79f9ebf56cc8c091c8edd976c2dc9730986c450915f19e6331e0efedeeed547145f4c31be8a78c52a3d2a95c3d68239131778126112fec20d79c7e6edaa40c38eb84e23718a7651577ae2a92655fea771c920ca6e39afc55a7ccca9780c1d41a48d6f17303bb7ec511ec14b736dba26a01777ce3ac6d1082e7fe647f60886abdcaeb268355d48b1f46fefe1fc8f9e82b182a33c15bf7cebfd2750bc649843205c94827df3e221c73e863323d3aad0155943d09471ec5c4181fb838b795a034bbb553cb50b98fb160926323d9812a7d245798f7dca6efce4fdf283369faae55754d867f354bbe2e1536e675a506e4bf77115a78b65a5d8b5af6616a143e3a809ac09d41a5e2dfbd68"}]}}}}}}, 0x0) 18:24:37 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 325.902372][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.956786][T11828] bridge1: port 1(syz_tun) entered blocking state [ 325.963718][T11828] bridge1: port 1(syz_tun) entered disabled state [ 325.974283][T11828] device syz_tun entered promiscuous mode [ 325.999665][T11823] device bridge_slave_0 left promiscuous mode [ 326.006838][T11823] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.057585][T11823] bridge1: port 2(bridge_slave_0) entered blocking state [ 326.065103][T11823] bridge1: port 2(bridge_slave_0) entered disabled state [ 326.074994][T11823] device bridge_slave_0 entered promiscuous mode [ 326.112105][T11832] bridge1: port 2(bridge_slave_0) entered blocking state [ 326.119413][T11832] bridge1: port 2(bridge_slave_0) entered forwarding state [ 326.127703][T11832] bridge1: port 1(syz_tun) entered blocking state [ 326.134575][T11832] bridge1: port 1(syz_tun) entered forwarding state [ 326.169587][T11835] bridge1: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:24:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000280)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @remote}, @source_quench={0x8, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}}, 0xfdef) 18:24:37 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0xfff], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:37 executing program 0: r0 = socket(0x10, 0x100000000000802, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000100)=0xe5, &(0x7f00000002c0)=0x4) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000080)=0x2200000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x4, &(0x7f0000000140)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x6a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000180)=""/146, 0x0, 0xe, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 326.438094][T11828] bridge1: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:24:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 326.683937][T11835] syz-executor.2 (11835) used greatest stack depth: 3896 bytes left 18:24:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x5412, @dev={0xfe, 0x80, [], 0x4}, 0x80000000}], 0x2c) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000080)={0x88, "3215a61206b40c695c44bf974e1600dd806bbfc81fe92a490db5c0adf97f68a6b4590cee3377a220c5af5e53cc758328dedd4f7898a638ca1a971471774e7127a4726fdf9d69da5be461eab8f972daf0bafe32ec81dac5c3ba51e84c9ca260ce89787afc20d9d73fa3c23105e7b435f5906a886109ad4a21cc0b6f50359764cbd81be9fe00cad9e1"}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) read$midi(r5, &(0x7f00000003c0)=""/181, 0xb5) 18:24:38 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0xfff], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 326.995064][T11852] binder: 11851:11852 unknown command 0 [ 327.001224][T11852] binder: 11851:11852 ioctl c0306201 20000280 returned -22 [ 327.047066][T11855] binder_alloc: 11851: binder_alloc_buf, no vma [ 327.086263][T11852] binder: 11851:11852 ioctl 4004ae8b 20000080 returned -22 [ 327.186313][T11852] binder: BINDER_SET_CONTEXT_MGR already set [ 327.192742][T11852] binder: 11851:11852 ioctl 40046207 0 returned -16 [ 327.215996][T11852] binder: BINDER_SET_CONTEXT_MGR already set [ 327.222545][T11852] binder: 11851:11852 ioctl 40046207 0 returned -16 [ 327.274954][T11859] binder: 11851:11859 unknown command 114 [ 327.281192][T11859] binder: 11851:11859 ioctl c0306201 20000280 returned -22 [ 327.424254][T11852] binder: 11851:11852 unknown command 114 [ 327.430861][T11852] binder: 11851:11852 ioctl c0306201 20000280 returned -22 [ 327.439592][ T2640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 327.450940][T11856] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:24:38 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0xfff], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 327.482881][T11855] binder: 11851:11855 ioctl 4004ae8b 20000080 returned -22 18:24:39 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], 0x0, 0x2) 18:24:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f00000000c0)={0x9e0000, 0x7, 0xffff, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x5, [], @ptr=0xe4}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000240)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) write$P9_RSTATu(r3, &(0x7f0000000280)={0x66, 0x7d, 0x2, {{0x0, 0x51, 0x4, 0x8, {0x80, 0x3, 0x6}, 0x0, 0x3, 0x0, 0x9, 0xa, 'syzkaller\x00', 0xa, 'syzkaller\x00', 0xa, 'syzkaller\x00'}, 0x0, '', r5, r6, r8}}, 0x66) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 328.102831][T11867] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:24:39 executing program 2: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f05", 0xfffffffffffffefe}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x34}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:24:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x28) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) [ 328.301484][T11875] binder: 11874:11875 unknown command 0 [ 328.307279][T11875] binder: 11874:11875 ioctl c0306201 20000280 returned -22 [ 328.366330][T11878] binder_alloc: 11874: binder_alloc_buf, no vma [ 328.393857][T11875] binder: 11874:11875 ioctl c0185647 200000c0 returned -22 18:24:39 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], 0x0, 0x2) 18:24:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r2, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x5, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xffffff15}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:24:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 328.803588][T11892] binder: 11889:11892 unknown command 0 [ 328.809380][T11892] binder: 11889:11892 ioctl c0306201 20000280 returned -22 [ 328.864355][T11895] binder_alloc: 11889: binder_alloc_buf, no vma [ 328.963256][T11892] binder: 11889:11892 unknown command 114 [ 328.969183][T11892] binder: 11889:11892 ioctl c0306201 20000280 returned -22 18:24:40 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], 0x0, 0x2) [ 329.178455][T11898] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:24:40 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000080000007600f7ff0000000027000000a00077cd140000000395000000000000b920fb141bede1564d86"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x410540, 0x0) ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f00000000c0)) 18:24:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/254, 0xfe}, {0x0}], 0x2}, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000080)=""/178, 0xb2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket(0x2, 0x5, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 18:24:41 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:41 executing program 0: getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r0 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000050c0)={0x1}) sendmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{&(0x7f0000000280)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000300)="a6604bf44f98e8b15be556bc8c2f160f22b5306d4cdd262f7a68a5fe65b36acb6b35e8720870b024d1c07f4bf7cc87305fd2dd0bddbd947ec20b748156269d513fc86b7e60fb7cdc8656aae5d5133c5edea94b8b5cb9743f6490b33033f146ec2f06a5d5cc54a43be4d07b0b794e394ad18081acedfd6f4f0d2a2ae178b3f5cf849fc8240c702053a1f88e8c36f03dc7a7baa0b94147501eb7b5863ef4b4d946a465fdd4234b53c834580a6be4feebf3c3f2145604fa14915937df4e39d57ead99557a514f070f06cd4d31c3fb946219fe2de425d3539f0f5bdc89a139626e78d395aeb30a3c01cc5a2dac9e5990abf484e2e6a5e9e422c5484c2875aaa2415d1455d161cd65c649fe6ff6805f7b5f3bb22557a8ee8880525d7178a674ccfe8616a957b9b769053c025935206bf544a968147d1f9f5a142fea3bc2b0e0c0d113f6467d2fc567c8b8f5fcb934b1cc93abec76373fe83e80214b42aaa145d6e747377bea49e3f9205039b77f66500b9bc404b89e5ab030b6dfdec74f7f0b09cca16a884a5bc5a9671a908f53d133d44c4b68c969c64a261c0252e9047552af8f5e8db926154fb87c2d6ce9f3765ba766276cb3adcef92f42dd5660d2771ed23829bb478d2a1a95032b609dae640a0c0f4ae024633596484dae502231cd67f545847989bf3ba6a1c1d18aaf662dc9c10cc9416c3b6679c7caba922fc98ebc2790f1f911a8b8aa94e2a54276382fab668c1beb8a912f70bf214c0395599182e3ee0aefe14e25dddd52a2b53e05a79808328a75b140dbcad0800313a42d227bc8a761bbdc7ce004fb790d85f4a983af95dc00dd1c5ea3109a97827afcb96abbc7ea3a0c386b86d7d0f0dc07a1fe37d05be60afd68e936260a299bb9deb5e519bad606faed2aa6ca6154889f5d12474b93392c744793271859272a250511aaf7d1268c14d348cac1c603a359fccfd9898e0d6e07d84482cfc3f7e0bd201a2767a193962d12897a229d6a26aed26c4bc5581c0aaa3cf47b2789e510558a7e2718ffdb93eaa8486fa5b79befa6deae67bea4bdec3e19420082f6c0788710ed5ae1a307b12f3e415fb1cc8fff139c9bad8ca81a53e30d67adb2bf263bdd22c571042a13267066dce03680c6ef9a34585525e5fced38d30622787cecad7f3fe03e090780062023644b18cc9dda31c04386b227bd2b44a28166c427c1c25aae6a5325f1f2f156ae7e2b09d7e396f1707d19e61a039c5f63e05a0f58224e4e7f487203cee1fcb35421a19f2b462bf5eeff21da5e633e1a770cca01df913fc3620ef3081da62f72f276598ee1121c26de39c2778b7d13034b13300842e74ee5049d14b071d644e9f222287cef1431983d876a320365984ecb6c39abd87c49eefe52785492fa8692f498ba248ea375a0a95bb2fc654b435d536e9295c2b9edd8aa5400174e034aa5652e91b8ff242d627b87490148ca7464dd0c3a8ef4aae65fe514ba80c5d1d59b71378142b5ea86d88c86cf7e1375f34ad49b7228842e1611cb02c04a6a697576f70facc4394e765de66caa0016d0c2725c89de12e2872f09fa4effae4218b63ced5a2cfba6cc043892de16bab20dde7be7deefeb2a23e72b4b0200fcd425f27dae89be3761fbd78c5326e17a355956adf430ec71202f5acf22117bea82c01f1b975811c67bec17346de5be89e41e844cd09687f326638d18df49f48a61c5894b6ed2ea00f91feff0e33b6e6f967cd3add3284832a58bce104d22a125080a60857872379a00601ca701459d0b8dbe6fce261bb0144bb9c97bb154538423f15f17a51d3059996512eaa884dd8f25bc0a23e9e8fe55b0e0e14d7da2eeeb95def887ed582fd7f91a59b8cc30d9129cd07b128fec5e0b28c6401157b49fcf59a75f9c93444129c474d4f4bf33c1650857a88fb8f892a384b2d6874a404d4d08c70001b4bb3baba1e19acca4a8dba7c996fcc4a49a0deb22e1a926fe04e240cdd87e4558c8156fb219bd1b84a027e5f9c15dc584d0013b240f7b166d9230e8fb3b7a7a123f48b80efa611a13a8c3a2a7ad05c19cfe1c38873d47c69fc00baf7bd57533cbfc9f5ed7bd54fd96f92f0e8dfe25ed2bc8e14323476d6e39553e3c51932f28ce74c87479d080bc106ffdff884724d8924373172c3f247eb5f44dbbb2bd3061447faa912667dfa7b474cbde0236f4ab2ad5267241e84a1788bc354f656aa6fc451264ee69e2781fd5e7d4f2512e2dc3f3270308544209570a44856b0d23626fab4a11edaf9e66ea6d0ab0041a9c05b30b26d904e3b24c7f48c04a0f6853fc0dbe4ab192c8b214510e944295177d2cdd0eee492f56884180e05f28a0799e326efb26ddc3d5a9ba35adcd82f6b6c12352e0cbf19a9ec92a881e44eb924e6f3855d531953b899a6c6183179347b9beaed604f1512b403e045b69125606ba5eeaf21bc8f9c3048b76d9a4b57abdbd5a515c11bbe8ca82bee9a00096f504337f7cd376e900433ffbd4c1951bd07496a8402459bae5e8a4d3a0a2ce8b597fc0a762bc30a309ef0443749164747d32da360a01f8cc73d1f5b380bff1a9fe2da38c81627d15d6209130d82d52f62ccbcb391779258e44097937f2c641760cddfcb1b4a6362bc2036971e90a9da850122a7cf1888b5b5e5ca67819183ec08ed4f579b3aad13b7f7369f69df504264f6fcc7376e6f6bc9f6172aaff91f3fc7fd8740f041a353dc6424aaf410db0b971c570f4b1c15a5a31058915ba11e94c9cdb9e155db69622f5b60e73beeabcdfa9f3e9f6fef04d68d519ee5f21b7a1d0649b0fb9bf62913f9cf30cda0aa90344ba209db7228f8d29b31ca5adb274de86f648963b9faa25262a9be43fda6d40287befc6914500a478252453ba124153c604cbb010225363a173f4e305eeb34a912d002cc569ffbb4ddb902c4b0913527024f9084f69d5fe972b4b8e4ab116b820b88c2bc879ad2b5e58f967fe9f128391327d5efb61e5eeee02bedaf9f402353e769524208946e9aa42ee438df09fffeb6402d05bde360836ed84c38620cd8d0a9e900aea24de80f8adc05bb40d25b23975b4d9736fbcf85aab0944ebc9d579c8eed006a1d3f84138461b8453064c5235257fe8d3645c0c6b48e1a3f0ff281b9a51b778a3c969dc7026d9685bf307aa07ef1146e604bd3bfffa9dcc02b1304be4667c193b96ce51db6ef27b4e5bea082ce533bfcf251eb56aec89c65fe36042617dac09ba8e807516c0c9640fc8f9b12cbbca5efee71b3139b4aebec01b9559e70ebd895ee72644b5ccb332e86157c6a198e75e17b884c7b510df1ca325adc9cc2ee1545aac7b90e662ad0a78eab1acae25eb0ba79cf0972ba297f43cc0352e5305c9269f1fbaa0d3d6a7917a9bc28e8ebd363d86ddb9e9f2994731b71e55137d1d3e39da5cd6027c07e238434511768c37421d8c4ca2f356183ff134e2601bde0541eef1ed954b3d64244136b10b4b86a5eb81bb470a23043caf8d6e5da4f5a24850fbd95cf0b86ac8ee59bd093ee8aa6e47302c4d9aa45ce390cf0650f72ef976bb84bdccfa7ada606d47cc94a42ccabcdb8c1d55cc0b181db9a2bd5c0ba47af1562870917f78e770759f8171cdaddf3d1bc2677124a36bcccf3c23f984d85a20a4c15dee35830653a20ee077bc66be831d7649c17966e0a8d98e3c91649b80c2369e81a645ae7bd1b58dcf180333bf15c51cf404d1a2bb8146ece5e52bd9289deb7d51a74068bc4ff552077d14fc321fb5d948f3825c14c8baac7f2ee654bb8feafca6869806c583c6923aca70c53776268da3b05b6e2dc7962de95afd322f18620a963a78014c50803e904665f14e5c643c4fd7db834dfb3e1e3539e749c11bca0c0a0231b466f27f3c7d0e5d8f59a418abda106526a6ee8b757a8a9648863b7931550bce92521d3e44dd2b0231a4ae502ff47ac55525e3a45810a10e6d1b9bc37d601597055234a20ca909ae41caf9d9298ccd9debc0c814669fa98d68fe96b5be8cd14e95c944352a302aa48bc76b668bc51a2a347da31fa5c010c3a0cd3a9c580d171354d5d32427e927999181b48105c39f5bb09a059715712f5a64b16c1f7faa757ae76385e655b5de975794f2fce9646cd9791c6b0eb56d9cd7fb0aefa914c16f373729c7faa20dd6f488eda3ee02b42b4d4d16a4a069b7e7943df419cb803a1e4141d0dad20f179a07ac571a2409a686d1a4a3e445bcfec574b9f71782045b0a77af5af58db9baf8c77507f75951e9c4eb234ead23375ad222daad98def308b013e12e8926cfba8c012280c958067df7fe24ab910e73263d46e136e59c411c89c502b94925db091cec9412071c7ec56a399b4101c1106a4dfe518a1af4b3867d8607b3af22d16fdd9138d745c7e20b2775aa7959133b7a27589d0283f02458c0950494eaebeb3a643d8e5da8c7b9aeda232c718e75e183f5cc1382d7dcf1974317432010a418873fdd3aa1cc2f87f1cf18e5b432c2094f3ab6f27739b35ad899efdfccbf7aef2d2a02957e2766f2d63ad518e0025637347272754a23426fa8f9d9c91fcc326f81bb1b5352b935bf840bc0fdc317c7b7f442742f49429875b1e6ef8ef399364c3a12c1a7d9adf1cbf7de678b7715a10ce8a14c8305f2f3ffd782cab0a614405e02ca985950d32581a3631f41a9c5b6102ab8be303ae2d3ef40f6f94b752bcf9eba8c2f943d9a21ec19f80d13fef8675a15f065adb0dc132780f61f9f8ec13d3f1ec7dc57f6a3c5cec4eba42cf63f249d5b0526187351761ceddabac7c8b89df1677d59fc4c53b3e49f1d16bae83942fc8c48d25929202527cf46df7560149a1eeb3237960c5c0169bf342fd80b347643c114a7dbd0578abb583f65e229ea5cf234f3c67e5edec5797502cd6c83eb643afff1cbcfcf1a80740ae98eaaeb0529405fce03f329cb29060f04a973ceb6e2a39fdc20cdc07139e034fef32382a96c7c958c990922462bfde18a600cf9024fa3e8110dcb9682c1b23b2e16905371b8afe3dd293a26f3f4a82a24cfe155467ef74696088c721b53609fe5a4f01c7bd4cdab3164164b5eec7a76129a9c2fbae8cd642f4627acc09f7df790a767088bb22152dd666da5092dfceb6c196d4db2f8981241a18aefd496cd7fd7cdd2b61d0fdf295d27a6e1cc57f414ecff6558d62bc42fad5e8fe2e895d06e6420d0030d154c1878dce460469fea9108e221762224056be983c1b0011087e6453ce3882e05e520534d7e21973a96e2cdeade3b3d26d71a8d90c8024e031d3a0a0662576ed79e9f3d80287897d42f4e2d15003861e7ad362be186ca05bdc0492747ca8372cf69e27c16c299eff92ab04de4a85644b3bbb64c7e1143d5a10396d1692ccc74f17cceeba68cf3fd7597ed1147f792aaa9ec225552745d68639ca103eeeeae87b6ffb362ea5a46a8dbd86b60e26807e332c9102060ae58e4d49d6165a08e35660722df25d61fd49d8c965b5e1c1e7daa989bc29f606b5f9808047eb61dc0818d10fb63aa9af25d15553a309f1876986c2e3998e78e6289b5bb97ea0e3774912775e5505f429c2a03d5aec87b781ec86b682a3d7e268dc1736d20e1b1a770e2b46143cc4841796576d0d4728a713323adcb61eb476bc0d097b427709c95b396d92e8d54738add1cb532a23a50c4ef9c9a6a64e67196aa499dbea3752ea37614d37fd2df6dc2eee3cb6e7cf579ff53fef9b6917e8a58e61a24ab516a152f0d92b237e7ae7ccadcef084f1605643eed1830aef16e99bb76a774717f817cbc33fcbcea08ba26497c40866e72a14b", 0x1000}, {&(0x7f0000001300)="912b56dbd42faacc7f8910d75f8464127360c855aa2983f584e1b628c1729a90840aef34edf16ca29650c8c572ef7090355a7b78ecd9875f534033294e987307ff8557916b370d0eb175f51fd58f34f26c3ad96afdfedac0752f32a985aa672f79f5d9149786ee5dc981cc3f6fe381aa7b8dbb08a3ebcb96ef70598cfb1ef522db4d73846ed3314dfb4450ac3f5c2751328df4bf12ed4d8d278cc9136f02ed89c29e5d3ab2", 0xa5}, {&(0x7f00000013c0)="b285a0075b20c8fdb1e683dcc356f7f0e88850ab584f199839d8ebbc622f72f0f35254c1325c888104dfd6e4cb09797e54ba8d1f55f36b4bb88951743f45cc2af22689200cc6955cf0cf4e2eeec2330d7ba3c0ac977cf594e36921349cac1381fe47b899e915fa2f75fa0ed2f296c89ac5aa395dbb07daa9c52f1614d4bb6d589687778792ee3e0e8201d8dbdb79e569172e3dd90c69821b39217cd1ca6137efc2f0e237183d46fabdff39b97bc67db6e98ae156013e961824364bf9cbac56be951391974a", 0xc5}, {&(0x7f00000014c0)="369cd4ffeab65b8be95fdd2b5c8e602b4217505a680f4b649ff4ef0faabba08233d6b01e1f603147a33575efc5b6f5947f6b25dc4d74760249bf77d74be49315fea7eebc7d4f2d6f9b614d1c7f7ae93366dc23010350176b5e08690153c831cef97da534fddc94e9c0c8c5df33667f354c66ca1d508cd911337c2b2ab4088a447946ddc5ff1c62825d9560d9e5fc632fc654b6bfc5980bd1cc1e19ee4f0d91c814b5488ef68b90dff07a3c31993c14f4e50679982ad9b1ed4517154e8cc8998de0adde93deb0aa76a7ac8ddcc6", 0xcd}, {&(0x7f00000015c0)="bd73707196522059db96afb9953f653e0642dca21a47a2be5e35922eaed4e3d72614db0de92692fc3ffa6140db66500a78ed8cf5234ea1db9f4b3b530ae4a365d726d1c1f15758f2dcb1244f1acc1e9585bd8f3c34ef6e9fa5d31e3da71dc3a0088a681b552d6fe2bd99554a7ffaa8", 0x6f}, {&(0x7f0000001640)="d623da2735eb327b68fc82b2130d0ad8bc86436bacf7f167a0bdff002465c021e5c7edcee707dbb795652048eb0d1b6d0213082f2a8f2d1075053c5bb7b2c34025dd0b9d1a009dfd909b2ca2924ce3d78190c86be21408fd9c", 0x59}], 0x6, &(0x7f0000001700)=[{0x100, 0x103, 0x4, "591dca713e69a5cba10071abbd687b8332453c6e8e22bd19d4bceb45a1a45705a8d3366a42f713521732221dd9abdb9d9c31cd9aa35cdbf83f0ba25e34ca609bfd9b4247368ad349a82776784f2ec8a00516cf7b44a90458d234e6cda4b2c058a778571c47b60f163a8f0160b090a7386317d3cd4249f32567af01ac3bd7c16f20198b31b99de858b7028e5a9e6cdf318f870a367bee18819f4144e4e2d3e3596c9fef56891612cd981a52a2d031e6caffc313b30f627f4aaadfd8a73c9ff79657ce93fc4c5f2c667c107c4ed6383287fbcac74020c0cb1ee3cc8b21743977cdc5a2003abb31ef371ee91d7351819f63bf14d4db"}, {0xf0, 0x11a, 0x80000000, "e060f23a4b34cb2d28e7fcc31e1e3a70389f4847356f8752523c4cf82470d40d580a809eda3bd27ab58b82d3feeb73cc3c8d99f5f7213a3b2e3832fc0bb396068ca24cf5cb67f73f9b2cba168a9254c752e8fef1b56c04df0db91b424868b7599ee95f4ccc11a6559f0570bcc6e3e4e143f0c41823df105b064fe5f0f3994c49b8b199d72198fe5b319c05d0d220701fdbee9a93a5a9a1412a3d6621b6b90b5ec53e957b4e2d0a75d02253cddfcbbcda208bba240f76f0720c85163a161d98b3c857707ba0c9fe9591d3487c1daec96af5b2240b4db03d45d8d75a19086f5de360d3a84b"}, {0x40, 0x10b, 0xfffffffe, "6493be90f40cf79b876dd1de2811578e93cdc269b158d76a8cedcce51613191d5a49a181d7013903b234039f92283e66257d530c"}, {0xd8, 0x119, 0x800, "8cc01b4ba57be5d9ed7b5388126f2a8e05191f641a85bf8c1d503636cfb90560911ba2ec7d6fe1248033f5498588c8fbfa93f4e8709c73d5806340fe58b1d68a757272a64b916db6fe5b47d9a72709dbf8345b22e636fc8becf9a280b38b96f52841f7bc3b3655625ef72e38481809aa44688415100cf5d76ae12f54359cfa620fb798727b48f3dfcace779baaea2781ccf05b1abb84c00698aa6f9cea0858678bd92f077227dba1c004b2ecd3add74bb2c3adb5b366ec1c1d77675f654f835d75650014ec2fcab4323c89"}], 0x308}}, {{&(0x7f0000001a40)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x64010100}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)="77a1425894766122459a79135f794ac1c5b1fe25d872363a30ce67d249ff32436020986ccf76167fa7214efbb991bac4de046819cd6778503a685ceeefeb46960ef1f91865b5679bc78c4febefe941f10edc38b23a0f4d6830b868a3c2383399db3b1de024c627bdb03822c886e4e27ff211808664e86b89dd1bd7929ad61786cd5019087138b9242c9f8c66219c81ca8eed88a22d95fd8bb245c3da6cd1fd2c6675cb7c11d5e523fd719c9e545401f917e43f8def487ed03e33618dcf08c5bcb4743d9b951b0de78f608f8454a21f3c7206280a2637d25d0a83bff41e", 0xdd}], 0x1, &(0x7f0000001c00)=[{0x2c, 0x119, 0x200, "5ae123b3fa7b63193a3f84558f57b3212e50b6d2ec50e759874f360669a6"}, {0x18, 0x110, 0x5, "572908356ac2b827ddca6efc"}, {0x3c, 0x10d, 0xa3a, "2d6005ecac0879bbb2924be6c20ecd301d257954d21160b555d44a2f6379b47c83b90800bf4ad083f1a33481de9f6809"}, {0x50, 0x110, 0x2, "5008c3e1a70ae7b687a626965a7fd5a8a60a7136839312a4feca988d66605163bf11f08a02219fef37eae8d6d8958f89ef5afb5892c6b2b824b70b5c69c7aec8f2d437"}], 0xd0}}, {{&(0x7f0000001d00)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="01f95afb10863579c495b35cc65575439d7b92bd3ff7a8d21f934fb558717f589949e56597277ee988090de89052209871e7625b633908b3e4d94c3c27dc87c641fe40287ed90eb84a04afc2a297d1044ec0e63c3d208e9f1a2aa5da04f949b3965436459398c9b3d4746361cc4827aba629cfe145d82f3ce8ce4a582e42b1dff20fc8b76ddf1e98b459293ef59ff061285ca0bc0c6f6247db3ddb3ed55769ab1b085d7cb3da16b56bc0d188b708fa0ea2aadf519a197410a3f3b838f6db4541fd281ab290c746fad226c38ca55149442557c846bb1dd697", 0xd8}], 0x2, &(0x7f0000002ec0)=[{0x8c, 0x6, 0x401, "12fa087a2a606f3fdf6207e5f72b74cc39274dd19428c649d8e7c4f5cec8d49bc399ca68b13678c8636dd38bbcac5c3100f53dda7b35781824d206f437a0fca40dada8e0f80089523d5359a165c1c5111d4b501545c557390a3962da138096e66fbc0a5039801cf39720bfaa73a81b9c3b473b7245430dfb79b825f938a3"}], 0x8c}}, {{&(0x7f0000002f80)=@rc={0x1f, @none, 0x3}, 0x80, &(0x7f0000003100)=[{&(0x7f0000003000)="caba8cc338b3301dafa3c6e8a611997e31ff92f0061580c2e0bcf3117fcd6caf7a2a7b75f9b81e7aae15c8421650837dfa1bf160abb7b245ddb3d4c05cbb6d24cbc9e2fab756da18104ea4183bb35d7ff6421f265b047b1364e5ec0f88a251f6872bdfbec245603e93503d243c6ab38563391fff42c2100a057366314849a1b9e39a4a22b557bbd6a81d9d13bd237d524bc7ea59a454a1bed3b7062c823481bedae463a9e0ade0186aa8dfc4d0686b24418f0f42c54bcaac083df7340b62700e4934c3b758aada3da458ea7b8b1ce8a6da", 0xd1}], 0x1, &(0x7f0000003140)=[{0x40, 0x101, 0x2, "7531e8a0b7c6d9022d4e9682b4f5f4917bbabbf9de9560d0fb97399bb95198f54ae239304c3c60b898311e7ef16377cf9b"}], 0x40}}, {{&(0x7f0000003180)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003200)="d5e062bde9bd43ba527d0e942d543934c0fe68e01c46e7cd91d737c0bb1baa917bd65c8c4ad6fd8857b1f1b3b7649395cf2cba3ce4597550bf65833fc5cf715c0e2a4ed441a7", 0x46}, {&(0x7f0000003280)="976a", 0x2}, {&(0x7f00000032c0)="4977721b6e9e3333409e4c990b7091d39c67db809d4edf5cdc114d50a71e6dbeb1ff8e7528448db017acb66703ceec653bfbfc970dd9b5affc4829aa4e334ea22a5e7c07706dbebbf123e92730b1df5f66a688016841b5392165da498dd4b965b2d5b26025059d", 0x67}, {&(0x7f0000003340)="de9202e0d24f4bb9e8e484ea8835f1991cef2744f9bc3c7a60a36bdf840f4a1863c81c3767182ade8a9eab76ccb1b4dd239fe9818235d45aea09999032a8d02fb7d170008c2e0356c19b5707df053cce99bc68877579527602df309c3e06b1dbda1128813d49f0757bfc70ae232a416085b6d06f63255ccfd9f89c6aff56b5833ebc82bc6e4427cc4900496ae0ab411c6158e4b53e58bf77718fed2f9135b8169a6e47e533e0dc433091951db4fc7557efd016068b8334471e8dc67b02b41d39ccbb7472e84fb8695668", 0xca}, {&(0x7f0000003440)="32c9535f14e7fa110c8b97ff78aa71bea2be84ea7ba1d65e2e61eca3dc4603befbdf2e8e9dad94ebff5fa969980b6db41c6a69af7b03716f0388672d6e37cd223b2855ee5be54da7bca8ef0d89a257a18e6274cd9ead02285d661c2840bcd58764d31a80ceec5ec7765af02a554ab3b4c4e6bf3f94ad32b546ed2c04c5473ee91d235b4ca0784b7f0cef9a0917fbc6af9f3b", 0x92}, {&(0x7f0000003500)="ed51272c3f2b79302ec71ef3fba5", 0xe}, {&(0x7f0000003540)="e47b1bde51467793aa49dc7cda56cf98099faf62bd88712abae8f1ba2d53d988ebafa7ba730f0b19f86ca40b9aaad54dc620469e9457d34dd7edd5ef0a94a80274396c159d419972b2639bc9062e2690d2213514af1e7b1a1151ff3c74eabe6e2cd77be5889610a57292088288b8e353adc983689ac24e4cec19556ec01c5484063da7a5d408127b7936fe9a2cc79a0e3e6887663a2906e7ebca912db7b9569a702f210316dd56b3c47e3ae8dfbdf129d1b3e3b7a4871b6258069ed68c1f1cd1fca553bbe22498ae7a917888", 0xcc}], 0x7, &(0x7f0000003680)=ANY=[@ANYBLOB="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"], 0x208}}, {{&(0x7f00000038c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @remote, 0x3e690bd7}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003940)="2eadf33158008d61e8cadc4a0ff92fd67c6ffa6e36aca0c1897628095a94c787a5500bbee741eec379ec42e9ea3422c700cfcdff57a5678f064b109f67c63cad26a781c73988b6543c92784e02c6c79d8e096f7dcd2f38def4b46c618803bc91c2aa24e6e0cc9595", 0x68}, {&(0x7f00000039c0)="d191649c052a73e8961e6e1be25526f68a38b2a7ad1c9d4b55056c19f68eb88e2df9fa916e7147aaada803b1602ed7882b93349b2ece72de83a880be4d9ad68f9ecec5e316f1a22c954691dc1d03640963dbf9bcdb72959d068e51dfb66f2e37c78c70", 0x63}, {&(0x7f0000003a40)="a840d5c3f4a8e7fd68db6d578e2235becc9f46d5f801e5aafcf7735db2e4c3d8573fb92002ec83484078e270b5a24f44ae49c3a640e6a06a597fc19c9a4c5102ef4ac3b721f00f4b88b2a7458227f8583c5785c8b517300881beb7514e39b3c2838e867604747be474b164aaf2f514f72bd60e5e161004fc7dbcb6b7c1b68219", 0x80}, {&(0x7f0000003ac0)="4eb386b6a059eab7263ed20776f92a3ec7dcf430cc15304437e6d759b9c9eddeba41ed7a39a28878d78768c6806ee76965fffad5796cd07a16650c9002c7f4e279c4a7bf98b2fb4c272e210375d3744bbbbb11124ca95e9d", 0x58}], 0x4, &(0x7f0000003b80)=[{0x1c, 0x114, 0x4, "32109e128109489be021cbcb18332c"}, {0x28, 0xff, 0xfff, "2e967f3c46e288b81aaac58b7e23037b6422c61db6088a1044"}, {0xd8, 0x105, 0x7f, "d427664217e1477cb0fb5c0cce7973eefb5155e222e77ac269ab01f015183733369733454d27fd13d2c596b0b804f1e335650e5cfe63829957e2c7a733daf55356fb8ffe7c948a6980c967c37c6f93215bdd37a3c07fbd44cffbb056cf51f4d7678e5a25682ae42f0c221d58db156e807ca3fab056144e76716760eb679e7ea6f51e8bd9fe6d7ca9c488d520a90467667b8b72adf94f69964d6d3f0ecd8f0021890c374052133237848e2d6a3019e3521000fd13efccb00de450417bf49a05c6b80ae7a155366d56acd55cf7"}, {0x84, 0x3, 0x5, "ff29a9fefbcd223785488c0df5d51081b2ac1837d229d0ab7e1583f4f53e331d44dfda16ee3ec6a0915c5e35b05c72f62c252ed2eaa94641eee8eb7dd8f75f2c4e9ffd590f5f703953d0cb87656bfd24a3c995a8a553a8898a599f015abfa2bd9d7f34214e389eb7c0a81984f24bc95942e3406de1a8"}, {0x54, 0x110, 0x1000, "0fc36c8d92a1f13d70bc4e57292af572b92dd479cfd93f49ea61f73223e97cd84e6d8bcdf72f160298a6ff65ac70d912b230ff384afeda9525e9dc18e03665a30e47946c5c"}, {0xe0, 0x117, 0x7fff, "2c23fcdcdce1f0e6b93c3dc8273ce5f643a93723181d6f24671bf7fd42cd78aff036448b909de59b0bbc9debdb296c7607a2a3ecdc4034bc74f5231c23dc0cbaabc5f0af9bfc2c0725c0f02238b0d4af8e0a46758c679028cf9d53dcccc2f08a62056a6951dc1d476d68c0fa8578366dc9b30c74115a221497ff1644e12830fd7f2641789ecfd30d126aed2318ce685414cca9ce0cab50765509e4cfe669e6fb946446493bc75b82e6591ab10c70232bbd1edd0546b8e424edb324ef2170d4bfd12d178f83b60974a3f2e68a6f781d6fcdff9a10"}], 0x2d4}}, {{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000003e80)="5d4180e8df5ae8c56d959e63f1f8ebfcfaf4abed6e9d1bb0c89f0e7a49284745b95083f6e46052168f1db29ba713a9f30b38652b23db0438461a35b8f75f6736e037787d50346db410980e7fbbedcb5c3982d6403bf558b5bf19ac39a24d0287481099d578d50c550fe2fba9cf34ddfd025b5c76ef3ff130541e1acb16105a36c1ee35277c84bd735a88f0800296ef88a83a7e22f85d", 0x96}, {&(0x7f0000003f40)="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", 0x1000}], 0x2, &(0x7f0000004f80)=[{0x4c, 0x100, 0x8, "14b4d2453234c1a68b57641709c8901bfc152ade6388fd7a8ffea4ef4b12af55352bd97958a1ad2b9195200b8fe437530f1086cddad03958a8360f5be6929f61"}, {0x58, 0x119, 0x5, "29b0f672a813d87882f09ffd28292cd81fc2c6f192b233eb7934f4966fbb55a24353f612693c6262897412255e289ad8cea80794a1b445527a9a003262bab6d99f07175662fe092874487e"}], 0xa4}}, {{&(0x7f0000005040)=@nfc_llcp={0x27, 0x0, 0x2, 0x6, 0x7, 0x1, "d9016bdd4b18772c3f488a61c7f53d466ad90f2dca737cd0e8c2dc359a1700c58e2e9da08e19c87a5dc3fab4b0799183e2e16f31541782e97442263d706944", 0x2d}, 0x80, &(0x7f00000051c0)=[{&(0x7f00000050c0)}, {&(0x7f0000005100)="91023759dffe38fb98ff32e449811c3257f534c4623fd18052", 0x19}, {&(0x7f0000005140)="a4855fb2a533776113f6133c45c05de651a2af4c6fdaca163b8d95b0c206", 0x1e}, {&(0x7f0000005180)="560dc5532a95df3f73619a22b4afae7907ab167ec66670d6cf5889cb7745c6d7e27c371e6c9643dd0968", 0x2a}], 0x4, &(0x7f0000005200)=[{0x100c, 0x111, 0x2, "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"}, {0x104, 0x108, 0x4, "df6fd8c6a268a7e30da78fdfe89b2a00325c43885945929a15e9e9ba80fd9f970e77dfbac291cfae67cc810a23cc73ac814264c37c35f5cb5d1174073fa06c74b965e7a759df5525c22c82365654e8f2ad7084e31b3d88f8500f10c2bd7d952fe1234c753e014b7a59f2fef9fdc76dc213db0140ea64196e64ac8e6d67f69f7f2f2eaf521641b1ae0b86d03ac078321e41d1d1d2cedcefb516023afb9a900ed1314f144d0f2e73cc0f7722398acd0896d1873c6c6ef0e8cab0b0cba7579ac0e7db6f515e9e03c24e670d92d092f2c87b83a7441af9b1c457628295b5c0fbe047514e7ed5a7fd2aeac26a0d4e62aa2edc8dd28633bc9d"}, {0x20, 0x29, 0x3, "94fd20429ed5aebd818570375c23ac6f7b4419"}, {0xcc, 0x118, 0x10001, "196989b3379d3ea9dd3062e92649a6fc4c7ee987204d5676d6ea89a80dfce39fe439b6f2c9e1349025b0f135820e2dcad4fefbbe56bffcb81fa741e9896f63aadb82d06fd6ecccd5a2996fd32beb779eb39b4b04528476228f5b105c93032c43bfa6b3da50d7d9e2db22f211f32313c5882616c89224d9686cd3dd2591dca430ed10fbdd85ea32d92ca8ee499714ebf0820a94d0e91cab0da25c03e1a326cbdec9bcb449d9cad57225e238148d73966a770c50aa49e6e002cc54db80568944"}, {0x100c, 0x109, 0x1, "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"}, {0x9c, 0x102, 0x6, "b2dbe9f91c7112f352a268d061b334596e677e63f48b7c17fd22e1ae081b8882abc0ac6a5c64e530a273cea3840fc17158b999c8b8a8f3e289818f3a143e4e7d79ae442429fc15959bd79c5def4fdc72907ac4999970d90ad693dc20e1f87dd2b67712172fc3de7822b31e967f93c561db17a1c2e7c224983a8b230df51616ad21ef0fbc18af1be6f98ebb279799"}, {0x44, 0x113, 0x8000, "7050be1abc8c222d420ee9398f6bc1bfb34a09975a35684ab03a7d9c3403d14a37ee98abcd8a7137c22c5ce1d7f6f265984b815c5e95"}, {0xfc, 0x116, 0x101, "1128e468e6e7e79d30f362a294c042fd90c76cb6c249d1eeeca460a0d927b53c334323443852bedea34995f543e13d5b1a7a77ea30cf20c0a99b5c65559e98c3d03dff44a387fcb59b53d7360117fa5eaaecb485415babd11d3d09d6cd015eabab0f24dae9727172a3ba084887d64265140019e9603b0b7c4cd1369af9d1a42c7c9d353dc1aabf7fdc9e26df994938e7902c9873edf64f097e065e18ed5e8843294856fe14013ca7e679e658db57e80d8fc6150bc59af5263b57faf81eeb11c67e2aa92567daa85f20fafe89026085b44b02175aa60d94454a982c5fd6d6edb6fcac0099e8c621ffaaf5e245c0"}], 0x23e4}}], 0x8, 0x40000) 18:24:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:41 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) [ 330.246556][T11928] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:24:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 18:24:41 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/254, 0xfe}, {0x0}, {0x0}], 0x3}, 0x42) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000340)=""/179, 0xb3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xc) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket(0x2, 0x5, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 18:24:42 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 18:24:42 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0], 0x2) 18:24:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ustat(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000140)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="82439a1f150100021a9f8ddc7c565c324177ffab5329d82f4365a26e8e38e042872ab7d654014725d4fae34755c96c3c84514afb9963a4ce3b34f55d44e7a6cc8f386454ba412a7ee53e3722f3523cd8c310155b7f4b2176fd6f9956a59d73b3dd26e4602e226a49ae91dfeb105416932b0dd3d080335ba1abfb1c8d8ad668c3dffd7d04d9b9c730ea532f20b2d7ce095ab82b1671ff3a6626b7d27eafded7d5197b0bbadc54475f951a2d5403ec5b662c43432c9295acc6e55537353bc0d3318247c7fcd11dfcd4272bbf116139a6ad7a0c888b3cc8d47663895cf151f609080ff72204fd8969f150d3734e86057f3a9e74fa4c8e3f4c6c"], 0x2) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 18:24:43 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], &(0x7f0000001840)=[0x0, 0x0, 0x0], 0x2) 18:24:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$FUSE_DIRENTPLUS(r1, 0x0, 0x17) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x28) sendmmsg(r2, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'team_slave_0\x00', {0x1}, 0x120}) 18:24:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) 18:24:43 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], &(0x7f0000001840)=[0x0, 0x0], 0x2) 18:24:44 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], &(0x7f0000001840)=[0x0], 0x2) 18:24:45 executing program 5: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [{}, {}, {}], {}, [{}, {}, {}, {}]}, 0x5c, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00') 18:24:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) lchown(0x0, 0x0, 0x0) getgroups(0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:45 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], &(0x7f0000001840), 0x2) 18:24:45 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7, 0x7f, 0x1, 0x7, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)={r3}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80c00) write$P9_RSETATTR(r5, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r4) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:45 executing program 4: move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001800)=[0x0, 0xfff], &(0x7f0000001840), 0x0) [ 334.165143][T12008] binder: 12007:12008 unknown command 0 [ 334.172239][T12008] binder: 12007:12008 ioctl c0306201 20000280 returned -22 [ 334.217873][T12010] binder: 12007:12010 ioctl c02064b2 20000100 returned -22 [ 334.265181][T12008] binder: BINDER_SET_CONTEXT_MGR already set [ 334.271851][T12008] binder: 12007:12008 ioctl 40046207 0 returned -16 [ 334.302994][T12008] binder: 12007:12008 unknown command 0 18:24:45 executing program 2: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @rand_addr, {[@rr={0x7, 0x23, 0x0, [@dev, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @noop, @generic={0x0, 0x6, "006a61ea"}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x5, "a68378"}, {0x0, 0x8, "5d2f3b575ab2"}]}]}}}}}}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 18:24:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2040, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) close(r1) fcntl$setstatus(r1, 0x4, 0x800) clone(0xa8000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x98, 0x0, 0x0, 0x0, 0x0, 0x198, 0x218, 0x218, 0x198, 0x218, 0x3, 0x0, {[{{@ip={@private=0xa010100, @rand_addr=0x64010102, 0xffffffff, 0x0, 'bridge0\x00', 'batadv0\x00', {}, {0xff}, 0x5c, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x40, 0x1}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) listen(0xffffffffffffffff, 0x0) [ 334.310058][T12008] binder: 12007:12008 ioctl c0306201 20000280 returned -22 [ 334.388660][T12010] binder: BINDER_SET_CONTEXT_MGR already set [ 334.395556][T12010] binder: 12007:12010 ioctl 40046207 0 returned -16 [ 334.406506][T12013] binder: 12007:12013 unknown command 0 [ 334.412418][T12013] binder: 12007:12013 ioctl c0306201 20000280 returned -22 [ 334.440865][T12016] binder: 12007:12016 ioctl c02064b2 20000100 returned -22 [ 334.480150][T12010] binder: BINDER_SET_CONTEXT_MGR already set [ 334.487323][T12010] binder: 12007:12010 ioctl 40046207 0 returned -16 18:24:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, 0x0, 0x4008100) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:24:46 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = openat$btrfs_control(0xffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x10100, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r6, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x0) dup2(r2, r1) r7 = openat$mice(0xffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0xa800) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 18:24:46 executing program 2: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @rand_addr, {[@rr={0x7, 0x23, 0x0, [@dev, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @noop, @generic={0x0, 0x6, "006a61ea"}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x5, "a68378"}, {0x0, 0x8, "5d2f3b575ab2"}]}]}}}}}}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 18:24:46 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r0, 0x402812f6, &(0x7f00000000c0)={0x0, 0xffffffff}) 18:24:46 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x77, 0x10000000, 0x0, 0x1}) ioctl$RTC_WKALM_SET(r1, 0x7001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff}) dup2(r3, r2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfec8) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000000)={@host}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="080027bd7000ffdbdf252000000008000100ff"], 0x3}}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000300), 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 18:24:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:46 executing program 2: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @rand_addr, {[@rr={0x7, 0x23, 0x0, [@dev, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @noop, @generic={0x0, 0x6, "006a61ea"}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x5, "a68378"}, {0x0, 0x8, "5d2f3b575ab2"}]}]}}}}}}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 18:24:46 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 335.643112][T12054] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:24:47 executing program 2: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @rand_addr, {[@rr={0x7, 0x23, 0x0, [@dev, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @noop, @generic={0x0, 0x6, "006a61ea"}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x5, "a68378"}, {0x0, 0x8, "5d2f3b575ab2"}]}]}}}}}}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) [ 335.721493][T12058] binder: 12056:12058 unknown command 0 [ 335.727415][T12058] binder: 12056:12058 ioctl c0306201 20000280 returned -22 18:24:47 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000040)="d353ff072d68b2e4dc14aa5f7e25908384") 18:24:47 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)) r3 = dup2(r1, r0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x5080, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$int_in(r4, 0x73, &(0x7f0000000080)=0xfffffffffffffff7) 18:24:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/254, 0xfe}, {0x0}, {0x0}], 0x3}, 0x42) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000080)=""/178, 0xb2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket(0x2, 0x5, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 336.250184][T12077] binder: 12074:12077 unknown command 0 [ 336.256389][T12077] binder: 12074:12077 ioctl c0306201 20000280 returned -22 18:24:47 executing program 2: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @rand_addr, {[@rr={0x7, 0x23, 0x0, [@dev, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @noop, @generic={0x0, 0x6, "006a61ea"}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x5, "a68378"}, {0x0, 0x8, "5d2f3b575ab2"}]}]}}}}}}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 18:24:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6f) sendmmsg$inet6(r0, &(0x7f000000a240)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) [ 336.319109][T12080] binder: 12074:12080 unknown command 0 [ 336.325751][T12080] binder: 12074:12080 ioctl c0306201 20000280 returned -22 18:24:48 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x4, 0x0, 0x77, 0x10000000, 0x0, 0x1}) ioctl$RTC_WKALM_SET(r0, 0x7001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x6}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfec8) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000000)={@host}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) 18:24:48 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0xfffffffffffffebc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r2}, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB="ee0000003345f20df195aeeb5348351c18485bc2588f6422e1e335d5e35c95e3ddf6fbe26983cee27c0ddb71e9f8832bbce0b662695aa28729c2162e578746a0b4e90bc3b7da9afc4ad231de25c6d851d5a2c93582c050977d14f61f1d0771021e5cc6ad87078d4a820fcfcef7a1453cf8a159528c83cce31ca021f23887ab96ed0e970033416ccf12114ec551b72ff44b4e95780cafc76c8f9383de983f329c8652f6f7387502a6a50d2f99d9730faab3c73b213864c881a64c69780368063f19d9d4956f93620ef8b023044e3af5d3567b384d55abb9d0d6021b33333829c173c2f26c38b7ed65e68b168e5177dc929304"], &(0x7f0000000140)=0xf6) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="15630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:48 executing program 2: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @rand_addr, {[@rr={0x7, 0x23, 0x0, [@dev, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @noop, @generic={0x0, 0x6, "006a61ea"}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x5, "a68378"}, {0x0, 0x8, "5d2f3b575ab2"}]}]}}}}}}}, 0x0) 18:24:48 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0xc91add0bf88807dd, 0x0, 0x0, {0x38}}, 0x14}}, 0x0) [ 336.971853][T12096] binder: BINDER_SET_CONTEXT_MGR already set [ 336.978290][T12096] binder: 12093:12096 ioctl 40046207 0 returned -16 [ 337.038767][T12098] binder: 12093:12098 unknown command 0 [ 337.045433][T12098] binder: 12093:12098 ioctl c0306201 20000280 returned -22 [ 337.135690][T12096] binder: BINDER_SET_CONTEXT_MGR already set [ 337.142324][T12096] binder: 12093:12096 ioctl 40046207 0 returned -16 [ 337.162731][T12098] binder: BINDER_SET_CONTEXT_MGR already set [ 337.170009][T12098] binder: 12093:12098 ioctl 40046207 0 returned -16 18:24:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1}, 0x20002) shutdown(r0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0, 0x0) mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/135) [ 337.179813][T12102] binder: 12093:12102 unknown command 1074029333 [ 337.187039][T12102] binder: 12093:12102 ioctl c0306201 20000280 returned -22 [ 337.214859][T12103] binder: 12093:12103 ioctl c0502100 20000180 returned -22 18:24:48 executing program 2: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @rand_addr, {[@rr={0x7, 0x23, 0x0, [@dev, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @noop, @generic={0x0, 0x6, "006a61ea"}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x5, "a68378"}, {0x0, 0x8, "5d2f3b575ab2"}]}]}}}}}}}, 0x0) 18:24:48 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x3, 'veth1_vlan\x00', {}, 0x40a7}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/264, 0x108}], 0x1}, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/182, 0xb6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r5 = socket(0x2, 0x5, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 337.733589][T12113] binder: 12112:12113 unknown command 0 [ 337.739527][T12113] binder: 12112:12113 ioctl c0306201 20000280 returned -22 18:24:49 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @rand_addr, {[@rr={0x7, 0x23, 0x0, [@dev, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @noop, @generic={0x0, 0x6, "006a61ea"}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x5, "a68378"}, {0x0, 0x8, "5d2f3b575ab2"}]}]}}}}}}}, 0x0) 18:24:49 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) sendto$phonet(r2, &(0x7f00000000c0)="d3d8aec5b36865187dcf54ffa8396ebae6df1b22937f0f595664620ba9d2b02596188320d88775a391ba43617545526ab63bdaf7f268f3793fc35353ef34ff9adb16f6ea82af44b4fa595da4d1edd83d87d2768d4e7e0c25c6ea046b6c633df371a55e5546b4b1676d4873dec6b55c020f19dc7ec993107109d3a5421f047f9cbd5729ab0b97b2301554967ff666b91b17489850a79c05b790a9b8a598bb11205d7a605e136de57379f13c07cc48848c43a9f791d2c998bef46aed3bb335114799ef156e8ab28a0ebeb90753e1a624567782e0f947e2074fd895e37b4e5d59d96fa1aa0ff56b5bda925b348978", 0xed, 0x4008000, &(0x7f00000001c0)={0x23, 0x9, 0x64, 0x3}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000080)={0x10000, 0x4}) 18:24:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 338.288375][T12137] binder: 12134:12137 unknown command 0 [ 338.294497][T12137] binder: 12134:12137 ioctl c0306201 20000280 returned -22 18:24:49 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) [ 338.373092][T12139] binder: 12134:12139 ioctl 40101283 20000080 returned -22 18:24:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xf0, 0x0, 0x1f0, 0xf0, 0x188, 0x240, 0x2a8, 0x2a8, 0x2a8, 0x240, 0x4, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@cluster={{0x30, 'cluster\x00'}}, @common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'virt_wifi0\x00', {}, 'macsec0\x00', {}, 0x0, 0x10}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0x0, @remote}}}}}, 0x0) 18:24:50 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x40000, 0x0) mmap$binder(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x1, 0x11, r3, 0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:50 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 18:24:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:50 executing program 5: [ 338.972059][T12154] binder: 12152:12154 unknown command 0 [ 338.978130][T12154] binder: 12152:12154 ioctl c0306201 20000280 returned -22 [ 339.085782][T12156] binder: 12152:12156 unknown command 0 [ 339.091818][T12156] binder: 12152:12156 ioctl c0306201 20000280 returned -22 18:24:50 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xff6d, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:50 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 18:24:50 executing program 5: 18:24:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 339.666613][T12171] binder: 12168:12171 unknown command 0 [ 339.672869][T12171] binder: 12168:12171 ioctl c0306201 20000200 returned -22 18:24:51 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr, {[@rr={0x7, 0x23, 0x0, [@dev, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @noop, @generic={0x0, 0x6, "006a61ea"}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x5, "a68378"}, {0x0, 0x8, "5d2f3b575ab2"}]}]}}}}}}}, 0x0) [ 339.719832][T12171] binder: 12168:12171 unknown command 0 [ 339.725919][T12171] binder: 12168:12171 ioctl c0306201 20000280 returned -22 18:24:51 executing program 5: [ 339.860482][T12176] binder: 12168:12176 unknown command 0 [ 339.866692][T12176] binder: 12168:12176 ioctl c0306201 20000200 returned -22 [ 339.910571][T12178] binder: 12168:12178 unknown command 0 [ 339.916266][T12178] binder: 12168:12178 ioctl c0306201 20000280 returned -22 18:24:51 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr, {[@rr={0x7, 0x23, 0x0, [@dev, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @noop, @generic={0x0, 0x6, "006a61ea"}]}}}}}}}, 0x0) 18:24:51 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x1, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:51 executing program 5: [ 340.419139][T12186] binder: 12185:12186 unknown command 0 [ 340.425444][T12186] binder: 12185:12186 ioctl c0306201 20000080 returned -22 [ 340.476374][T12188] binder: 12185:12188 unknown command 0 [ 340.482724][T12188] binder: 12185:12188 ioctl c0306201 20000280 returned -22 [ 340.548271][T12188] binder: 12185:12188 unknown command 0 [ 340.554520][T12188] binder: 12185:12188 ioctl c0306201 20000080 returned -22 [ 340.597756][T12193] binder: 12185:12193 unknown command 0 [ 340.603900][T12193] binder: 12185:12193 ioctl c0306201 20000280 returned -22 18:24:52 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr, {[@rr={0x7, 0x23, 0x0, [@dev, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @noop]}}}}}}}, 0x0) 18:24:52 executing program 5: 18:24:52 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000240)=0x7, 0x4) r3 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="6e617400000000000000000000004000000000000000000000000000000000000500"/116], 0x74) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}}, 0x800) r5 = getpid() r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x11, &(0x7f0000000100)={0x34}) r7 = getpgrp(r5) wait4(r7, &(0x7f00000001c0), 0x1, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r8 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 341.266742][T12204] binder: 12201:12204 unknown command 0 [ 341.272995][T12204] binder: 12201:12204 ioctl c0306201 20000280 returned -22 18:24:52 executing program 5: 18:24:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:52 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr, {[@rr={0x7, 0x23, 0x0, [@dev, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}]}}}}}}}, 0x0) 18:24:53 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:53 executing program 5: [ 341.777445][T12216] binder: 12214:12216 unknown command 0 [ 341.783750][T12216] binder: 12214:12216 ioctl c0306201 20000080 returned -22 18:24:53 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r1, r3, r5) r6 = getpid() r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x11, &(0x7f0000000100)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r9) r10 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r13 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r10, r12, r14) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c80)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)="14363d24598bc685d3b031f5580b2ac52e2ff9f6e2cb5f582d7947c60695787bdbac780f2ae5615c105d3f06499822b3ff876929153b6580391924dc282f19a75d7c780acb463013412c6eec4a799001b81420d1c138be88a5b47cafdb5f6ba2051a17d0c2c598be61d93787af437ed54ddea4473ea37ebc3b30e63eea989d8ceb904e2f27040f1d7b06228fb02d18709911648fbc3fcb694c49d078dbcfd788626691193189b143031bfd476f572591d8fb6779bd86", 0xb6}, {&(0x7f0000000300)="3ceef6f74f0926a8615558c43708ac9c8f8dd216d74d429628eb28fa76931c910cb7bcd0b9f6822ee5798ef6e38af40043f18b214332472c8c6aeaa2c26a91ea47238fdb1c21b18c28be482ce56f7333e75760c06764271ea5cdc0fe416d4c271e6eb97fa0820bb025548f4e088fa5272e1c127c394a77fb3a67211615706388ce7964b60fd1fe5d9d4545e8fd3cd8f927c4f5c9523e58b969babc51de", 0x9d}, {&(0x7f00000003c0)="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", 0xfa}], 0x3, &(0x7f00000009c0)=[@cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x18}}], 0x108, 0x800}, {&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="96997dc597ce8d5ac80c70b01aa81de6", 0x10}, {&(0x7f0000001bc0)="8246ffb5f5113eeecd61369c581da9063920ac5b42ed34099429a8d836577ec6d0214c726614f8a2409851a1361202dc1725e7e5b570cfc320c288ad6ef88655eaab1c36cb732662b213cbef2893a97570676d20110a1758448cb1e07a00d5e1baa43787634a8557e4d762642067c73c4e1c54dfb0a97340e72380ed910772a183ababacacd851614e499241131e80f190c8d1cc5a53735374916fd3ab83da6d2e096bc1cd8fc8b3b365ee6d0d2b4e5c299ad89a7b1d4b4bbe3f845c8aca2d79283f", 0xc2}, {&(0x7f0000001cc0)="6dcb550be76f6bcda95adfeaba0a65041b7cddc2d3cd26de754765ddb82d0693bfab75c550feb4060b6fe7422f508b8b3ea6d6596b81991a2303c5ebaef8412dff0e21eb45682efbf99166affb982d7a70f541bb5821a36fb2b7de6b785f0f51da570e5a178f139335a09c4a58f2a2b69925dd633c8016462c5f63567885580516474362a6994b9ad67c89431453aeb16f6f81725ac503a7a904df6cb61eabd91bac3f2694d2c0a97ad238e68c06877448597a1c7a6fdcfcecd5974cc5e65050397768136a43815a5cba2922e6ae9a67", 0xd0}, {&(0x7f0000001dc0)="207b5f9799dbd24df9f14eb51f033d313c0203ab355fd3b7f5d8c2b0f13f5a2d9f14b0fd9af20ad7d70b077989b87bbd8295972e22e1ae26e0bab928752aa49ce53f576990762b221c6ae5060fc307437700a9433401982473cd9969ead4395eec0016f16a8363ad501095ea5bfa1a1a69242f440c2adba7c069ef94985c08eed4aa4383bab4d7ed1c6e944db3addf9c03722b7e6df7504e0242ed4fe36122629173e26b5679ea8e36168925133a2bdab6f76e91acdfa925fb2505e0211287f85e0bc47feae899fed042ca48bfef5e3ce2a9f71d2150af3dff181261980e244069ce6c08172841a25a33fe6c9b6c", 0xee}], 0x5, &(0x7f0000002240)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18}}], 0xc0, 0x80}, {&(0x7f0000002300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002380)="bc453d75763428bf9326030e204b2d67c2087cad43433fdcfe16fc3536ea1752dd018eb087943dfa150bd0639fe8086efa705411cbb1d6d62c575b804d5e5dc324e838c899202802e09d8cd0970aafb7140c387e1662d2362b2af3dd75037d84b384d4fe837d254e9d45f1f9a62d4474282d945a389a8ae8c5096e6e3bf4c4cf7bf7693cb0b22c34c27502738a9e880eb91c8fc1dec4f7df7f999e57f66a1a465b71b9d4a477a55790e581cced58bb19a7d2b88a52", 0xb5}, {&(0x7f0000002440)="40c3a76818bfa548c28476ab", 0xc}, {&(0x7f0000002480)="03f86fcb47ec2c8346b76f295416cde30aa5ee32ef0a527813670f825205ae5b049732c8004bca1b747d2879ee64f83d0487343d5aa71251c3241dd2dad934b6f28994b39ab68dcc54f60f80c5c7fd751bfee74f0963ab1898a9faba832d7b1feb8eb70c0326f16750983d8f82770a04c70c55447465c7122e9db040e45654efbc1333fd5be3c1b9b064528bbb912777cb6478fcff5a", 0x96}, {&(0x7f0000002540)="95fba89f4adfd6fc2659c847130307ee22907ec119eb5bc7a6a150457c8f1cfb8c470676af3de89e42da5215d11511911cbe01682cc494e5ffbc3fc15ad31d7090c4a9b6ce396ce7614361ccbb6c7cc53c8f15a737c9ef4905150579a7b686d08618193db444a41e826453eca7e9f0929a07ef7365c6058adb4614b02fdaae0f7f975d2af9ca3f6790f2eb7880df7cfc596d3e77c58932a05349c677c07b13fb503fae27a97a233c303615e46d8d8b89a6e6c77111f4169cdf0373e58da7240676559c8190274c0e25a395b3581786924095945585e1cfb6689329d87d0b9a76cf429b7bdd24112791e778ae29fb1a08e4663c", 0xf3}, {&(0x7f0000002640)="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", 0xfc}], 0x5, &(0x7f00000028c0)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0xc0, 0x4045}, {&(0x7f0000002980)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002a00)="2be658c2f15dfec749eddc5e89cfdbcbb653ca8de11a44640140ad1f4115a6174e522cb773be65c15826fa0c2d5be5a98eff00d47c16dc71ff7a428b71adf83057b326aef668430419ed6a1225d489a9b91a13fa731a797b19c0e2424ffc304305", 0x61}, {&(0x7f0000002a80)="9b7bd40c07221d28e31387f3c0a6c55a78ea781aa3e9d560dc11d476dea241d358c7ce6a73bc5aa93c080d771162e070eb56df9fbc0837b88312e44805e91d2ba3cb14dfcb1ea787d413d320f4e35be60d027f0bceb837a31e118f352fca282c3f", 0x61}, {&(0x7f0000002b00)="717864a702bb234e823ed5601aa7924816102308ee932e9fece7bed204600af3a57f272f901928d1e566914a2ad42d558708b1e8dabffbd9e4314c02aefbeb1f200a3334d1500ae9665fa3fcba1694b8965a8c167ce8f455767b3cd8758f3b16eef914311330515a15eceb550377280dacd3362b86c04c709cf7553292c932758da8401952d9472a3df4f6b9222649130a73eeadaafb05", 0x97}, {&(0x7f0000002bc0)}], 0x4, &(0x7f0000002c40)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, r5}}}, @cred={{0x18, 0x1, 0x2, {r6, r9, r14}}}], 0x30, 0x20000000}], 0x4, 0x1) 18:24:53 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000380)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0) 18:24:53 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x20010, r2, 0xf000) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f00000000c0)={0x0, "99df19324b6d745308f76cffc20dd51d1ed374f7eb966882d7cf1c2623a3fe1d", 0x4, 0x3abf, 0xaa27, 0x18, 0x5}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05530d40"], 0x0, 0x0, 0x0}) 18:24:53 executing program 5: 18:24:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 342.520964][T12230] binder: 12226:12230 unknown command 1074615045 [ 342.527562][T12230] binder: 12226:12230 ioctl c0306201 20000280 returned -22 18:24:54 executing program 5: 18:24:54 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x561403, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f00000000c0)={0x18, 0x3, 0xfffffffffffeffff, 0x80000000}) 18:24:54 executing program 2: [ 343.385193][T12243] binder: 12239:12243 unknown command 0 [ 343.392055][T12243] binder: 12239:12243 ioctl c0306201 20000280 returned -22 [ 343.487233][T12244] binder: 12239:12244 unknown command 0 [ 343.493259][T12244] binder: 12239:12244 ioctl c0306201 20000280 returned -22 18:24:55 executing program 5: 18:24:55 executing program 2: 18:24:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:55 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) r5 = openat$btrfs_control(0xffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x240082, 0x0) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000440000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x85e, 0x541800) 18:24:55 executing program 5: 18:24:55 executing program 2: [ 344.236747][T12253] binder: BINDER_SET_CONTEXT_MGR already set [ 344.243195][T12253] binder: 12250:12253 ioctl 40046207 0 returned -16 [ 344.271521][T12253] binder: 12250:12253 unknown command 0 [ 344.277366][T12253] binder: 12250:12253 ioctl c0306201 20000200 returned -22 [ 344.332666][T12259] binder: BINDER_SET_CONTEXT_MGR already set [ 344.338893][T12259] binder: 12250:12259 ioctl 40046207 0 returned -16 [ 344.395092][T12261] binder: 12250:12261 unknown command 67108869 [ 344.402140][T12261] binder: 12250:12261 ioctl c0306201 20000280 returned -22 [ 344.430166][T12253] binder: 12250:12253 ioctl 4c06 8 returned -22 [ 344.476486][T12259] binder: 12250:12259 unknown command 0 [ 344.482505][T12259] binder: 12250:12259 ioctl c0306201 20000280 returned -22 [ 344.534639][T12253] binder: BINDER_SET_CONTEXT_MGR already set [ 344.540950][T12253] binder: 12250:12253 ioctl 40046207 0 returned -16 [ 344.558944][T12261] binder: 12250:12261 unknown command 67108869 [ 344.559015][T12259] binder: BINDER_SET_CONTEXT_MGR already set [ 344.566246][T12261] binder: 12250:12261 ioctl c0306201 20000280 returned -22 [ 344.571990][T12259] binder: 12250:12259 ioctl 40046207 0 returned -16 18:24:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:56 executing program 3: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_MARK_MASK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x6a6d, 0x8000, 0xff, 0xa2, 0x8, 0x0, 0x6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 344.623261][T12267] binder: 12250:12267 ioctl 4c06 8 returned -22 18:24:56 executing program 5: 18:24:56 executing program 2: 18:24:56 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 344.987610][T12273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12273 comm=syz-executor.3 18:24:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 345.097545][T12276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12276 comm=syz-executor.3 18:24:56 executing program 5: [ 345.293570][T12282] binder: 12281:12282 unknown command 808482864 [ 345.300109][T12282] binder: 12281:12282 ioctl c0306201 20000200 returned -22 18:24:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) fcntl$setlease(r3, 0x400, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x74) 18:24:56 executing program 2: [ 345.369674][T12284] binder: 12281:12284 unknown command 0 [ 345.375604][T12284] binder: 12281:12284 ioctl c0306201 20000280 returned -22 18:24:56 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r2, 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x5, 0x402) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={r6, 0x4, "b9ed820c"}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000400)={0x8, 0x4235, 0x208, 0x5, 0x4, 0x1000, 0x9, 0x8001, r7}, &(0x7f0000000440)=0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000800000076008125000000003d00000000000003950000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x74) [ 345.444394][T12284] binder: 12281:12284 unknown command 808482864 [ 345.451028][T12284] binder: 12281:12284 ioctl c0306201 20000200 returned -22 [ 345.496135][T12290] binder: 12281:12290 unknown command 0 [ 345.502025][T12290] binder: 12281:12290 ioctl c0306201 20000280 returned -22 18:24:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:57 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000080)={0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04a26400"], 0x0, 0x0, 0x0}) r5 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:57 executing program 5: [ 345.831358][T12300] binder: 12297:12300 unknown command 0 [ 345.837260][T12300] binder: 12297:12300 ioctl c0306201 20000280 returned -22 18:24:57 executing program 2: [ 345.889804][T12302] binder_alloc: 12297: binder_alloc_buf, no vma 18:24:57 executing program 0: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x3f, 0x0, 0x6, 0x7fff, 0x5, 0x6, 0x8001, r4}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={r5, 0xd1, "ccd6eb857e6da1faaa9c79241f9745d6d2e5262017f2af355dbc47b02ae3e0258652e204af741aa0693e6bae1a868745678a89d219f1da71caaef8994117e4ff87e6ac982166b544723db11f153148f0e993a135ade254bdeee33e390cc766eb1fead947555928225a8455a94048ce4da60872494cf0499199601682c16fdac11ca0efadf8e39f9790315280b4a2d929a59fd14a07970381626f77030547e1e49d3606d11578df7a19445c90fd5065ba74ee5e53c98de06afc3352d2cc72b5b9b112eefa1914fc0e76d16e183c85f6577b"}, &(0x7f0000000100)=0xd9) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 345.968265][T12300] binder: 12297:12300 unknown command 114 [ 345.974452][T12300] binder: 12297:12300 ioctl c0306201 20000280 returned -22 18:24:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0xb, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 346.198687][T12313] binder: BINDER_SET_CONTEXT_MGR already set [ 346.205317][T12313] binder: 12307:12313 ioctl 40046207 0 returned -16 [ 346.256071][T12315] binder: 12307:12315 unknown command 6595076 [ 346.262670][T12315] binder: 12307:12315 ioctl c0306201 20000200 returned -22 18:24:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 346.302376][T12313] binder: 12307:12313 unknown command 0 [ 346.308118][T12313] binder: 12307:12313 ioctl c0306201 20000280 returned -22 18:24:57 executing program 5: 18:24:57 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="085e69d5ec2bd8a593a3fc42842e2b35"], 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9d2c, 0x101000) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:58 executing program 2: 18:24:58 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x20, 0x6004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x1, 0x1, {0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}}, 0x32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x100, 0x0, 0x0, {0xa, 0x0, 0x8, 0xff}, [@IFA_CACHEINFO={0x14, 0x6, {0x7245, 0x5, 0x3e, 0x2c9a}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85002876f4843270d64f0000000000002700000f000001000000000000000000a919faac023672f0315159790f4e02b2b2bb08ccbe7082664d00f97202ae5508c98bf35cafc18eb39650bd2b9af9a5bf275cad6ae7a458dcc2ce4d4445b975487abab6a3f0d4e5f3a563789f35bee0a27e59f0e38e1662680d6e2e91b87f9fcc53979099d1312a235b5562cc9c86fa20324441566108d1c4a11b3050ec2a29984829bbb11f532897e3e414f79cf5d2ace6ae8bb92751236782455c3e", @ANYRESHEX=r2, @ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) write$6lowpan_control(r5, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) [ 346.872340][T12333] binder: 12330:12333 unknown command -714514936 [ 346.879011][T12333] binder: 12330:12333 ioctl c0306201 20000200 returned -22 18:24:58 executing program 5: [ 346.927223][T12335] binder: 12330:12335 unknown command 0 [ 346.934826][T12335] binder: 12330:12335 ioctl c0306201 20000280 returned -22 18:24:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 347.002682][T12335] binder: 12330:12335 unknown command -714514936 [ 347.009384][T12335] binder: 12330:12335 ioctl c0306201 20000200 returned -22 [ 347.049777][T12337] binder: 12334:12337 unknown command 0 [ 347.055747][T12337] binder: 12334:12337 ioctl c0306201 20000280 returned -22 18:24:58 executing program 2: [ 347.108542][T12339] binder_alloc: 12334: binder_alloc_buf, no vma [ 347.146108][T12337] binder: 12334:12337 unknown command 1629516899 [ 347.152927][T12337] binder: 12334:12337 ioctl c0306201 20000280 returned -22 18:24:58 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) connect$ax25(r3, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x48) 18:24:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000100)={{0x4b, 0x3}, 0x0, 0x78, 0x9, {0x3, 0x45}, 0x20, 0xa}) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20, 0x0) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f00000000c0)=@rose) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:24:58 executing program 5: 18:24:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:59 executing program 2: [ 347.679777][T12351] binder: 12348:12351 unknown command 0 [ 347.685800][T12351] binder: 12348:12351 ioctl c0306201 20000280 returned -22 [ 347.727950][T12352] binder: 12350:12352 unknown command 0 [ 347.733896][T12352] binder: 12350:12352 ioctl c0306201 20000280 returned -22 [ 347.737235][T12354] binder_alloc: 12348: binder_alloc_buf, no vma [ 347.773451][T12354] binder: 12348:12354 ioctl c058534f 20000100 returned -22 [ 347.829480][T12355] binder: 12350:12355 unknown command 0 [ 347.835429][T12355] binder: 12350:12355 ioctl c0306201 20000280 returned -22 18:24:59 executing program 5: [ 347.984843][T12354] binder: 12348:12354 unknown command 114 [ 347.990934][T12354] binder: 12348:12354 ioctl c0306201 20000280 returned -22 [ 348.008420][T12351] binder: BINDER_SET_CONTEXT_MGR already set [ 348.014850][T12351] binder: 12348:12351 ioctl 40046207 0 returned -16 [ 348.037524][T12361] binder: 12348:12361 ioctl c058534f 20000100 returned -22 18:24:59 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046381409227c5e270f948a4da9b17be2c0c1a452665fb3aa06f246895794697ef2481044a2f0e53e4582da678564b317371d5f1c99d4ff967957c551dcd3a13ee7e01f9199673a713c43619183dd4e83955d6ecc61b7db12a9975112212f91f261bb4173085008ee3b395277492904916cac76659cd77c4f874a25af31f382b6f51c65aca87f0578e2be046b331f1bce0fea5bcf1eb8601ec0b444fe552ab660972ecce83a4"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:24:59 executing program 2: 18:24:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:24:59 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x38001) ioctl$TCFLSH(r0, 0x540b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x0, 0xff}, [@call={0x27, 0x0, 0x0, 0x3200000}]}, &(0x7f0000000040)='syzkaller\x00', 0x804, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x83d16c35bcef1f24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 18:24:59 executing program 5: [ 348.439637][T12370] binder: 12369:12370 unknown command 1082221316 [ 348.446693][T12370] binder: 12369:12370 ioctl c0306201 20000200 returned -22 [ 348.498395][T12372] binder: 12369:12372 unknown command 0 [ 348.504359][T12372] binder: 12369:12372 ioctl c0306201 20000280 returned -22 [ 348.591958][T12372] binder: 12369:12372 unknown command 1082221316 [ 348.598607][T12372] binder: 12369:12372 ioctl c0306201 20000200 returned -22 [ 348.649423][T12377] binder: 12369:12377 unknown command 0 [ 348.655405][T12377] binder: 12369:12377 ioctl c0306201 20000280 returned -22 18:25:00 executing program 2: 18:25:00 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000e80a00000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:25:00 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="23610440"], 0x0, 0x0, 0x0}) 18:25:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:00 executing program 5: 18:25:00 executing program 2: [ 349.357890][T12389] binder: 12388:12389 unknown command 1074028835 [ 349.364650][T12389] binder: 12388:12389 ioctl c0306201 20000280 returned -22 18:25:00 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x0, 0x1}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 349.438782][T12392] binder: 12388:12392 unknown command 1074028835 [ 349.445543][T12392] binder: 12388:12392 ioctl c0306201 20000280 returned -22 18:25:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:01 executing program 5: 18:25:01 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0xffff, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f00000000c0)=0x1) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000240)=0x20000000) r4 = socket(0x10, 0x100000000000802, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000140)={{0x2, @addr=0xfffffffb}, 0x8, 0x7, 0x1}) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000100d8f80cb83fe895a01f5ded09c56fe0", @ANYRES16=r0, @ANYBLOB="000327bd7000fddbdf250200000005003d0080000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r3, r1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:01 executing program 2: 18:25:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000000)=""/66) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$KDSKBLED(r5, 0x4b65, 0x2) [ 350.018962][T12409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63704 sclass=netlink_route_socket pid=12409 comm=syz-executor.1 18:25:01 executing program 5: [ 350.126108][T12414] binder: 12405:12414 ioctl 89e1 200000c0 returned -22 [ 350.153599][T12412] binder: 12405:12412 ioctl 40046602 20000240 returned -22 [ 350.165841][T12412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63704 sclass=netlink_route_socket pid=12412 comm=syz-executor.1 18:25:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:01 executing program 2: [ 350.215143][T12416] binder: 12413:12416 unknown command 0 [ 350.221264][T12416] binder: 12413:12416 ioctl c0306201 20000280 returned -22 [ 350.250805][T12416] binder_alloc: 12413: binder_alloc_buf, no vma [ 350.305377][T12417] binder: 12413:12417 ioctl 80045530 20000000 returned -22 [ 350.343353][T12416] binder: BINDER_SET_CONTEXT_MGR already set [ 350.349602][T12416] binder: 12413:12416 ioctl 40046207 0 returned -16 [ 350.404152][T12417] binder: 12413:12417 unknown command 0 [ 350.407198][T12416] binder: BINDER_SET_CONTEXT_MGR already set [ 350.409983][T12417] binder: 12413:12417 ioctl c0306201 20000280 returned -22 [ 350.423665][T12416] binder: 12413:12416 ioctl 40046207 0 returned -16 [ 350.437840][T12419] binder: 12413:12419 ioctl 80045530 20000000 returned -22 18:25:01 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x9, 0x4) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 350.484590][T12417] binder: 12413:12417 unknown command 0 [ 350.490595][T12417] binder: 12413:12417 ioctl c0306201 20000280 returned -22 18:25:02 executing program 5: 18:25:02 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000160001000000000000000100ffff0000", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000000000000000000000000aa14000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x11, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) connect$inet(r4, &(0x7f00000004c0)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x200, 0x0, 0x0, {0xa, 0x0, 0x24}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x75, 0x3, 0x20, 0x7f}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000480)={0x0, 'veth0_to_batadv\x00', {0x3}, 0x8001}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x9, 0x8000, 0x75, 0xc65}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xf) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xba, &(0x7f0000000240)="677e96ab5096a13dba14e54886797af4ffe007a79588990e2908a54e2847660ffff988d5126be0c76d9b54f854ca6d53fb9b545c7018691e9d154b938fe2d170b504e28003b39dc7225799ed182fe0b410b955e820d0f53311c43ea52ce249919d8cf9b01c3f08fbab9d494a245233e450b952756e893f86946c18983f46600f8a480a6ca7d3d981bf6d9d6f2a76050313032a489f41d74f875ed1baa807877f79a51bdecc4ca680d4f7742de85da8dfe81972a1c70ca34ef028", 0xbf, 0x0, &(0x7f0000000300)="fb8dd2ecdf21aa4ea5e7652cd2efa77d1dc1fb32c1ceeaf6c855feededaef615cbf8a7fe594a1526b4dc5bc9f75b0bee1459541168ca75de3704092e0bdf4fd7ffaa8b794b8881cb26f97c003a6f844cffb241c09d77d08ab8d942d024131ca4ea1732549102fe56977620ca2a35439f74a868fa18d27d29054e0b10fb12151bd4e64da5da4bf9a244fb60df7ab723e0558dfca65ba1858c0e1e0f9a8491d6850c068351a43fc2872415412932fd0bb82c0c42ac26d966387b7bbdd04e19ca"}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$FIOCLEX(r6, 0x5451) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x1, 0x9, 0x6, r1}) 18:25:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 350.814418][T12429] binder: 12428:12429 unknown command 0 [ 350.820678][T12429] binder: 12428:12429 ioctl c0306201 20000280 returned -22 18:25:02 executing program 2: 18:25:02 executing program 5: 18:25:02 executing program 2: 18:25:02 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x80000001}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r5}, 0x8) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f00000000c0)) r6 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05c5875704934c3a6f8c7bdf173aef386ee4ab497f204b0586f33b30528c0a45e035cc0658a6fe227d7d3e6fcfde1caa05a40bce758704ff689590b0ccf072d151643421e7407491047e723252ab9e438394ee1594a125f18f3366bcf43d2237f1d3794ad8e732131ba4e295d63fea6064618d8320ef406bc3f9ff857bab1e0422f7fea3c9c3ab30e54ea84be940a7001101dac0fe45b0aa9ab0355f99bb5d93225a"], 0x0, 0x0, 0x0}) 18:25:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 351.543522][T12448] binder: BINDER_SET_CONTEXT_MGR already set [ 351.549787][T12448] binder: 12447:12448 ioctl 40046207 0 returned -16 18:25:03 executing program 5: [ 351.610579][T12450] binder: 12447:12450 unknown command 1468515589 [ 351.617359][T12450] binder: 12447:12450 ioctl c0306201 20000280 returned -22 18:25:03 executing program 0: r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes256, 0x31a53305a0cde3ec, "f5b4f726507a73c7"}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000100)=0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x1, 0x2) [ 351.705646][T12448] binder: BINDER_SET_CONTEXT_MGR already set [ 351.712040][T12448] binder: 12447:12448 ioctl 40046207 0 returned -16 [ 351.735505][T12450] binder: BINDER_SET_CONTEXT_MGR already set [ 351.742408][T12450] binder: 12447:12450 ioctl 40046207 0 returned -16 [ 351.754670][T12454] binder: 12447:12454 unknown command 0 [ 351.760532][T12454] binder: 12447:12454 ioctl c0306201 20000280 returned -22 [ 351.779447][T12448] binder: 12447:12448 ioctl 80045438 200000c0 returned -22 18:25:03 executing program 2: 18:25:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:25:03 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) splice(r3, &(0x7f0000000080)=0x1000, r4, &(0x7f00000000c0)=0xffff, 0x6, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:03 executing program 5: 18:25:03 executing program 0: r0 = openat$sequencer(0xffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', '\'keyring,[&+]proc@^*\x00'}, &(0x7f0000000100)=""/36, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, [@generic={0x0, 0x9, 0x8, 0x86fb, 0x4}, @call={0x85, 0x0, 0x0, 0x35}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x100}, @map_val={0x18, 0xc, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xa1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xa6, &(0x7f0000000240)=""/166, 0x41100, 0x0, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x74) 18:25:03 executing program 2: [ 352.397236][T12466] binder: 12463:12466 unknown command 0 [ 352.403253][T12466] binder: 12463:12466 ioctl c0306201 20000280 returned -22 18:25:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:25:04 executing program 5: 18:25:04 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0463044010ca79015cfd006da9dad2a031c9c7281177f20f"], 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x28, r4, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000018}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf81}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x400}, 0x44818) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$RTC_WIE_ON(r6, 0x700f) r7 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:04 executing program 2: 18:25:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x4d8d2a5458c0b6d7) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="046302004e503d6c38000000000000000000000077db88f15a548d19cd6537abea5ab73fbf642adc7dbc"], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) getpeername(r2, &(0x7f00000000c0)=@ll, &(0x7f0000000140)=0x80) r3 = dup2(r1, r0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000240)="18c41f6a8a8765a553918556d913ebe7a0fac5cbbdf6d8d6f1b3f8662ab588fab6416ad7b88aa56cc40221479d5c6df8279cc4bc53e7018eda", 0x39}, {&(0x7f00000002c0)="f293a78eaa46a1f704d4e9394c8a14ddb1ec0a8aa8dc8dc189db47535d3265ba4143393a5376dc289156c8242e296a842deb82c8d3fd75db9954668e3f7a2c2e", 0x40}, {&(0x7f0000000400)="73a81638c4fa3470c7161d87f5a984488484a6fbeb10914555f2dac542b6e5438d79cbfbebfd88eaaf597a424a3b1901bdf8c947fb4fb5b727133204eff49dc6069d95ebc639746aa49cc8e7837d2a2488aabee97d830f05ffb556b5597e78432006e730fccfb26a2ffbf5932fc81e6061d697bcd638a18cf4db54a48f39503da12608af8d55", 0x86}, {&(0x7f0000000580)="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", 0xfa}], 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b6300440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000080)={0x3f, 0x7, 0x9}) recvmmsg(r3, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000740)=""/115, 0x73}, {&(0x7f00000007c0)=""/10, 0xa}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000008c0)=""/221, 0xdd}, {&(0x7f00000009c0)=""/82, 0x52}], 0x6, &(0x7f0000000a80)=""/226, 0xe2}, 0xa8}], 0x1, 0x2000, &(0x7f0000000bc0)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000808000000000000001a2115a12373f4"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 353.067087][T12484] binder: 12479:12484 unknown command 0 [ 353.073430][T12484] binder: 12479:12484 ioctl c0306201 20000280 returned -22 18:25:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:04 executing program 5: [ 353.232968][T12491] binder: 12486:12491 unknown command 156420 [ 353.239174][T12491] binder: 12486:12491 ioctl c0306201 20000200 returned -22 18:25:04 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x20002, 0x0) getpeername$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x20) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) 18:25:04 executing program 2: 18:25:04 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030b0000000000000000070000000c000280804ae1f5fd0a1c5ee9f74b8cff020000000000"], 0x20}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x40c, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x251a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa985}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6fe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @local, 0x9af1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff001}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4dbb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7707}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, [], 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @mcast1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd1b}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x88894}, 0x0) 18:25:05 executing program 5: 18:25:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 353.836622][T12504] binder: 12503:12504 unknown command 13 [ 353.842713][T12504] binder: 12503:12504 ioctl c0306201 20000080 returned -22 [ 353.874916][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 18:25:05 executing program 2: [ 353.934014][T12510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=12510 comm=syz-executor.0 18:25:05 executing program 5: 18:25:05 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r2, r4, r6) r7 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r7, r9, r11) keyctl$instantiate_iov(0x14, r2, &(0x7f0000001640)=[{&(0x7f0000000080)="c6d3b7c63a44477a2505b777f4cbd8535cd49643ace17c3bd83b38a6bf24d5e85b83b19b81bd7beecdbfcc7aca53b9a0aa64ecad501c00668a2233fe4624117f8a65db96f471e158e3ee911e0fdf177ef020cdeca492ca4a429d92863e7ee5d5320c5fdd2e4c8ae72180ba5db6353f5f45632df3f11ab2724f205b80", 0x7c}, {&(0x7f0000000100)="57a54679b1", 0x5}, {&(0x7f00000002c0)="26effc4475412a4bf81668dc48dab3e1945cdf68ff329ecc2b695a0bdbcacd4cca05ab7d6d69dfe495be27dc3adb3008062152262bd1749f6eb5954ea2647e01751caca6146be93f7f52be3d5e5dde44c3d4caf7b5f672f5a49ee203e6c6332962235c4bcc0d12964c5abc311f52b143b290b531009bb50c5e55cbbf83b03f7d14204de11c04331c41fdec68baf39cbb6cd477ad8946e8e13d903f5e8b894985c6b613f3527e488549795f5aff05b4c5d269194104a425753b5b8a56b9d1587cc5ca451e7293a9b7bc988fb82fd23e93d42ba4171ba9a66f0188cde6bb658d3ede78b8da7aed013d299819b6967ab69cda", 0xf1}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000140)="0d929db71d8419cd2cd08af320a17ba2c01ab4f5462c11b7b52cc14553063a61dbc06f0390205f1534580d7eb61db5f7cf835f2b9a5eb8ef0f014b63da0e7d551a2dbb002310deb2683521f8abe79bc430e70cbb41755461111cbf6cd39e39e8d52fdafac899ef63122ac6c7068bf212e70792db0c4468101f9f7ed7433e776cc6baa1b2a6b7729eaa038cb5", 0x8c}, {&(0x7f00000013c0)="515f9adee1072bb10f55c457cea155328cc42f2f505665ec91dd1aa5baac2b21d92fe185127bfc31df88406af4ef28affb78c2c9c6290abd412e882c2a36e6d83575cea9e5d9af1433154492764d47707c9296870fd96505c0609af379330b5b6915f90bd54626462ec138059fd863464aef40a3306f7570b7df710ee01b64a97ca936cbc77c28b801814d31faf602404a0e419bc3f29c46d7e27b5c011d6e3b0e4a0b4f34bbf67bb2209776d81989934beda032dea4d473bbdd1150faea1f36adfbca4b9bf88ee161", 0xc9}, {&(0x7f0000000240)}, {&(0x7f00000014c0)="fd6288dd3f84f543ef521544c02c770033d787e1bdbb5333d906f0a8a47acb8ebc325293c49763d702608e9903829cef1d657f8ec686223b019c99c88139029152717f30d51e41f62b331fa5ef04f2c165a1b0856be9d093381ec09dec590d43d3f14c6d6c0aa5dae0b63238c36fe812247a95f8292e8a43094fe152ee93e8ae97e73d6a223ae9a73c784beb6a9d9a555a82308da48413beb18295a9b085fa840009a263ab9d717c694d80bb54d080c26063edc0783e5c6074461e0c02653d2d89fc2511d0c51733eb4f546a032625b08d7c", 0xd2}, {&(0x7f00000015c0)="bd82769b988fc48a1ef54995518d8fc89bb9e81c247e09ef3eb39b33372e3262bca7691d6f5a6db4fa7f15ac433f9982681f125b0d32b8c6c8d86374be7d3dd286b006fba47fd78a1433b1610f97f6e44ddcb2490e5efe265b9780858cb5b1bf5f", 0x61}], 0x9, r7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r12 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 354.187823][T12507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=12507 comm=syz-executor.0 18:25:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:05 executing program 2: 18:25:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0xb5, 0x8, 0x10001, 0x5, 0x5}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c090}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000000)={0x4, 0x1, @raw_data=[0x1, 0xfff, 0xffffa0b9, 0x12c, 0x5, 0x8, 0x55, 0x1, 0x9, 0x2, 0x9, 0x1, 0xffffff01, 0x10000, 0x1000, 0x6]}) [ 354.528238][T12521] binder: 12518:12521 unknown command 0 [ 354.534120][T12521] binder: 12518:12521 ioctl c0306201 20000280 returned -22 18:25:06 executing program 5: 18:25:06 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) fallocate(r0, 0x1, 0x1, 0x7f) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:06 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 354.816677][T12531] binder: 12529:12531 ioctl 801c581f 20000100 returned -22 [ 354.875020][T12531] binder: 12529:12531 unknown command 1717991472 [ 354.882050][T12531] binder: 12529:12531 ioctl c0306201 20000280 returned -22 18:25:06 executing program 2: [ 354.927787][T12533] binder: 12529:12533 ioctl c0485660 20000000 returned -22 [ 354.992039][T12531] binder: BINDER_SET_CONTEXT_MGR already set [ 354.998270][T12531] binder: 12529:12531 ioctl 40046207 0 returned -16 [ 355.151183][T12540] binder: 12536:12540 unknown command 0 [ 355.157022][T12540] binder: 12536:12540 ioctl c0306201 20000280 returned -22 18:25:06 executing program 5: 18:25:06 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x68, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x1, 0x100]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x200, 0x391]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r1, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:25:06 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_RUN(r0, 0xae80, 0x0) 18:25:06 executing program 2: 18:25:06 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) 18:25:07 executing program 5: 18:25:07 executing program 3: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') fcntl$setlease(r0, 0x400, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x18a3a7452d549332, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r3, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x5, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@generic={0x1f, 0x6, 0xb, 0x1, 0xffffff83}, @jmp={0x5, 0x0, 0x5, 0x3, 0x8, 0x1, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0xb, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x74) 18:25:07 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@dev, @in6=@ipv4={[], [], @empty}}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xffffffffffffff50) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)="9756e1467097dad5dadc0af427f46843aaabb9e6517c8d0210e7fc222a2beebc2eadc46431a2e329b41ca328d475a85b5f78d15e032a4731071d07be19a1deb84e1432fcede42901df126d6adfb220136f069c820185888d3ef121cabcebced0e58b24bf295b22cfeac7c63c72981ded853414e36cd8601140597eb3e7e6b310e118d081066386800e86840f9c3267d78ff81137e79a3d38a042a288a2f4b9c1c04d9c6723e42101160b4d489c1b04650d5512df0c751ba89dbabb02144af6ca7144c61cae98df31430c8fbc7772695cd561af05adfc07c4d7264d1b620482a845f6746adc82", 0xe6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x8) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="04630440c93a42650833902223d380dca4989685b147ca690aa4e8b1370767317ea863795965f2cb532961559277b1de1c2d1752e6698e6369913795be30d72e7718c3879bf05e1533d60dce7f092507ea565b62643ed43c6a7cfa02ae974731c09b6b7756697c1e14357f304b06321bc41b0709"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x38, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="086310400000000000002200000000000000000005bc6304400300000009631040fdffffffffffffff000000000000000006630440020000"], 0x0, 0x2, 0x0}) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000240)) 18:25:07 executing program 2: 18:25:07 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_RUN(r0, 0xae80, 0x0) 18:25:07 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) rt_sigaction(0x30, &(0x7f0000000100)={&(0x7f0000000080)="8fc8289512c2f3f3c1ab000000000c660f70624a08660f38026765a6c4c3716bf7fcc4c17950d7c4e1a5e2b8712f2a0c0fdbc2c4e3b96c9c2c0600000000", 0x50000004, &(0x7f00000000c0)="c4e2fd35a304800000c4c14d72f7f2ce660f164df8f2ae0f592b6465d37100c4e1cd5c7c09a16fc4c28da86123", {[0x2c, 0x80]}}, 0x0, 0x8, &(0x7f0000000140)) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 356.129261][T12559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12559 comm=syz-executor.3 18:25:07 executing program 5: [ 356.305777][T12562] binder: 12561:12562 unknown command 0 [ 356.311754][T12562] binder: 12561:12562 ioctl c0306201 20000280 returned -22 [ 356.359704][T12565] binder_alloc: 12561: binder_alloc_buf, no vma [ 356.416775][T12568] binder: 12561:12568 ioctl 541a 20000000 returned -22 [ 356.445377][T12562] binder: BINDER_SET_CONTEXT_MGR already set [ 356.451877][T12562] binder: 12561:12562 ioctl 40046207 0 returned -16 [ 356.482176][T12569] binder: 12563:12569 unknown command 0 [ 356.487948][T12569] binder: 12563:12569 ioctl c0306201 20000280 returned -22 [ 356.505729][T12560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12560 comm=syz-executor.3 [ 356.549912][T12565] binder: 12561:12565 unknown command 0 [ 356.556315][T12565] binder: 12561:12565 ioctl c0306201 20000280 returned -22 [ 356.595788][T12568] binder: 12561:12568 ioctl 541a 20000000 returned -22 [ 356.625625][T12562] binder: 12561:12562 unknown command 0 [ 356.625689][T12568] binder: 12561:12568 unknown command 73645061 [ 356.631721][T12562] binder: 12561:12562 ioctl c0306201 20000280 returned -22 [ 356.637952][T12568] binder: 12561:12568 ioctl c0306201 20000540 returned -22 [ 356.671480][T12565] binder: 12561:12565 ioctl 80404519 20000240 returned -22 18:25:08 executing program 2: 18:25:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x2b, &(0x7f0000000180)=""/153, 0x40f00, 0x0, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:25:08 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="4c72c356a1db7ee83a16fd235331a459424b439e67bca193b80539d53f00b6b4ec741f362ee322d408ae65db02db058cc36c26567c7b5855602d6b1e4460f1f6dee8c9a3195e2a96974dfababf126327186c04788e287357e4012a7b4886516c844003b9e32f542f", 0x68, 0x7fffffff}], 0x800403, &(0x7f00000002c0)={[{@umask={'umask', 0x3d, 0xfff}}, {@quiet='quiet'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/binder#\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vmnet0:eth0'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'nl80211\x00'}}, {@subj_role={'subj_role', 0x3d, 'nl80211\x00'}}, {@euid_gt={'euid>', r2}}, {@appraise_type='appraise_type=imasig'}, {@seclabel='seclabel'}]}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:08 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:25:08 executing program 5: 18:25:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x11, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RGETLOCK(r2, &(0x7f0000000080)={0x28, 0x37, 0x1, {0x0, 0x10001, 0x1, r3, 0xa, 'syzkaller\x00'}}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffc}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:25:08 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x9c, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/94, 0x5e, 0x0, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/104, 0x68, 0x0, 0x33}, @fd}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}, @acquire={0x40046305, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0xffffffff, &(0x7f00000003c0)=""/81, 0x51, 0x0, 0x2e}, @flat=@handle={0x73682a85, 0x10a}}, &(0x7f00000004c0)={0x0, 0x18, 0x40}}}], 0x69, 0x0, &(0x7f0000000640)="14a272351cdc20b53dc6adad53f60d6782695c1d11b36aad5bb463a222e2ade935b53035eb8bedbc3ba9bfbe548aad73c0297188a192334ac40151438afb14da45f068c7a823018d72364a8542b68369bc206d8aaff6c778c73cedbe4237e952bea67f5bd8545dbbec"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f00000006c0)={0x7, 'wg1\x00', {0x29a2ba94}, 0x80}) ioctl$MON_IOCX_MFETCH(r5, 0xc00c9207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x7ff}) 18:25:08 executing program 2: 18:25:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x32, @private=0xa010102, 0x4e24, 0x3, 'none\x00', 0x4, 0x4, 0x47}, {@remote, 0x4e24, 0x41a098d2e0ca9e56, 0x100, 0x401, 0x800}}, 0x44) 18:25:08 executing program 5: 18:25:08 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 357.486982][T12587] binder: 12586:12587 unknown command 0 [ 357.492971][T12587] binder: 12586:12587 ioctl c0306201 20000280 returned -22 [ 357.554295][T12590] binder_alloc: 12586: binder_alloc_buf, no vma [ 357.644390][T12587] binder: BINDER_SET_CONTEXT_MGR already set [ 357.650781][T12587] binder: 12586:12587 ioctl 40046207 0 returned -16 [ 357.664228][T12590] binder: 12586:12590 unknown command 114 [ 357.670080][T12590] binder: 12586:12590 ioctl c0306201 20000280 returned -22 [ 357.686868][T12593] binder: BINDER_SET_CONTEXT_MGR already set [ 357.693361][T12593] binder: 12588:12593 ioctl 40046207 0 returned -16 [ 357.732559][T12593] binder: BINDER_SET_CONTEXT_MGR already set [ 357.738653][T12593] binder: 12588:12593 ioctl 40046207 0 returned -16 [ 357.778668][T12596] binder: 12588:12596 unknown command 0 [ 357.784521][T12596] binder: 12588:12596 ioctl c0306201 20000280 returned -22 18:25:09 executing program 5: [ 357.827771][T12593] binder: 12588:12593 ioctl c00c9207 200000c0 returned -22 18:25:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400, 0x0) r1 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1f}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004081) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2c}) [ 357.917434][T12596] binder: 12588:12596 unknown command 0 [ 357.923371][T12596] binder: 12588:12596 ioctl c0306201 20000280 returned -22 [ 357.939741][T12601] binder: 12588:12601 ioctl c00c9207 200000c0 returned -22 18:25:09 executing program 2: 18:25:09 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r4, 0xb03, 0x0, 0x0, {0x7}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0xffffffffffffff80}]}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES16=r4, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x4094) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r6, &(0x7f0000000100)=0x4) finit_module(r1, &(0x7f0000000440)='broadcast-link\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:25:09 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:25:09 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b630440530abc9e55bab028f6a5ed6f3b3b3fa6a3fa0faa631eeea34ae449699cc663d5fea2be2f9f518c6dd75c5bf99a0be544e96ee81e86d0d3621c99cc8471d0c09fb629f7bdcce736ccd6cdf7c687e56f77ec66fa2f54a21fcd8f860dbc0a18d2e1b85f0c280c07441976ea316ee8c05289c47f56b9d42e77b063051ef4322eb74f2bcdd566d51492683ed5b07f2dd0cb9652726d18cf6c1fbf7af846a94ec28464d915cb27b9d5ff0bd4ec775c458a867771572b"], 0x0, 0x0, 0x0}) r2 = openat$nvram(0xffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x2000, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x5) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:09 executing program 5: [ 358.312372][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.417974][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:25:10 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x0, 0x400}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x201, 0x6, 0x10000, r3}, 0x10) 18:25:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x32c9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/164) 18:25:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000080000007600e3ec9623bc7eb5680000005800002000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 358.639144][T12619] binder: 12617:12619 unknown command 1074029323 [ 358.646095][T12619] binder: 12617:12619 ioctl c0306201 20000200 returned -22 [ 358.701245][T12620] binder: 12617:12620 unknown command 0 [ 358.707028][T12620] binder: 12617:12620 ioctl c0306201 20000280 returned -22 [ 358.769372][T12620] binder: 12617:12620 unknown command 1074029323 [ 358.776180][T12620] binder: 12617:12620 ioctl c0306201 20000200 returned -22 18:25:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e6", 0x1e0) sendfile(r1, r2, 0x0, 0x7fffffff) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/164) [ 358.819344][T12623] binder: 12617:12623 unknown command 0 [ 358.825355][T12623] binder: 12617:12623 ioctl c0306201 20000280 returned -22 18:25:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:10 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000000c0)={'veth1_to_batadv\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6304c71d2d4000"], 0x0, 0x0, 0x0}) [ 359.117777][ T32] audit: type=1800 audit(1588962310.532:16): pid=12637 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16148 res=0 18:25:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="ff000000"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000240)=""/217) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe3, 0xffffffffffffffff}, 0x3f) [ 359.385752][ T32] audit: type=1804 audit(1588962310.602:17): pid=12641 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir845802160/syzkaller.v0bWxN/101/file0/file0" dev="sda1" ino=16148 res=1 [ 359.411810][ T32] audit: type=1800 audit(1588962310.622:18): pid=12638 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=25 res=0 18:25:10 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) listen(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 18:25:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000080000f875000000000000029500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 359.432725][ T32] audit: type=1804 audit(1588962310.622:19): pid=12638 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir537728471/syzkaller.vSxBMP/66/file0/file0" dev="loop5" ino=25 res=1 [ 359.676356][T12649] binder: 12645:12649 unknown command 499582051 [ 359.683885][T12649] binder: 12645:12649 ioctl c0306201 20000280 returned -22 18:25:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x9, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x1, 0x76}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x3, 0x4, 0x5, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x1, 0x0, 0x2, 0x5, 0x1, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0x8, 0x0, 0x9, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = openat$autofs(0xffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200842, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000040)) [ 359.792871][T12654] binder: 12651:12654 unknown command 255 [ 359.799535][T12654] binder: 12651:12654 ioctl c0306201 20000200 returned -22 18:25:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x1e0) sendfile(r1, r2, 0x0, 0x7fffffff) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/164) [ 359.864603][T12656] binder: 12651:12656 unknown command 0 [ 359.870432][T12656] binder: 12651:12656 ioctl c0306201 20000280 returned -22 18:25:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 359.916159][T12654] binder: 12651:12654 ioctl 80404525 20000240 returned -22 [ 359.980161][T12656] binder: 12651:12656 unknown command 114 [ 359.986771][T12656] binder: 12651:12656 ioctl c0306201 20000280 returned -22 [ 360.001801][T12654] binder: BINDER_SET_CONTEXT_MGR already set [ 360.007994][T12654] binder: 12651:12654 ioctl 40046207 0 returned -16 [ 360.040445][T12661] binder: 12651:12661 ioctl 80404525 20000240 returned -22 18:25:11 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f00000004c0)=[@free_buffer={0x40086303, r5}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x80, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}, @free_buffer={0x40086303, r5}, @acquire_done={0x40106309, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@handle={0x73682a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0, 0x2f}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @dead_binder_done], 0x78, 0x0, &(0x7f00000012c0)="9b9b0dc6fbe964dac2dd3c66111c28743c6c1459e70fa19f3a1b2f0ed19d58108dbb1ee4a71f6f69425ca3500f6403301be7b3abf9fad0f9d97bb14a54afd9be4279067e34be333219b79d71f352927f38e203eb52a7fcf915f98ba86aaba01ec1d8bb2f2b9ffb07c0ad52bc7bec8a748ab8e58d0f85b965"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x56, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x0, 0x80000}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r3 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10400001}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7, 0x8}, {0x4, 0xffff}, {0x7, 0x6}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x34}}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r6, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in6=@ipv4={[], [], @private=0xa010101}, 0x4e20, 0x2, 0x4e23, 0x0, 0x2, 0x20, 0x20, 0x5e, r6, 0xffffffffffffffff}, {0x522, 0x6, 0x6, 0x80, 0x4532, 0x7738d162, 0x40, 0x5}, {0x81, 0x6, 0x20, 0x7fffffff}, 0x6, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4d2, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x3505, 0x1, 0x2, 0x4, 0x7, 0x1, 0x6}}, 0xe4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000440)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="cb7fc258078d171269b61c53958fbe362d51a6032d0f672cbaced5154d7c1e0d5a6a678446040ab576d6de37b2c33fb63e541ad8bc60d6f1526e31792241d1e522f5842c837bbcae7373cebacd16f6202726c78bbd00e74ef70f3a5ce0a7a406de2a38ffdde208a0bcc9f00ddbfea9a21688f4a3c43fb3585ab0476f67b73f251bae3c1cc418e54ce27e230e9f3c56d5dcdaa90492679a5beb8c3ece091974f388be739c196863cc9e1be60d4998ee30765fe1e310f9c5498ffed31a03345e0ee500c2f252b7a9bba0ddf5f6d49813a4da0f", 0xd2}, {&(0x7f0000000580)="05775be9f72158a939a58464554b03c4d20a4af3952de1d4191319cfbf7d734a1452b2c979ba2c7f", 0x28}, {&(0x7f00000005c0)="96733fb365dd1f2355c04333a5f1a053c810d04cd706648837b6f9f4c0d428b18c38f67f6691fda576c44ac70a710614f6b8c4cd43318703c9ff", 0x3a}], 0x3, &(0x7f0000000640)=[@ip_ttl={{0x10, 0x0, 0x2, 0x7}}], 0x10}, 0x800) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000080)) [ 360.281600][T12673] binder: BINDER_SET_CONTEXT_MGR already set [ 360.287808][T12673] binder: 12666:12673 ioctl 40046207 0 returned -16 [ 360.308033][ T32] audit: type=1800 audit(1588962311.722:20): pid=12674 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16158 res=0 [ 360.421101][ T32] audit: type=1804 audit(1588962311.772:21): pid=12676 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir537728471/syzkaller.vSxBMP/67/file0/file0" dev="sda1" ino=16158 res=1 18:25:12 executing program 3: openat$vicodec0(0xffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) 18:25:12 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:25:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x1e0) sendfile(r1, r2, 0x0, 0x7fffffff) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/164) 18:25:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:12 executing program 0: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000080)=""/188, 0x1000, 0x1800, 0x8, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000002f05186996a4ef50f3daca8e0d4594bb00"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:25:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') r2 = socket(0x10, 0x80002, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0x3f, 0x9328, 0x4, 0x8001, 0x18, "a84d08be54c161f0"}) sendfile(r2, r1, 0x0, 0xf0d) [ 361.136499][T12693] binder: 12690:12693 unknown command 0 [ 361.142663][T12693] binder: 12690:12693 ioctl c0306201 20000280 returned -22 [ 361.217728][T12697] binder: 12690:12697 unknown command 0 [ 361.223784][T12697] binder: 12690:12697 ioctl c0306201 20000280 returned -22 18:25:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@generic={0x0, 0x0, 0x4, 0x6, 0xfff}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x12) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x50) [ 361.291846][T12699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=12699 comm=syz-executor.2 [ 361.315980][ T32] audit: type=1800 audit(1588962312.712:22): pid=12701 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16149 res=0 18:25:12 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 361.338959][ T32] audit: type=1804 audit(1588962312.722:23): pid=12701 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir537728471/syzkaller.vSxBMP/68/file0/file0" dev="sda1" ino=16149 res=1 18:25:12 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000800000076000000000000002700562995d8ac3d7e4000000000039500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xac, 0x3, 0x88, "11e17ad07f10d9b94066ca0426d2634c", "33a0824b3bf8239ccc8efcb9d7832113d5abf5481e43762ffd3766d1e71bf5255cda4829e225070759d8daa2d014f1e206dd325db4e6c6bc193cdcc6acf8861940b5e6a57de271e09645ae716f01fd10ea1a96e9169dbcb7c7cc15d4156e1de39badc6dd1e06c489bee7d6fc18a732e5d0d6cf161634c46c7fbb7969fae56770c60730cb34ad19b6ca2e913b42dec17cb27b5f13684e11"}, 0xac, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x1, r2}) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x8, 0x8100) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x90, 0x453, 0x400, 0x70bd26, 0x25dfdbfc, "caa0b16bfeb7f7e0c705da3ffee326cf5820cb72dab000be97dfba91567ffcf066834d294994fba24a23cf0cea91d7039307aa57fa9b5e526aa1b5b4dd923fb06aa011a52800e298c7b2d72f75f6988b52e6f5056526856305d34ce7dca5d52e041a4fe6f5aa0599a70ef9e6f00c5d78ef0dc631304e6fd680b0fa0e9c891a", [""]}, 0x90}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040180) [ 361.554863][T12699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=12699 comm=syz-executor.2 18:25:13 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$KDMKTONE(r2, 0x4b30, 0x200) 18:25:13 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) pipe(0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) 18:25:13 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 361.764647][T12699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=12699 comm=syz-executor.2 [ 361.813100][T12699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=12699 comm=syz-executor.2 18:25:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') r2 = socket(0x10, 0x80002, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0x3f, 0x9328, 0x4, 0x8001, 0x18, "a84d08be54c161f0"}) sendfile(r2, r1, 0x0, 0xf0d) [ 362.145906][T12719] binder: 12715:12719 unknown command 0 [ 362.151957][T12719] binder: 12715:12719 ioctl c0306201 20000280 returned -22 18:25:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 362.205819][T12721] binder: 12715:12721 ioctl 4b30 200 returned -22 18:25:13 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) socket$nl_generic(0x10, 0x3, 0x10) getpeername$ax25(r0, &(0x7f00000004c0)={{}, [@default, @bcast, @default, @rose, @netrom, @netrom, @rose, @rose]}, &(0x7f0000000540)=0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x254, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_IE_RIC={0x234, 0xb2, "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"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}]}, 0x254}}, 0x24020010) 18:25:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 362.385950][T12721] binder: 12715:12721 unknown command 0 [ 362.391971][T12721] binder: 12715:12721 ioctl c0306201 20000280 returned -22 [ 362.637536][T12726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=12726 comm=syz-executor.2 [ 362.726224][T12733] binder: 12728:12733 unknown command 0 [ 362.732345][T12733] binder: 12728:12733 ioctl c0306201 20000280 returned -22 [ 362.763040][T12733] binder_alloc: 12728: binder_alloc_buf, no vma [ 362.822305][T12733] binder: BINDER_SET_CONTEXT_MGR already set [ 362.828698][T12733] binder: 12728:12733 ioctl 40046207 0 returned -16 [ 362.846246][T12737] binder: 12728:12737 unknown command 114 [ 362.849207][T12726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=12726 comm=syz-executor.2 [ 362.852864][T12737] binder: 12728:12737 ioctl c0306201 20000280 returned -22 18:25:14 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x6, &(0x7f00000014c0)=[{&(0x7f0000000100)="c8499ee252f086e047f1108d77ee5ff695cc28f5ac489918a300d4ff07898d9073b13b11962a2f7805552fe1db7272bccb1847935615b7f7c85d0e7bd550f2a3b106ae23f04abf8e0decd6e500753ca08472cbe807e2c44cba8cd5399eb486e3bdc1ccb7ea59f7aa33aa090001a2130bd69153df6394f32c1b07bfd81dda65f06a23a36d", 0x84, 0x2802}, {&(0x7f00000002c0)="8383ed3235f54b231d17429a4269ba15623f90016b7905b471ac0edf31954eb50ff11a43ac36c8d3d6913a96401c3a0c3804275c12de899d04b072fcec0df84bae8c09f73d64d81b3c6b8ded9fcb6f7a4d9def2f09771fa6320ef6d776095bd5e88ceb70fcf4d39b8fa2799487ad5c05f20c74d906b05199f1388a7a88528cb5aa83acbcd4f53f1cd1712b2368e7fcff97013a808487de29e3cd471986ef5a459ab2f6b7e5616f3c38c6ad7203eb829ec66239a420c60dea714d", 0xba, 0x49}, {&(0x7f0000000380)="57e14de705657316afae632cf0d5173268a6d301e3e5cc6b0d95e6977e42ab938c9b2ba381dd03a5696ab294c6135b27e70660cc580324fd2f3d968d7f58a1f34f63ad92ab185b624bf8236f8001c44cdc754c7b1d8c06ebbcf7a6191120027f4ce2e315a0c138a8f8430c572bf17602366c20", 0x73, 0x4}, {&(0x7f00000001c0)="df57563c46d6c5b4226c45bce957926c554f54efff9c6dfb6e80c0cee86588be98a5ea2b97f19e08c8ba99acb142b40ba823127359803d", 0x37, 0xffffffff}, {&(0x7f0000000400)="80c256919a77207a24712a55206329758f133a0766fe9946497ff8015e80b0dcceaaac93dabea0442831d2f7bf2c28e5de0b5a24091dfc5785cef72cce0eefdee2695cb82cd87c71c93396381ea2630f8388e76aa97656aad2d3c74d5784a4269cc32385a13f2815ef6c1986e6a16b151f7428f1f4e6a523c55b1c8633328645dc2550912ba2ba3e1c18c42160337804", 0x90, 0x200}, {&(0x7f00000004c0)="6c21b90531474b6d601005748f34e35711c8d819dc245aab2dfdcee1cf36363cdbbfd46b41a8fae61f630282c9e19a00149f50f0ef5166124447c160e944933a3b25b43b41cc3a9710d3d8dc31d16246919ed71183a7f278ae0829bc995d180d7c2c46ba907449595e32038d9d2c74cc4f0347d811353dcb8dfa5bb8f68aff03c176dac81d50376ddbc2c6105e3cfe1f64bc638f4b1f7c4c48f7498309c81863ce64e0ed96a33240b3f4e610791af02a205e9aa662969c3be75c692c06de2cc36224cec3992bb69b39326b16664a4ce9efa439787aec8b229c5a24c021c4aff41850e6cdff285b6f640edae7abcc06920193e234a53672c77becb3cad0c3804c078912a79f8dcf682fe809a4b7316426b3d195d0b4e0aa785d352837dd3508e43af6954426710bf22a70a8626e6a62dabdb8c379d5ac5b8eac33bf2a6ad041675917c34d1f2de8f4919de9b4af4cf126e55480168639f0aa17119825b8a71dde641ea4c3cd7a4e0b89ce0ba9087b412ead3e64eeb3d480a1854fa805c4094de7013832c12249159522c941327dabac6b487e5f325a89a687c2cac1627e59ab7edf33a4c81809b82237738f3b221191d2fd7a1523a1a14c5552274e674d7d961de0bfd98fc8f3175f9179f6e04c81039eeeb84532ed0ebbc9d540996ab0ac94cbe2f103b92957bb36ce2f35e36065ece1c60f0f13f6e40666c98817f8e40252d48a2e61f1238318dc2433188c47428cb3e23fa7b40aae1158509a9280fb610437ee01281975db7c6d9be3d6685ff22575fec1dc36af3c907f1a1b648f079130bdf643ebf6001a8980df3d5f62e4a9ec592b7b78f6c624bb7026c2fc39cbeffa5d489f59b25dd1a750ba1c85275a9bfe2fa73d3780e828267c0857b0dbdf3fb71ced81aaa697adbaa00488d271e75e0a618651282213885b59dce3292a7611e5e890fdb9a0ff9520b65b9ba6f333e1a03c1cb74428700a81662b613028983b1f0eff4335a697ebfbaa8756b5eb93c149e6202898ebc506bfa45aec31ed6a4b85c415c8806382257c968c9c51f7a7aeccf88846814fd9a6a3032d18b33eac78c9bb46a7fca6b72825ba5bb0989113d52d733224d5c388c0bf00388d5f1f6b7406efd8b00341e0c04a4a8abcb1f8cb474bf3dc2779a30600fd18c8c0a3f82c0fe73dc5e58fdc5f0aabf48df403105b0d243250d977912c72e2046c92082f2565f5f3e33d221884968ceb593066b36b2f16ae2fdd6f0d9207490585e254625d628039253c815ef2f31a50ecb1ba1e45421975d5b1fa7f52f23b66d3c4b23c4129c56479499f4850fb7dedf7c698d9776738cb3c11133fdaef3f38c8f3c05e9a51c0055bc17b12a3be150b35360a38a4da69cc4c6431e87a178c81fa2f5c79f5e1a94a1e53eaba34da9be16e9b1eaf9817b7ce4374fbdaec28ad3e604efed051522cac2b2d0e995992c8da77bd53d5503d4bc6355bca9d48037e78e1a917e60ea9f20e320cb39eb79f2050792e6eaca06e13f4a81ee3f04f9b8a1f8b242661a55f122de4e0e1a2fac137cc48fda3045e19f0ae4cd5f986c16571757da5ece812aee2ae61b1ca9b14444e0737851e5072b219d7338af22dc796eedd85ebb062156f6704af58f6e4e80f75e5e85c4ab45582d77ffb0273309a8272346c5140c1b076ff0fb9c1a7fb9adb731aa4332696e52e83f1dff23f666c0b6ba3aff30063c971c5806a95c37011823ffa554d1b1afa998067429242643ac93a1e63e511e9785bf6574ef70ac99634b89109cca143d8ff422f9c4776fd43903377c498c595c17e0048cbfc15fa700ddf08da064132b1f18f496470557fa3daf9f43ca8e5ec106f4b4b0a6a02628844ae05ce9695aba8578f1337cbf779a476437a3dab1cd9f7263228bd28826616cb3116bbdd1bcd0f71579b73652fbb499ec564e5fc3c507d28d43655497cb0afe620cd261636ffbd402115d23775525bd444869497a589c578a2f18837ccd3ed11e0799936e47ba96063442c29fbfde5e6283da58c5477c33cc09d648adfd23b4677002970619ccfd4a950e83152d36d7ddfe0adad624cfcdb22662f020ac4fcf9f6c4d316a76c93e020f55edaa356785b87c5dda9b0797d7ad2a6a3c3f03457551a27d01d03572b91d1cb0849765cbcd19b8b55bb08e26d9e63bc783c8fc6f8c07d2b3e5d723cfcf9493c59de3cf0e9af46a7fc9a65dc8471f7ea0bdf82f83db9e62e2a46e089c67a3c98af3c537c7a15c5a8352a108a8c51a2ae6621852c533f57b1165c5bb4f0aff4769cb8036f8fc30a9165baad6d203c1d83c882ff884e12783c2238d18c8dc9ee0a9220e7c4b42d5e02763efc45a9b04e542186d52cf17b24beb5024346f7d86d4a106c281b6e77306c9dc09789dabc8d48240dccf6be1cb3713a4990b391b3ea0d735d11a038adbcf5a51658744bb2820a01b3cc6718bb841766cbfed5ff15b256f1222fd15aebd67cb08378bcdbfae5cf4d54be8c66ed407021285d05fc55f9cea916f48bb7ca8a877811dfb4ce2ba18a8caf4411382fec40be7c52ee11f09043aeb8a2fbd164632d1e3fc03baec279b4d21d4f4d7229aa9bf517b55f7505d9397d4d43bdc278d849133c3059e5bcd18b90ba05e9b032a6ce74d66ee989ce803ff5dd1ec8bc87b71c4adbf11c33f0f7bf72b2b2737c6ecbe498a6ed5f5faf8681f31d01a2634706b4e40725e2fcd914f9759483700962322d990ce9a59d39c3851f190079a335f6626ad1db3b6c2a002b7292d23ee7a08eec49b98ea7fb325701ad54c915948381986d779a0edb65ea4056ef0ec087587ae20bdc1515b46dc755427706283b5d4218ae0b55c34ea1073b8dbdf51de23a6570b294ff211d3f3f11f84952a4738e2ae6fc769f2042bcf35e5988e930d12fcab3f7daaeae88777b8abbdf83b28e17109aed21c94ec93357bf45b87c9ff4c8293744c6ab541bceb7d78e7674c8a8faee8745a59132da48ac7cfd6e829b12dda0a86617945ceab788d9d50617c1bb4cbefc897db9dc87ed8bf97b85a316893ab2f579bc18ee157d2d519eaea29c23c315c87ffd8272d1569a916175163f5c497530fbc591eb5c3872c435c810fd85ce0a6858a99675f640e82aa6a54553b8fae70cbec586cceb60a09de376016101f232f3a7f727aee319b51f83acdc17270dc0a3d13f0327d7ca6f7d613eb4c2ede65af1200721bfc502c1e9dc17a4f8a4601bf81bf2524d9bbbec17a7b5d9649513a703304a1ddaddab87631fc44010c126ff652f8d2930d42dca66bc6a2921de8d246fc9504ef9600b827d3e88469b6d132f7665ebf7c9637c8a48e17589d68bcb45d9bbbc82864f009e052c4d03dab6e96a10afa2ab8d87d4165693f1f939659d6419ba45cb62878c41158919184ff1a88c7d79dc6bcbcc173039b11e80757bec67d0343af7c7b08f31006eeefc15c5cd5e0be0345df877aa9017dea532d8b83492896d2b1e77a82ec4027f3ab2c1302c9c7f3ec7932044777fdd07c46d02da6f1731e8b0e1babde220134f96e97ecfcdd7ca9a9457865d699ba93c854f405e2dc2a5abf621ff01ecc3e411e4aebd252013f4fd0aadbef88988e102dc90472d9bc285caf72ebe779be65faa79f4c00424fff1bdbef1190c35ac34b8e8dad49443be6ddcca9c0496bf6d2156cb2bb07a586f2f4cdf6503662861c4f444b181f8b02cdd82bbaf456b6ab71706d7926c11f03cf86dbade9fc68e12974f7ef17669e0cf67864fc3ed4a7a336fde7c22ca692f515bf368f354da0316fdf40ccca76701427a9f432b35fe24d775f12dbe753ea424ab97e08e13966867c076e2b7a510b455a3b07167384024278d85604045b558ddf8a10287092e3107990996fc6d0eef2926fdf8a31b0dcf70fb63aadbf63c8c6591ed019ef737ea33bfc2f2320d41e59556c81d0629dcf7fafc1e52c5ab89d45ebd6b3de17e3874b0f8ad22e2348c30896b9e9480a4fee0b32e864830494114a7814b51c4191f1839cad5acdaf5b33618a6e8e46cd532c25430e1940001e254e68face0f173ce053ccf5f0a8e1996d54a90376d9e2b0528113ddb983c55e114a947d0d4084a0057825fcddf3b277fb8f36c428b95bc4b4df2315c8f8fb39c6946fff5b07f981b15e1efd9079e00578d9f1bac4161545f5d8055853aa73aba9678a866960d8eb1896db9ea7b034941837ddf681967de14356e930d79bd6d8e7bc504465cffef0c567aba7e7e9aa5e31971983e6d650f96704691b322e6ed159a6ca30369c370333d09221ae42057e3a45d9acbe5c94f8668eaa2aebe08f8daa0f0768b25157ed36d0fd9a1512b7de01c5ecbe98ab48aadfc772f335fe4126029b0c83231b4c51b7ebebbf3f44b0ab8594690312c0b81fb402b8860be2aaac38a01b23b406aca3fcd6b90b631d55f2ea4fa9285cee0f35f92ea4eb30dc8b339aac9489be42c97b58d09141a6cdf6af0a49a733ffe9380e6e7b62dd8c1a0404b7fa9b02b34a5a2f1f782aa1a366423f65bd623c991b41558883637bb05b81859c7bdebfb1144c87cc021759936bc9feae674fb6315db78f969a073907de814397d7beb9a46b92d6c26ccbd12ffef264e5de34b530a4a4a6a3fc55937a04903d53475650032c23f12ad6d3b9d7fc94eef58140ce62e9ec2940ab2fa4fd8595efb0850f47a5af95fb8ed286185656318ad3043a1e7f25d55a3fbfa9439e297e0d6bd1500cd7093e3bbb49681c630cdf2018a50adc0d64cc1948c792166cfeb88971dea3491d024426c2fffed7b93cb6c9059e1c9cf426947c239ca8ae37bdc5e338d6265d0674c1968108a9870964255e4c31667dc1b882b7868bc905c4ab5217f9825e5c40318b2981fb18bd9b3b75477632692959809d7644528643f1a384678ddeb8204bb05831b94579642491e4eeea358f4599a3d4af08dfefd0dd68c9db3932e45d06c5fdccf7cc86d53cca467cd2deabe772f03047a5e57294da1b28c90945dd8fbd3a2655f4b2f9f60d5a1a190755021a66286219d9202f37544b984e568007aa2f3bd504b01c39d7653219be279e8b80ee1380d94268136da42d2f29372348afde7e26aab1db67913d4887afa4855536d327f2953024649a3ad1ee38d6e2d531684467ffe9dae93058626cf2cf5b8b6195a20aaab57d1aeac848ca60c81cf6defe5c13db4d1136bdc0ef9bd7b92584bef85f2f916e040bef855a9a27e948b499890e0a4a93624b085a8556e7bc5285712cf8514f3c4a8124a035e7adf781661d2ff6248a4d0d6de95147967eb736f7150e4af651506e20ba40bfc58f9b7ebf3d98631f2d8faa2196aed407d424d076e4464ec46c486a9a12ff40df0e777dd16f21cd2f4fcfc097160b2c5a8e866b8266ab0e9faed9583eaa419eefa684e614b33eb2b03e2be079b2a32e4a46b5964638f7e6cb6b9ec75541a5e685b195e6582ffc80ea53361e49336ca69204f76be889447314caa7176ed1a5cd75eaf70ad56852f7292d6c13de3c96cfb0d3ba27a1481b547da89b198fe6b5fe522d77cea321012bad897d4b956130f9c3ad65022b7604d3a6438af654d4e73efcf7b909226bc8368adaeac6106eec648aa2cce414c1fe551753123588a7f7030ec8c65f9ba283612f243f3b124a61670eed4c042e6a43c4724826e5bba597273adf44dd840d99dfd1775a09e53a2e660e11b0f1fc70e61b1a95b958bfe64200fbf156733cb715c16856676128254e64884540d0973aefcf4363a2461488c98f83e86d3e9bce17033048f452bc533c367dc9dc142bbe571361b91e1bc15", 0x1000, 0x6}], 0x2a8000, &(0x7f0000000240)='nl80211\x00') r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:14 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) pipe(0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) 18:25:14 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 18:25:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="40f3855c53d16b6de32dfc2f000000080000007609c5000000000027000000fd"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x40, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x67}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) [ 363.345403][T12744] binder: 12743:12744 unknown command 0 [ 363.351527][T12744] binder: 12743:12744 ioctl c0306201 20000280 returned -22 18:25:15 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000800000076000000000049f3cbf43b64dba400039580000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:25:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x1f8) sendfile(r1, r2, 0x0, 0x7fffffff) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/164) 18:25:15 executing program 1: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r2, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000001780)={0x22e0, 0x12, 0x300, 0x70bd26, 0x25dfdbfd, {0x25, 0x7, 0x40, 0x6, {0x4e24, 0x4e24, [0x2, 0x100, 0xfffffff9, 0x2], [0x0, 0x2, 0x1, 0x8], r2, [0x94, 0x1f]}, 0x40, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x52, 0x1, "7d7f3f112416f7c2cfaf7f1b869e5a9d24e600d8fe20b1fe7c845f72f091fc203088565beda40742d2f7803de45331d8fc7979d2efcc9aaece9f60466a6ed1c5bbde071a1342d01b9057d6f37dcc"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "daa6164bca034244d97aef7c00f689e1176e7ad8277a8f8b535868e3f41cea2cfa62b673b8d7dcadd080c9e96587ea95fbff4a5cbec1e17fa783cc058d778020dd4725e2ea1cec99ebfcced57bd745b2e45d16f1003f76ca4d8984f79b3ba387919cc279bc8c52bc7d652eec4d07f344c603b63fc500a6895fbeee45ec200c7e20cc7504c7ac66783519f963e7d243fdb8ee26673b1c0845acf21fffb865de8fcd7862d7258f6b08c5dd37805d6fc3bde917f5d129850be6c5e2d23a1b2190c3c2779a8df4c4e50bbd913d12144a8e6ec7f2aee0aa75d93a47e76255a89f1ca95879cffaccd086092b34f61b2673f82c3600d9c2695f9b6e9e22462e86e65fe1f902036651d373ddf229ac42348557b3877fdd2500f6de1ed89b0beeeda4f9519c386545bddcdcaa8fadfb263a3ec64b27634f8d6b5da0f1f6d620c79d3630eba68ce44239ede8eea6842ea18cae59bead09e85c210ff4a6d348809f8f03463c3a6fe3068829d4cd802a910334811cab25116c7e919f074a7f334b4b033e79de742097ec59b37dec2365b2a017f542ccb926379e037ea6c744011a3a988935f4e4ffdd39ec3117de67ca4de5326061916a24a3864918cd2e04eeb14a61a42d2334b31a913612ecf3c60995a1bd2bfabc6f9e94aa484dc55a4864b3b3a40a2705c55ecec88f55ee3ad1c2df2beeb4367b9decce8c429668eff1a36f195af92f9e0fa0e13881b1cd9f48a371c3adc5f783f8f0c5d316d0eef97b4cc7d028355e55d3387e5aa96069ceafd4bc3b774300e7f6a47b373d3e19c1fdc086f79fb310b617c1121e2ccba40a60c79cdca6a451432e77a7759a10e166ba9a1c3df589833465c455b3606353ce21c3c4819618e55eabb4480b8118b42826e90e86201ead160ddb8524566e4cd7ca481cb1d2edd375ddbe7d56ae3a332570ef6b3f1797162014de0822bbf01891c313d69512dd3b1a52fbf0de7963fc6568ebc1e921d5e7f22d2c9d60139bd54b9432dbff5154e8f326ebf3e092dd9c4cb2b54e81c2caaa1a88e4a25c56afc5fb7441c79b86e708e0f4ebc50ae5989a9a2df1c19790cd4303f3ffc3f31bad9e2ecc2924cc881db619b505710abd8c9793821bdd8de53d89b9fa927eba97fcdcac8ab85fdc1ab7a32548821928cf839bb0b6122a65db93ed5861c59e4807c44844f6f4dcac6a98e047b7f1847c7dc839422da6f522c205864a4631def8480dedd39067dc51c24c3d0ab342e955a93f822b6a2cb2b1268f6a819610f906e75ec343d5210f49c4e669d57a5d69f082f66043adea10b9e802d97a01c201b7449728daa99e90f7ee7156c329fd3b2a31b097ebda44b36699591a768a350279074e317c8ff9eff56a3d810d039aab2fff1ae5557edf7dde3dcb325c14bed84c9410c9bfb16455667705966441c083a6dafc760afc8e7c6024bcdceddfd125b23bfc7601647ad7f3f8f25eae2797860c0be9dca31c7e738570b541ebcdd097a71da9805e9d18bd9ab8e0f9f8588f3cc6075c5625113e6c03e642bd6884174ba87dbdbe6c72953d1819110f8a452f51e1de70b33ae8650e36a59a36f0e79829062d4b6882e69f6aa3e8ba887e3b0b05f4c9370768205737058620a21143319c93b6130e3200276829f52677602611483744001fc0035b19affcd59d81978d7b95bb2600c00a49c7b75e394608f1a9379bc725fde375c6db868172a5bb877eb09b8d847eb8af9fc5497f7fb7c62ad2408392bb7657659e80101418538ee988be029d4cf1b09d9b904fcc11400f1b92148687c8363aaf1da46dfe8d25ab4349e33f97f38e3a1dd3248e3e60d62ee8d0af9e163862dfed2663f8c9e0e48cdac5f899a8e13570d5f77ec4da59a967d7c0b02a85b9f63214ec9a806563fa82ddfbec9376cc58ca66d9daf2ebef22b1544a2130411858eb5e332dcee55d15038a09226d8e7d9e80630d3297545cb3ecf658a2e793c5dfea9dc32c50e072748311b9c59cf1a6e49221803351bd2946ea935c5a6c1751c3c4442a8c43bde27fd826c45950fb8d4516b5e0078447dd1c54721c09f95ef5692d67006c89bce4848c39cfa27fa8b5f98e4b51179ed3be7c58fe71d45ada10b0e9e56150ecd9e9014ed624d827e255fe4c7974e744f77eedceeb537941f8fd8f9f9bae547952a68c42d21c49591eb0a2dfd9401492de54504fa87e7414f02edf687ed139bee858d76064ea49b6ed47b4f1d8dc1bce354aeee82786f4f8b38e36b35052d6bb900db6bd26af0d453a4f79a89769521185fcc73b4361a1c690ecd75559e339feaec8dc018379fd5d2db81abd65352725c0440b3d9a10162e566b20bafed693a24d954780bc8d00c09113247c035b5ee430da6acc134d80ccf948cbf5d08e841a947a92cb02de05d829d5be36598243a655cc6dc40777a638c0aec72e7bc416ac1e7dce04ec9c233645c6784fccd1a355434563bf973fc46bb7b01e1ae582579dbf76cfc08a9b058b6de842b0104e8b4612504a275f1f5c1d28021602a79224e41994ff855b67e93567f9be9ae96265b3b299af7deb09b8117f1b9417a5b4c695048310d8ce581a02996fe68e07441ab83d9f1e0132a46edb72639f199059ed30e689d8d871e5889244a53ed44fe1a2a3cdd01cd2503b36940d708928c53bd7519eaba70a8526a138ba1f26f5287e72785f85f7c4d1331813958f9707e3c92ef005a5d1e60293aabe0f8bdbf5b27c9b6dfcf6fd1e416db78679874638699ddbc3482b5d48c7ffe1f699511232ceab80700ab62ce615230f46f081c01d6a865029036bcff8cd29e434b55f2e2a3bad5b6b08d269c45d8f83b6fb24b11613f92284c7b7c974795ddbb5129b42409a19d414c70561631ce4071cdc31ac86db9d924829912871ecb96f57aa6d18cce2af166bc136e872a26460472ad127259b56eb22983725e94d8d8961c678a9df69bd529a5481dc0e4aa2b3f4124958ccf05830f3a23eedf5260bcc503170b0188e779de4aed457c42beb268190d444d983a45af44a5912efef9a945444b0506268d9ceb5a5effa4f89f93b91669988a5c6623c5ad036e55baf1bea055b498170e4ff97633bf38ef86df78b5d4c463f2b4889382b7ab3b423ce4eb2f2d5f32fdda2bcae61bf0f66a1a968c672e370a66c1508a92f38e6b7b06012803cfe0b3e265391ab116e0ea86a08e3583b9fd51a2d01cf50a800505326515e4f14c91fa1b47172de525f3284dcc2fa29d4fddd9013ce1f34688f59d0634121bd31f19a6706081e43e714965530e892f13006729c9390f95b35e98f3ad50fc59aa60da321f4f73eab2f67fbf7bd2812f94011e5938f61c15a1110234167aa4f2d20dd54fa691a7b9f4244ed654d158228f552477357aab35bb778ad59b22c14208e7a4e6f2d3be8570c8df9d7fef8a7ac1370d8c7f6172f6fd339b5c7c8a7a3fcd4004d2890e9e01b7afaef3818001df75c69fa6311c9d22f7eed14cb00def68ad0028b1a8e0dea2d06fc9785045f04e2c0635e1bf419790d4d0c661aecc84aa180910a65cfea878009b430ab89e3782616cb951322ef8182b1b63ff5abfeb2a267c77bcbccaa9c3d4d9efd6f949409e4c99c0f580b514d35267dbd7a4bdca3f0c325100f5fbe4f8f3e1ebb40e6865068adb3b1b8d18d59484652e48e2359cdc6a78f349dd841eb64640853549864927b96cbbeb934ed19c373e73070701a03c70bdb54252ea935d5211771865e4cb26b0a518adbd506acc3c8d46d5e510784dad3636b135606c11e1ded6120fb168d5b4b60a1740a83270bef44b3e2258b8108738c1ab731b36ac9c35515c4116b5a970e1d581a18e819d4bdb8e8e55f23cd6e28cd1912f28866b6dd5244d8f6eb05771ba547659d3367df77600f86759ff3592770b3c184cde82eb23c07b6a3e603db081a19af2c3127e251409a8b5aa4ce7d81604d05f72187e5bda4453862a38910eead07a71356e3c8b70053213de347fbb9bccbedfac700aef536e45e24b4a216d434cc7c2468687ec825d56ca1f8078d66b8f2d70b62386ab655fb4f9706b209667da9629fa7919364b55b79a5f6b3a744b66d732aa7cb6c23a56b0d326b44d7c5e96c68f34ddd9e657be8d4c88009e35da5b991e3f44994d85f2a9d47e4f9b5e045fffea44f62f707ad28362fc0b13369ee82966b492f5772eb3b710a3785c21a581faa19f20d7cd9e7977d6e61997b756218c13493885c18ab1e36fae24bc2c1704170bda5e31d2f8babf7040b0c94f26a1475a1868a746d70380d7f1c4b06c9ff38aad8b33dbb676804d05d46e2d7dc5642a9990c4ca1dc4179b28c789b2be77bc45ececa5005d2d1704516582e59137ac896b4fd83eac44f86588042c5075e18d8c00673d44dba5c50d0266f5623a7de999b67ace97233f8d05f4f191f1d58fccb14c78ce4ea20f54aa64e4aa91ad1e248760d3be4df326224f00dafda7d44540e78c578dcf1e9e020b6e9d65c08fdd6f8cc2742dd1cbc20bcce5a19e8b6960f5d8a1e3c3c8fe7bded4df714aaa04415e3d7408fb3c6ff5a01c09ac23c48fe28a7b683850ca33ea35bac8c0dff909d6e7d4d534fc82f934a6ef5c920cda4cd003eeec7e15750308509703d7fbd1f252c8497777fc4000b90aba70e916657f494de1ff9c89179b820535d990025be93e3b7695e427c00117d2c163cb8def0f534705a92b2e10a5ac527d8d659e6c3f8008db6e735802e5717aa67311bd049ff5adf65c91bddfa4ad3d6fcf7749bec7712d95c8eeea2868ac212f4b7294a5e3dc18ec5cd8e8e3ab2cd832a031e97a07ea501c3354e71a28f652eac4ad75a98c8d8895cccf0039cdf858461d355aa94390f41093fc526d228ce3e446b8bec303cc9521d3490c1a541928c5dc762a64f6f89e768ed57a7f2e5e20d8554a91e111dee78827ed123187b5ad4a7b74e6a81ff6b9bd25d4ef12f48aab08e17d0e5c47a0ad7709b31ed2daa7b1e3776d2042a49869121e211752faf5a23505436359d65252b28e6d976cbad33c7da68c0c5cf46762a4a68281f0365f3925d941ec23f16b28dd05c6bbf55e7a8fa9b77d53454530df6a5ee1a0ff9b578fb22bb221ca73439714b5cca53afb9030eaf723dafc2b313d080eb538f4a6b82e05518427b65ecafbcb20fcbaa09ef8e92703b990126b5806a27d2192f6b7c2b8010a29e497e1b4204d08d85544473ffab440578316e12906f3e5950dbc7ec66dd05a4995c09ac12d0487c1413e12f789e64b3c1af940fd665baca1e02f49d11f1dc77e680ff4b3b9daef5d241c7e82f895bcffdc3eff3666585be63b1557ba04be25691cbaed50ee4604b3a40db0f6961996473d8e29a72d7feb3784eaa4e674a79505f899b39a611af5e1fa05dec9da81a65ffd77ab348fc6bb79aa07525aff4619ca409c4f7ed2dadd075cc5ea7c09f1e6b93af60ae9300e120259b53a0569ec3bc447a015492fbbd86456b407fbfe938a2784142d3b8d0e8ca20cb5e4064ab1d40d995a4569132c9497dcd486bbfe079563e010e48a4191af48bcbbb871ba5ce29198af65b25dbfddab3248a30a304566a8962417fa9f9eb050eb3ab5b1e66dc60d5c130c8f2f63859374b259bc262d57a3f86d41c856e5e371e9a9da3426d568efe20ed559d9c32485859b5c2213cf5fa0e86fea54dffd2fd6774d02d16dcd4322a958bc87dc23276c1ff91db00021e37012505be17172326710d68a94eaecc2551a315aced900b8f741d8f3ddbc411dcf7aef824200ffe0606128640fa23fdc38411f5682bcb7b3ddbb31cd0f956abb0"}, @INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "8bfbc1a51508574eb6ef5158296b85049b130e5346cebe8d1496c06fc388e5b4decffc751b9ba3103e6fd715a667fee0b7c241ec7992073f13dd06a8db1b80dc9af26981323cfd1d7497197d17c0d6747686b4e1b36382b61da45d6dde0351cbc918e9adda032cc6bf788630967bf0f555b659bd6dae6acdd919109775449872e28ce981b7a87b187b17f5a47284d9377e29e1288a2c35b3a8ef8f25d56dc0c46e4c78c4d5e14231df94448da240a91e8c5851abe8cfd85be24c6498a81b37bb"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "b906a6b7930bd2178e60943739533de148b2618dd4e5b2eb11a75a2a9269bba12fb83cf75df6fa34c1cf04d047cdfbb5c955f3fa8773055bcdb089deee302fbc1bdbad3d7cb5fb1714f30bc63b9db47e69f1b329c834f29c4284b71361b8a2ad1938dd731f5ba96a9a9413fd6f5a62b943bd763d4751c8ef636a985163b712298769dcb8e6caa0c9482eac10bec728f3db1c8808477a2cabc1b8959c2207810a024572621e5fc270ff0f520f832a2d99ec656837bac8044e4cd9c07681b7fdd25a870eb2aeb5ee077662bc5f5a32ec7688f56eb91804ed169ef32c0af59dafa5d104dcc27a8681fb48bd9e227002f579e5999b68f6850c"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "fd070636b5bcb70e95619a12"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "2e2e3b7607d5ebfc9a878a1d1e60728a57c2e30e77a696c00a355c860845efdbfdc4a809c3da6f8c8b98dec6d5c2af7c07f65b18c35394f23c97a6418b96a871714e"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "5789733ead21b3110150cfe3464e1e95156ef0ddaa07b158ae"}]}, 0x22e0}, 0x1, 0x0, 0x0, 0x8000}, 0x81) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r6, r5) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="02000000"], 0x0, 0x0, 0x0}) r7 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 363.999536][T12772] binder: BINDER_SET_CONTEXT_MGR already set [ 364.005842][T12772] binder: 12768:12772 ioctl 40046207 0 returned -16 [ 364.049813][T12778] binder: 12768:12778 unknown command 2 [ 364.055763][T12778] binder: 12768:12778 ioctl c0306201 20000080 returned -22 [ 364.075923][ T32] audit: type=1800 audit(1588962315.492:24): pid=12780 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16174 res=0 18:25:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={r5, 0x70, "2086bba5d2d93a3f31e69695b2ad14cb395490af28ba601c86a96482d50e5120d8397e208cc6231f2d084e4b078c91368c8b6f8fd408be39c7db148af16d63e915e94987f6743c7e897c76eee1243d5750c20db592d849d4879b34ff9a1c4ed3edf3e0a0405638420f3e3322a309f3b6"}, &(0x7f0000000100)=0x78) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r6, 0xd06, 0x4}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="2dce1143"], 0x0, 0x0, 0x0}) r7 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) [ 364.097080][ T32] audit: type=1804 audit(1588962315.502:25): pid=12780 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir845802160/syzkaller.v0bWxN/106/file0/file0" dev="sda1" ino=16174 res=1 [ 364.105549][T12772] binder: 12768:12772 unknown command 0 [ 364.128372][T12772] binder: 12768:12772 ioctl c0306201 20000280 returned -22 18:25:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) pipe(0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) [ 364.445330][T12772] binder: BINDER_SET_CONTEXT_MGR already set [ 364.451921][T12772] binder: 12768:12772 ioctl 40046207 0 returned -16 [ 364.475107][T12778] binder: 12768:12778 unknown command 2 [ 364.481547][T12778] binder: 12768:12778 ioctl c0306201 20000080 returned -22 18:25:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 364.497860][T12792] binder: 12768:12792 unknown command 0 [ 364.503772][T12792] binder: 12768:12792 ioctl c0306201 20000280 returned -22 18:25:16 executing program 3: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) socketpair(0x18, 0x5, 0x3, &(0x7f0000000080)) [ 364.583029][T12793] binder: 12790:12793 unknown command 1125240365 [ 364.591180][T12793] binder: 12790:12793 ioctl c0306201 20000200 returned -22 18:25:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 364.663201][T12793] binder: 12790:12793 unknown command 0 [ 364.668995][T12793] binder: 12790:12793 ioctl c0306201 20000280 returned -22 [ 364.710959][T12794] binder: BINDER_SET_CONTEXT_MGR already set [ 364.717388][T12794] binder: 12790:12794 ioctl 40046207 0 returned -16 18:25:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) sync_file_range(r0, 0x7, 0x6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440", @ANYRES32], 0x0, 0x0, 0x0}) 18:25:16 executing program 0: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20048055) r7 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r9, 0xb03, 0x0, 0x0, {0x7}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0xffffffffffffff80}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x6}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000129bd7000fedbdf25110000001c00018007000600646800000800090049000000060001000200000024756c923c17aa49a9e298f1f8cf44277474a3d291e4774e8ca6852de465114caabf76df892da93127c77c2096a9fe74ee46c816fa8ab5a19937b73330b6eebf439c41ef64af33bad29d5c2180ca00d991df0a7723dfe9dda82948738cae34894bb53a0a36df56e1157a719a06aa8f7a8a"], 0x30}}, 0x80) 18:25:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 365.262231][T12814] binder: 12809:12814 unknown command 536872192 [ 365.268758][T12814] binder: 12809:12814 ioctl c0306201 20000280 returned -22 18:25:16 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) pipe(0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) 18:25:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 365.377409][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.431663][T12819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48423 sclass=netlink_route_socket pid=12819 comm=syz-executor.0 18:25:16 executing program 3: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) getpeername(r3, &(0x7f00000002c0)=@nfc, &(0x7f0000000100)=0x80) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff9000/0x4000)=nil) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500000008000000760000ec7b1c1b0b59acabe525ae000000000027000000fdffff029500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 365.559620][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.602155][T12815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48423 sclass=netlink_route_socket pid=12815 comm=syz-executor.0 18:25:17 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/323], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x28, r4, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x68, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8000}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0x4}}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0xc810}, 0x4000000) 18:25:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000008000000f600000000000020aad9f7310d5a300395000000000000005889e0fe737c630e7442e7dbd1aeff6cd42d9e6e081d2d148d0bad73923b8e9bb82aaed2f7963e9a9ef2af1500"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa4, &(0x7f00000003c0)=""/164, 0x41100, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x74) [ 365.847406][T12831] binder: 12829:12831 unknown command 0 [ 365.853395][T12831] binder: 12829:12831 ioctl c0306201 20000280 returned -22 [ 365.906781][T12835] binder_alloc: 12829: binder_alloc_buf, no vma [ 365.953828][T12836] binder: 12829:12836 ioctl c01064c7 20000140 returned -22 [ 365.993199][T12838] binder: 12833:12838 unknown command 0 [ 365.999043][T12838] binder: 12833:12838 ioctl c0306201 20000280 returned -22 18:25:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 366.136339][T12831] binder: 12829:12831 unknown command 114 [ 366.142613][T12831] binder: 12829:12831 ioctl c0306201 20000280 returned -22 [ 366.153602][T12839] binder: 12833:12839 unknown command 0 [ 366.159722][T12839] binder: 12833:12839 ioctl c0306201 20000280 returned -22 [ 366.170502][T12835] binder: 12829:12835 ioctl c01064c7 20000140 returned -22 [ 366.266793][T12845] binder: 12840:12845 unknown command 0 [ 366.272947][T12845] binder: 12840:12845 ioctl c0306201 20000280 returned -22 [ 366.333053][T12848] binder_alloc: 12840: binder_alloc_buf, no vma 18:25:17 executing program 3: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:25:17 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x4}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0xc}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040010}, 0x40000) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 366.398973][T12854] binder: 12840:12854 unknown command 0 [ 366.405727][T12854] binder: 12840:12854 ioctl c0306201 20000280 returned -22 [ 366.410318][T12845] binder: BINDER_SET_CONTEXT_MGR already set [ 366.419189][T12845] binder: 12840:12845 ioctl 40046207 0 returned -16 18:25:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) 18:25:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) recvfrom(r0, &(0x7f0000000080)=""/214, 0xd6, 0x10060, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:25:18 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) pipe(0x0) close(0xffffffffffffffff) [ 366.879615][T12860] binder: 12858:12860 unknown command 0 [ 366.885558][T12860] binder: 12858:12860 ioctl c0306201 20000280 returned -22 18:25:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x37b, 0x280000000000, 0x3, 0x0, 0x7, 0x4, 0x2, 0x0, 0xfb, 0x5c, 0x7, 0x2, 0x80000000, 0x4, 0x7, 0xfffffffffffffc01], 0x2, 0xc2}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000880000000000000027000000fdffff029500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 366.999892][T12867] binder: 12858:12867 unknown command 0 [ 367.005736][T12867] binder: 12858:12867 ioctl c0306201 20000280 returned -22 18:25:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) close(r0) 18:25:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:18 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="14630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 367.393813][T12878] binder: 12876:12878 unknown command 0 [ 367.399619][T12878] binder: 12876:12878 ioctl c0306201 20000280 returned -22 [ 367.467409][T12882] binder_alloc: 12876: binder_alloc_buf, no vma [ 367.487900][T12878] binder: 12876:12878 ioctl 4090ae82 20000080 returned -22 [ 367.543836][T12882] binder: BINDER_SET_CONTEXT_MGR already set [ 367.550115][T12882] binder: 12876:12882 ioctl 40046207 0 returned -16 [ 367.569552][T12887] binder: 12876:12887 unknown command 114 [ 367.575724][T12887] binder: 12876:12887 ioctl c0306201 20000280 returned -22 [ 367.604462][T12882] binder: 12876:12882 ioctl 4090ae82 20000080 returned -22 18:25:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="041a0440"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04f97941b2bcc40b3db7e89f51b30bb22f65d500"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x9) r6 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) write$UHID_CREATE(r6, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000080)=""/49, 0x31, 0xa, 0x21d, 0x0, 0xd8, 0x3}}, 0xfffffee9) [ 367.659724][T12890] binder: 12886:12890 unknown command 1074029332 [ 367.667573][T12890] binder: 12886:12890 ioctl c0306201 20000200 returned -22 18:25:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) close(r0) [ 367.715298][T12894] binder: 12886:12894 unknown command 0 [ 367.721378][T12894] binder: 12886:12894 ioctl c0306201 20000280 returned -22 [ 367.847942][T12894] binder: 12886:12894 unknown command 0 [ 367.854015][T12894] binder: 12886:12894 ioctl c0306201 20000280 returned -22 18:25:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000fdff1de2404a0000000000002220294c837d26ea10e7b6afe6eb9a69f9302e870765534da4b5396d38abb4ec8bb98f01068de6af0cd6346a9b3dce6eb96a1a04c7e2e7b44cd52958c6666e70d628dba281fcd58ebb8c09477c14fe1cc44ba3028cbbae614a7b6c087c5365"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:25:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 368.025568][T12900] binder: 12897:12900 unknown command 1074010628 [ 368.032306][T12900] binder: 12897:12900 ioctl c0306201 20000200 returned -22 18:25:19 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="ee76920081d27f7f473b211f1a7a0cb458115d3415a4bb05ec96449a46535d4667b5615e6609fecbe7511b9801ee60b3e2924716f4546011c190d3ebde10b71fe85256628a965dc85b78d0754435eea0a71428ac6b5b8dbcfe86833df9d2b5b07297e00fa16ed9bede1df69f5dc62958f3e86239db2ae6ca8eed444c5eb2b6cd187987ae439d37d412936d9e81af51c5d3e6c2da80"], 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x1, 0x100, 0x6, 0x1, 0x4}, 0x14) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 368.067113][T12900] binder: BINDER_SET_CONTEXT_MGR already set [ 368.073385][T12900] binder: 12897:12900 ioctl 40046207 0 returned -16 [ 368.096331][T12900] binder: 12897:12900 unknown command 1098512644 [ 368.103253][T12900] binder: 12897:12900 ioctl c0306201 20000200 returned -22 18:25:19 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) pipe(0x0) close(0xffffffffffffffff) [ 368.115030][T12900] binder: BINDER_SET_CONTEXT_MGR already set [ 368.121424][T12900] binder: 12897:12900 ioctl 40046207 0 returned -16 [ 368.128641][T12900] binder: 12897:12900 unknown command 33554432 [ 368.135335][T12900] binder: 12897:12900 ioctl c0306201 20000280 returned -22 [ 368.179282][T12903] binder: 12897:12903 ioctl 40045569 9 returned -22 [ 368.204431][T12903] binder: 12897:12903 unknown command 114 [ 368.210641][T12903] binder: 12897:12903 ioctl c0306201 20000280 returned -22 [ 368.274667][T12900] binder: 12897:12900 unknown command 1074010628 [ 368.281421][T12900] binder: 12897:12900 ioctl c0306201 20000200 returned -22 [ 368.300888][T12903] binder: BINDER_SET_CONTEXT_MGR already set [ 368.307292][T12903] binder: 12897:12903 ioctl 40046207 0 returned -16 18:25:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) close(r0) [ 368.387940][T12906] binder: BINDER_SET_CONTEXT_MGR already set [ 368.394630][T12906] binder: 12897:12906 ioctl 40046207 0 returned -16 18:25:19 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x0, @ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @rc={0x1f, @fixed={[], 0x11}, 0xff}, @xdp={0x2c, 0x1, 0x0, 0x1b}, 0xfff, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)='veth0_to_batadv\x00', 0x1, 0x8, 0x3eda}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x9, &(0x7f00000000c0)=@raw=[@map={0x18, 0x6, 0x1, 0x0, r3}, @jmp={0x5, 0x0, 0x2, 0x8, 0x8, 0x0, 0x1}, @jmp={0x5, 0x0, 0x6, 0x4, 0xb, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x66}, @call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x4000004c}, @call={0x85, 0x0, 0x0, 0x6b}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 368.431492][T12900] binder: 12897:12900 unknown command 114 [ 368.437458][T12900] binder: 12897:12900 ioctl c0306201 20000280 returned -22 [ 368.550047][T12915] binder: 12908:12915 unknown command 9598702 [ 368.556708][T12915] binder: 12908:12915 ioctl c0306201 20000200 returned -22 [ 368.596105][T12915] binder: 12908:12915 unknown command 0 [ 368.602196][T12915] binder: 12908:12915 ioctl c0306201 20000280 returned -22 18:25:20 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000000800000076d2d000000000002700000000000003eb44698ce609000000000000000000ae6f0f86ded12ad360a7921d8cf47bcaa5bcf31b936d2d1516bee3168bba3a424df3934e420161ad4db1b5fc56a025a464b68268a96edb03966c7ad29f482a"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x101080, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40047703, 0x8) [ 368.799991][T12923] binder: 12908:12923 unknown command 9598702 [ 368.806561][T12923] binder: 12908:12923 ioctl c0306201 20000200 returned -22 18:25:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x0, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 368.889783][T12924] binder: 12921:12924 unknown command 0 [ 368.895858][T12924] binder: 12921:12924 ioctl c0306201 20000280 returned -22 18:25:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 368.931328][T12924] binder_alloc: 12921: binder_alloc_buf, no vma 18:25:20 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 368.994031][T12924] binder: 12921:12924 unknown command 0 [ 369.000518][T12924] binder: 12921:12924 ioctl c0306201 20000280 returned -22 [ 369.016733][T12926] binder_alloc: 12921: binder_alloc_buf, no vma 18:25:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc044560f, &(0x7f0000000080)={0x9, 0x6, 0x4, 0x20000, 0x1, {0x77359400}, {0x1, 0xc, 0x81, 0x40, 0x1f, 0x0, "f23a70d5"}, 0x8, 0x4, @offset, 0xf7d, 0x0, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:25:20 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x16}, @jmp={0x5, 0x0, 0x9, 0x3, 0x3, 0x0, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x1, 0x6, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}, 0x38) [ 369.413404][T12944] binder: 12940:12944 unknown command 0 [ 369.419349][T12944] binder: 12940:12944 ioctl c0306201 20000280 returned -22 18:25:20 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) pipe(0x0) [ 369.478540][T12945] binder_alloc: 12940: binder_alloc_buf, no vma 18:25:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x0, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 369.522965][T12946] binder: 12940:12946 ioctl c044560f 20000080 returned -22 18:25:21 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 369.649330][T12946] binder: 12940:12946 unknown command 114 [ 369.656736][T12946] binder: 12940:12946 ioctl c0306201 20000280 returned -22 [ 369.671170][T12945] binder: BINDER_SET_CONTEXT_MGR already set [ 369.677501][T12945] binder: 12940:12945 ioctl 40046207 0 returned -16 [ 369.724988][T12949] binder: 12940:12949 ioctl c044560f 20000080 returned -22 [ 369.952239][T12961] binder: 12954:12961 unknown command 0 [ 369.958124][T12961] binder: 12954:12961 ioctl c0306201 20000280 returned -22 18:25:21 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x8d, &(0x7f0000000180)=""/141, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:25:21 executing program 3: r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x404280, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r5, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5b2}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x3}, {0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x841) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:25:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) 18:25:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x0, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:21 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:22 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000007600000000000000274ae5446db0e72e6e98000000000000039500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:25:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760040000000000027000000fdffff029500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 370.684877][T12983] binder: 12981:12983 unknown command 0 [ 370.690876][T12983] binder: 12981:12983 ioctl c0306201 20000280 returned -22 18:25:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x0, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:22 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) pipe(0x0) [ 370.795222][T12984] binder: 12981:12984 unknown command 0 [ 370.801671][T12984] binder: 12981:12984 ioctl c0306201 20000280 returned -22 18:25:22 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2fe2486b40"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:22 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000100)=0xe55, &(0x7f0000000140)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='wlan0vmnet1user\x00', r0}, 0x10) 18:25:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x3, &(0x7f0000000080)=@raw=[@generic={0x2, 0xf, 0x7, 0x9, 0xf9d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:25:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 371.384875][T13001] binder: 12999:13001 unknown command 1799938607 [ 371.391963][T13001] binder: 12999:13001 ioctl c0306201 20000200 returned -22 [ 371.427707][T13001] binder: 12999:13001 unknown command 0 [ 371.434210][T13001] binder: 12999:13001 ioctl c0306201 20000280 returned -22 18:25:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x0, "", ["", "", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 371.549898][T13009] binder: 12999:13009 unknown command 1799938607 [ 371.556871][T13009] binder: 12999:13009 ioctl c0306201 20000200 returned -22 18:25:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x2, &(0x7f0000000080)=@raw=[@map={0x18, 0x5863e2282c696aed, 0x1, 0x0, r2}], &(0x7f0000000040)='syzkaller\x00', 0x7b, 0x99, &(0x7f00000000c0)=""/153, 0x41100, 0x1c81a2a185ce083b, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 371.597995][T13010] binder: 12999:13010 unknown command 0 [ 371.604135][T13010] binder: 12999:13010 ioctl c0306201 20000280 returned -22 18:25:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x2, 0x0}) mq_timedreceive(r2, &(0x7f0000000240)=""/4096, 0x1000, 0x8001, &(0x7f0000000080)) 18:25:23 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="ed5384c470135212b5b1ce5b860e630640"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 371.948329][T13018] binder: 13015:13018 unknown command 0 [ 371.954347][T13018] binder: 13015:13018 ioctl c0306201 20000280 returned -22 18:25:23 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) pipe(0x0) [ 372.012171][T13022] binder_alloc: 13015: binder_alloc_buf, no vma [ 372.081046][T13018] binder: BINDER_SET_CONTEXT_MGR already set [ 372.087360][T13018] binder: 13015:13018 ioctl 40046207 0 returned -16 [ 372.095769][T13022] binder: 13015:13022 unknown command 114 [ 372.102584][T13022] binder: 13015:13022 ioctl c0306201 20000280 returned -22 [ 372.117197][T13027] binder: 13020:13027 unknown command 114 [ 372.123532][T13027] binder: 13020:13027 ioctl c0306201 200000c0 returned -22 [ 372.145449][T13026] binder: 13021:13026 unknown command -997960723 [ 372.152468][T13026] binder: 13021:13026 ioctl c0306201 20000200 returned -22 18:25:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x0, "", ["", "", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 372.192866][T13031] binder: 13021:13031 unknown command 0 [ 372.198754][T13031] binder: 13021:13031 ioctl c0306201 20000280 returned -22 [ 372.263205][T13031] binder: 13021:13031 unknown command -997960723 [ 372.269893][T13031] binder: 13021:13031 ioctl c0306201 20000200 returned -22 [ 372.287960][T13027] binder: 13020:13027 unknown command 114 [ 372.294112][T13027] binder: 13020:13027 ioctl c0306201 200000c0 returned -22 [ 372.315991][T13032] binder: 13021:13032 unknown command 0 [ 372.322056][T13032] binder: 13021:13032 ioctl c0306201 20000280 returned -22 18:25:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000000760000000000000027008000fdffff029500"/32], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = getpid() r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x11, &(0x7f0000000100)) prctl$PR_SET_PTRACER(0x59616d61, r1) r3 = gettid() r4 = getpid() r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x11, &(0x7f0000000100)) rt_tgsigqueueinfo(r4, r3, 0x33, &(0x7f0000000100)={0x2f, 0x0, 0x9}) ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)) 18:25:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000007602000000000000270000000000000395000000bb883ef30b00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:25:23 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="64a8223e0c77237911eea2f97dfe60c63582f243c5b5c8fb5150c6471a6d133246958772330b1c995bf1980c9e3eaea5b3b812d8653539639084912bb225991d2d28bc8997aefa47fae867ff2b65ea07d5f2197f291e8f9ad1885e5706f206b7beb0f2169d999a4902473465d4256ed5e05f0ef74371cec1918f50f3e5090b6fd1e78077676491844a5051f3aa6ba8cda111eda98d89fb4cccc6ba63c397a4943f54ecd232897433b12d41bc082673065a4c7877611af762ffa9edcbd5a3ec8d84f54ba53622706cfa"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) 18:25:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x0, "", ["", "", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 372.843662][T13048] binder: 13047:13048 unknown command 1042458724 [ 372.850504][T13048] binder: 13047:13048 ioctl c0306201 20000200 returned -22 [ 372.898205][T13050] binder: 13047:13050 unknown command 0 [ 372.904664][T13050] binder: 13047:13050 ioctl c0306201 20000280 returned -22 18:25:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00fff400"], 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:device_t:s0\x00', 0x1e, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$sock_ifreq(r4, 0x8947, &(0x7f0000000240)={'virt_wifi0\x00', @ifru_flags=0x400}) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000080)=""/86) 18:25:24 executing program 0: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x5c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 373.022993][T13050] binder: 13047:13050 unknown command 1042458724 [ 373.029645][T13050] binder: 13047:13050 ioctl c0306201 20000200 returned -22 [ 373.094394][T13054] binder: 13047:13054 unknown command 0 [ 373.100570][T13054] binder: 13047:13054 ioctl c0306201 20000280 returned -22 18:25:24 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:24 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) close(0xffffffffffffffff) [ 373.419945][T13063] binder: BINDER_SET_CONTEXT_MGR already set [ 373.426355][T13063] binder: 13057:13063 ioctl 40046207 0 returned -16 [ 373.465350][T13065] binder: 13057:13065 unknown command 16056064 [ 373.472672][T13065] binder: 13057:13065 ioctl c0306201 20000280 returned -22 [ 373.509811][ T32] audit: type=1400 audit(1588962324.923:26): avc: denied { relabelto } for pid=13057 comm="syz-executor.3" name="NETLINK" dev="sockfs" ino=38813 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=netlink_route_socket permissive=1 [ 373.542524][T13063] binder: 13057:13063 ioctl 80404532 20000080 returned -22 18:25:25 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000800000076000000000000002700000000000003950000fcffffff00"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 373.586323][T13068] binder: 13067:13068 unknown command 0 [ 373.592931][T13068] binder: 13067:13068 ioctl c0306201 20000280 returned -22 18:25:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x0, "", ["", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 373.646967][T13063] binder: 13057:13063 unknown command 16056064 [ 373.653850][T13063] binder: 13057:13063 ioctl c0306201 20000280 returned -22 [ 373.662947][T13071] binder: 13067:13071 ioctl 4b64 20000080 returned -22 [ 373.676298][T13070] binder: 13057:13070 ioctl 80404532 20000080 returned -22 [ 373.689343][T13068] binder: 13067:13068 unknown command 0 [ 373.695611][T13068] binder: 13067:13068 ioctl c0306201 20000280 returned -22 [ 373.754240][T13068] binder: BINDER_SET_CONTEXT_MGR already set [ 373.755057][T13072] binder: 13067:13072 unknown command 0 [ 373.760463][T13068] binder: 13067:13068 ioctl 40046207 0 returned -16 [ 373.773293][T13072] binder: 13067:13072 ioctl c0306201 20000280 returned -22 [ 373.799436][T13071] binder: 13067:13071 ioctl 4b64 20000080 returned -22 18:25:25 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x200000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0xa, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x200}, @alu={0x7, 0x1, 0xd, 0x7, 0x9, 0x40, 0x10}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xc26}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x0, 0xa, 0x8, 0x6, 0xfffffffffffffffc, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @generic={0x6, 0xa, 0x2, 0x3, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000080)) 18:25:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) 18:25:25 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 374.162466][T13087] binder: 13086:13087 unknown command 0 [ 374.168437][T13087] binder: 13086:13087 ioctl c0306201 20000280 returned -22 [ 374.187439][T13087] binder_alloc: 13086: binder_alloc_buf, no vma [ 374.200877][T13087] binder: BINDER_SET_CONTEXT_MGR already set [ 374.207667][T13087] binder: 13086:13087 ioctl 40046207 0 returned -16 [ 374.218465][T13087] binder: BINDER_SET_CONTEXT_MGR already set [ 374.225261][T13087] binder: 13086:13087 ioctl 40046207 0 returned -16 [ 374.253026][T13087] binder: 13086:13087 unknown command 114 [ 374.259105][T13087] binder: 13086:13087 ioctl c0306201 20000280 returned -22 [ 374.268847][T13087] binder: 13086:13087 ioctl 8004ae98 20000080 returned -22 18:25:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x0, "", ["", "", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 374.294879][T13087] binder: 13086:13087 unknown command 114 [ 374.301060][T13087] binder: 13086:13087 ioctl c0306201 20000280 returned -22 [ 374.327378][T13089] binder: BINDER_SET_CONTEXT_MGR already set [ 374.333907][T13089] binder: 13086:13089 ioctl 40046207 0 returned -16 [ 374.368896][T13090] binder: BINDER_SET_CONTEXT_MGR already set [ 374.369199][T13091] binder: 13086:13091 unknown command 114 [ 374.375841][T13090] binder: 13086:13090 ioctl 40046207 0 returned -16 [ 374.381380][T13091] binder: 13086:13091 ioctl c0306201 20000280 returned -22 [ 374.425776][T13093] binder: 13086:13093 ioctl 8004ae98 20000080 returned -22 [ 374.475639][T13094] binder: 13092:13094 unknown command 0 [ 374.481635][T13094] binder: 13092:13094 ioctl c0306201 20000280 returned -22 [ 374.528003][T13097] binder: 13092:13097 unknown command 0 [ 374.535940][T13097] binder: 13092:13097 ioctl c0306201 20000280 returned -22 18:25:26 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) sendto$llc(r3, &(0x7f00000002c0)="ebd4d06cd8b6f4fe6b3f33a3ce5110197c390b6b757fbf44596972bebfb48cbb82bfb8f58c723a4346ec9659da8a14a8b27b9bc57fd2228a0b123502224647454d659fef6dfe0e9718112daa74b56d09725e660a69ee53d1f290fa1b37a155ee7a9c401ba351a2868d12b336137f8354f38b2ee5bf3d9030f902770dcc86f7b4658fe2384acd6a5ee14b51b7e54e9972c5dfb581befe0493d1beee67cca2e3c1618b33aa", 0xa4, 0x44094, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="045f0440"], 0x0, 0x0, 0x0}) r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8400, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x6}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008090) r5 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) 18:25:26 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000800000076000000c04e4c3852fc32fc00"/32], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) sysfs$2(0x2, 0x9, &(0x7f0000000400)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f00000003c0)={0x2, 0x7fff, 0x6, 0x2, 0x9}) r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$TCSETXF(r5, 0x5434, &(0x7f0000000240)={0x9, 0x9, [0x858, 0x7f, 0x0, 0x9], 0x9}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000ffff1500010000000000000000000a0000004008d59e910f866de457", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000000000000000000000000aa14000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={0x0, r5, 0x18}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r6 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000010) 18:25:26 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) close(0xffffffffffffffff) [ 374.967049][T13106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46808 sclass=netlink_route_socket pid=13106 comm=syz-executor.1 18:25:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x0, "", ["", ""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 375.020019][T13108] binder: 13101:13108 unknown command 1074028292 [ 375.026748][T13108] binder: 13101:13108 ioctl c0306201 20000200 returned -22 [ 375.081162][T13106] binder: 13101:13106 unknown command 1986356271 [ 375.087633][T13106] binder: 13101:13106 ioctl c0306201 20000280 returned -22 [ 375.099460][T13110] binder: 13107:13110 unknown command 0 [ 375.105452][T13110] binder: 13107:13110 ioctl c0306201 20000200 returned -22 [ 375.154510][T13110] binder: 13107:13110 unknown command 114 [ 375.160832][T13110] binder: 13107:13110 ioctl c0306201 20000280 returned -22 [ 375.162007][T13108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46808 sclass=netlink_route_socket pid=13108 comm=syz-executor.1 [ 375.173807][T13110] binder: 13107:13110 ioctl c01864b0 200003c0 returned -22 [ 375.306924][T13110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=13110 comm=syz-executor.3 [ 375.371297][T13110] binder: 13107:13110 unknown command 0 [ 375.377081][T13110] binder: 13107:13110 ioctl c0306201 20000200 returned -22 [ 375.407581][T13118] binder: 13107:13118 unknown command 114 [ 375.414759][T13118] binder: 13107:13118 ioctl c0306201 20000280 returned -22 [ 375.439397][T13123] binder: 13107:13123 ioctl c01864b0 200003c0 returned -22 18:25:26 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) 18:25:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000080)={0x55, 0x13, &(0x7f0000000240)="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"}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:25:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x0, "", [""]}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 375.828440][T13130] binder: 13129:13130 unknown command 4 [ 375.834276][T13130] binder: 13129:13130 ioctl c0306201 20000200 returned -22 [ 375.912411][T13133] binder: 13129:13133 unknown command 0 [ 375.918270][T13133] binder: 13129:13133 ioctl c0306201 20000280 returned -22 [ 375.994435][T13133] binder: 13129:13133 unknown command 4 [ 376.000279][T13133] binder: 13129:13133 ioctl c0306201 20000200 returned -22 [ 376.050712][T13136] binder: 13129:13136 unknown command 0 [ 376.056445][T13136] binder: 13129:13136 ioctl c0306201 20000280 returned -22 [ 376.057392][T13137] binder: 13135:13137 unknown command 0 [ 376.069910][T13137] binder: 13135:13137 ioctl c0306201 20000280 returned -22 [ 376.089386][T13137] binder_alloc: 13135: binder_alloc_buf, no vma 18:25:27 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x0) close(0xffffffffffffffff) [ 376.110436][T13137] binder: 13135:13137 ioctl 4b6c 20000080 returned -22 18:25:27 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000080)={0x2}) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x4008100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 376.475771][T13137] binder: BINDER_SET_CONTEXT_MGR already set [ 376.482178][T13137] binder: 13135:13137 ioctl 40046207 0 returned -16 [ 376.491468][T13140] binder: 13135:13140 unknown command 114 [ 376.497392][T13140] binder: 13135:13140 ioctl c0306201 20000280 returned -22 [ 376.534322][T13148] binder: 13135:13148 ioctl 4b6c 20000080 returned -22 18:25:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x181080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x8c, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "74dcfb3f1f"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f84490c9fe1a4e4800443e976a"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="cd20c7ab9d0c"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a41350f00"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) getpeername$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000340)=0x1c) [ 376.909688][T13154] binder: BINDER_SET_CONTEXT_MGR already set [ 376.916244][T13154] binder: 13151:13154 ioctl 40046207 0 returned -16 18:25:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(0xffffffffffffffff) [ 377.070569][T13158] binder: 13151:13158 ioctl ae71 20000080 returned -22 [ 377.078561][T13154] binder: 13151:13154 ioctl 5646 0 returned -22 18:25:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:28 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r4 = getpid() r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x11, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000000c0)={{0x5, 0x2, 0xffffffff, 0x3, 'syz0\x00', 0x3b}, 0x5, 0x2, 0x200, r4, 0x2, 0x6, 'syz0\x00', &(0x7f0000000080)=['nl80211\x00', '/dev/binder#\x00'], 0x15, [], [0x2, 0x8001, 0xd1, 0x8]}) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:28 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(0xffffffffffffffff) 18:25:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000440)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x4, 0x8, "21c1a6324080f7b14a6f2c90c0cb4f8045495263cfa7df99e97972274dd333f3d7398b8559f18571c1bd1be0e599c1fd1a846d5d079ec97fa984d47ec7dc75", 0x31}, 0x80) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ftruncate(r3, 0x400) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f0000000300)) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) r5 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @loopback, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="780000006500000127bd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="e0ff07000300060002000a0008000100753332001c00020010000a0006000000890000000000000008000200000000000600050008ff000006000500d201000008000b000100010008000b00f9ffffff08000b000900000008000b00401f0000df25da4012716ff755b66ad7ff7488aee2019f6da236175e7143ce25c95575d9adfa685919b7"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x54089) r7 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="40005c18bd37eafa7b1cf5b3c0a7a697ab0f17c3b8028fe4d684ad6493e79fd1f2c67300d6c97567a44278c78ea6ac77e64c3d1a86ba7802c3d59e7e7d1168d3d78f5608ecd7efdf6dfb3dfd0b20c5f259f305be0a6c1e7997d8037c63dc6f44f05d4fc4a00056d756dfbcbc604bca26d1778b60e1"], 0x12) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r4, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000009}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0xb, [], r4, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 377.641641][T13172] binder: BINDER_SET_CONTEXT_MGR already set [ 377.648079][T13172] binder: 13171:13172 ioctl 40046207 0 returned -16 18:25:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:29 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x68001) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) dup2(r3, r2) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0}) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000140)={0xe7e1, 0x1e, [{0xd, 0x1}, {0x2, 0x1}, {0x9}, {0x9}, {0xd}, {0x1}, {0xe, 0x1}, {0xa, 0x1}, {0x9}, {0xb}, {0x8, 0x1}, {0xe, 0x1}, {0x7}, {0x7, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0xa, 0x1}, {0x1}, {0xe, 0x1}, {0x1}, {0x7}, {0xb}, {0x5, 0x1}, {0xa, 0x1}, {0x9}, {0x4, 0x1}, {0x5}, {0xa, 0x1}, {0x8, 0x1}, {0x5}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vimc0(0xffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r6, 0xc0305615, &(0x7f0000000100)={0x0, {0x20, 0x8001}}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001600010000000000000000000a000000", @ANYBLOB="165745b7494bdf3a410c4d22b08886aea5b7e74973e4d6df89ab10713e6563fc89a9111f3f8d27d7595189795e38ba79c02003181d45d73d527a2e90d4a9c26193390febb80ebcb0b93830e292cd14bdf2121e0a7777d82f3d5f", @ANYRESOCT], 0x40}}, 0x0) r7 = dup2(r5, r0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140000aa140002005321e822183ae6abc2b7eeab987fdfd2fe802488c018754d0000000000000000"], 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r8], 0x0, 0x0, 0x0}) 18:25:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(0xffffffffffffffff) 18:25:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000761000000000000027000000fdffff029500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x3, 0x0, [{0x80000019, 0xfffffffd, 0x7, 0x4, 0x10000}, {0x0, 0x5, 0x2, 0x4, 0x9}, {0x0, 0x6, 0x401, 0x200, 0x2}]}) 18:25:30 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 378.529784][T13205] binder: 13202:13205 unknown command 114 [ 378.536044][T13205] binder: 13202:13205 ioctl c0306201 20000280 returned -22 [ 378.551871][T13206] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.567409][T13194] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.585336][T13205] binder: 13202:13205 ioctl 4008ae8a 20000080 returned -22 [ 378.623769][T13198] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 18:25:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 378.661183][T13207] binder: 13202:13207 unknown command 114 [ 378.667252][T13207] binder: 13202:13207 ioctl c0306201 20000280 returned -22 18:25:30 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000080)={0x7, 'geneve1\x00', {0xfffeffff}, 0x7ff}) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) sendmsg$unix(r2, &(0x7f0000000440)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)="25fd5e3be9b89c31ee5471a087248629b3d09b172e38c0cb093f786b32834934150f660e2b595e868520754370186f4f3b5bfee776f46ce258542884875a7788ea131e2552135cf7bbf48916a14347472a3ad2d2f0260d0686", 0x59}, {&(0x7f00000001c0)="5059a78aea7a1ee5cc3c0ef642be8d625c35a6ca9e5e0a8609a9a785d12252d197", 0x21}, {&(0x7f00000002c0)="3794234ca9938b10802ae9b0cdbdc3b55eeddd9f3cd882d180185387dce3fce34ea9644accaf04c02d5a1b236f535be973b8779c31ef719db6886bf74008c9c23ab57f8c2b3dd6c4f37ddcacf01f7a133c5822a155836c280739b5842760e27359471b53cc5732bed2de74a0f9d5f47f01d0908068340f3b37ca109873bad694b95505ff715af7689b9b3949d98dada29de1fca0204674b5055c0c7d572b8261397531159b3a78ef65eb1535b936b3222db6133c7a8d87f865da10599ecd56809b844dd4ba6998b955ccea45477fe1f34f485ed5a57e6c74ea48b2ef6fc900f7b31fa74b886e9ab13aef13c02ca8d7d95173ed3c651238e6", 0xf8}], 0x3, &(0x7f0000000400), 0x0, 0x20000890}, 0x8410) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x1}], 0x0, 0x2, 0x0}) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000240)=""/4096) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x0, 0xfffffffb}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:25:30 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:30 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 379.187316][T13221] binder: 13217:13221 unknown command 0 [ 379.193553][T13221] binder: 13217:13221 ioctl c0306201 20000280 returned -22 18:25:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 379.227550][T13223] binder: 13220:13223 unknown command 0 [ 379.233694][T13223] binder: 13220:13223 ioctl c0306201 20000280 returned -22 [ 379.297162][T13225] binder: 13217:13225 unknown command 0 [ 379.297367][T13227] binder: 13220:13227 ioctl c048ae65 20000080 returned -22 [ 379.303088][T13225] binder: 13217:13225 ioctl c0306201 20000280 returned -22 [ 379.338351][T13228] binder: 13220:13228 ioctl 4b69 20000240 returned -22 [ 379.398187][T13223] binder: BINDER_SET_CONTEXT_MGR already set [ 379.404612][T13223] binder: 13220:13223 ioctl 40046207 0 returned -16 [ 379.414331][T13227] binder: 13220:13227 unknown command 114 [ 379.420969][T13227] binder: 13220:13227 ioctl c0306201 20000280 returned -22 [ 379.444399][T13228] binder: 13220:13228 ioctl c048ae65 20000080 returned -22 [ 379.452807][T13231] binder: 13220:13231 ioctl 4b69 20000240 returned -22 18:25:31 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001600010040000000000000000a000000afa857068502d835e376fb11208a909e025526e32a4c0dec47e5375c3bf1f6e2c3", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000000000000000000000000aa14000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x1d, 0x38, r5, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r6, 0x2, 0x0, 0x25dfdbfa, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20041900}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r6, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) r7 = dup2(r1, r0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000380)) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000080)=0x6) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="16405d"], 0x0, 0x0, 0x0}) 18:25:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000240)={{0x0, 0x0, 0x80}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:25:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) 18:25:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 379.952327][T13245] binder: 13240:13245 unknown command 0 [ 379.958135][T13245] binder: 13240:13245 ioctl c0306201 20000280 returned -22 [ 379.974688][T13246] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 380.007558][T13247] binder_alloc: 13240: binder_alloc_buf, no vma [ 380.039651][T13248] binder: 13242:13248 unknown command 808482864 [ 380.046795][T13248] binder: 13242:13248 ioctl c0306201 20000200 returned -22 [ 380.053617][T13249] binder: 13240:13249 ioctl c080aebe 20000240 returned -22 [ 380.102105][T13246] binder: 13242:13246 ioctl 4004551e 20000080 returned -22 [ 380.140695][T13246] binder: 13242:13246 unknown command 6111254 [ 380.147095][T13246] binder: 13242:13246 ioctl c0306201 20000280 returned -22 18:25:31 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 380.256102][T13248] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 380.313080][T13251] binder: 13242:13251 ioctl 4004551e 20000080 returned -22 [ 380.390946][T13249] binder: 13240:13249 unknown command 114 [ 380.396888][T13249] binder: 13240:13249 ioctl c0306201 20000280 returned -22 [ 380.409015][T13245] binder: BINDER_SET_CONTEXT_MGR already set [ 380.415390][T13245] binder: 13240:13245 ioctl 40046207 0 returned -16 [ 380.445664][T13259] binder: 13240:13259 ioctl c080aebe 20000240 returned -22 18:25:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:32 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630474"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mknodat(r2, &(0x7f0000000240)='./file0\x00', 0x800, 0xfff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x0, 0x13, 0x17, 0x188, &(0x7f0000000540)="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"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001600010000000000000000000a000000", @ANYRESDEC=r4, @ANYBLOB="140003000000000000000000000000000000000014000200fe8000000000000000000000000000aac30ea6dc7664b63fcfaa8ac344b75a84e9c57b8d3b9125ed25"], 0x40}, 0x1, 0x0, 0x0, 0x400a0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x3, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000140)={0x7, 0x163}) 18:25:32 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) 18:25:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0xc, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x4c}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x51}, @ldst={0x0, 0x0, 0x1, 0x6, 0x6, 0xfffffffffffffff0, 0x4}, @jmp={0x5, 0x1, 0x3, 0xb, 0x6, 0x30, 0x10}, @exit, @map={0x18, 0xa, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x76f0}, @jmp={0x5, 0x0, 0x9, 0x2, 0xa, 0xfffffffffffffff0, 0xfffffffffffffff0}], &(0x7f0000000040)='GPL\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:25:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 381.055653][T13276] binder: 13273:13276 unknown command 1946444548 [ 381.062479][T13276] binder: 13273:13276 ioctl c0306201 20000200 returned -22 [ 381.081011][T13277] binder: 13275:13277 unknown command 0 [ 381.086878][T13277] binder: 13275:13277 ioctl c0306201 20000280 returned -22 [ 381.143380][T13276] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 381.155154][T13280] binder_alloc: 13275: binder_alloc_buf, no vma [ 381.175146][T13279] binder: 13273:13279 unknown command 5 [ 381.181108][T13279] binder: 13273:13279 ioctl c0306201 20000280 returned -22 [ 381.206674][T13277] binder: BINDER_SET_CONTEXT_MGR already set [ 381.213465][T13277] binder: 13275:13277 ioctl 40046207 0 returned -16 [ 381.228702][T13280] binder: 13275:13280 unknown command 0 [ 381.235048][T13280] binder: 13275:13280 ioctl c0306201 20000280 returned -22 [ 381.281654][T13283] binder: 13273:13283 ioctl 404c534a 20000140 returned -22 [ 381.338456][T13279] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 381.349802][T13283] binder: 13273:13283 unknown command 4 [ 381.356398][T13283] binder: 13273:13283 ioctl c0306201 20000280 returned -22 18:25:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1b, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x104, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0xf, r2, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffe0c) 18:25:33 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:33 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x11, &(0x7f0000000100)) r5 = getpgid(r3) rt_sigqueueinfo(r5, 0x1c, &(0x7f0000000080)={0x7, 0x9, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 381.879213][T13296] binder: 13291:13296 unknown command 0 [ 381.886200][T13296] binder: 13291:13296 ioctl c0306201 20000280 returned -22 18:25:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 381.939747][T13298] binder_alloc: 13291: binder_alloc_buf, no vma [ 381.945852][T13297] binder: 13294:13297 unknown command 809004142 [ 381.952592][T13297] binder: 13294:13297 ioctl c0306201 20000280 returned -22 [ 382.005148][T13296] binder: BINDER_SET_CONTEXT_MGR already set [ 382.011693][T13296] binder: 13291:13296 ioctl 40046207 0 returned -16 [ 382.025704][T13301] binder: 13291:13301 unknown command 114 [ 382.032112][T13301] binder: 13291:13301 ioctl c0306201 20000280 returned -22 18:25:33 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) 18:25:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000fdffff02060000000069d2f433aad15791c0da0b189631000000cca1b237aeeb530481016951558c1f4da672f62d160a6772953465ea6f213853e6e1fd66064babdc5af7695bfc59786ca9e58ea7d0fc4c58b4d4c817a99954c3d31fac1c45a06338d4afefadb0d63a2b112d0fe4efd443a1a11565890eda6049af89a216e687f3a266d1295d593e91f66220d721ad0502242a92a9d784623c47950b274ee1637397ab28dc69d11fd4d633"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:25:33 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r3 = fanotify_init(0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) fanotify_mark(r3, 0x1d, 0x38, r5, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r6, 0x2, 0x0, 0x25dfdbfa, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20041900}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}}, 0x8080) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="046304404a651f8befa9de5ed6f14c498d691eee5322cb5a08121a"], 0x0, 0x0, 0x0}) r7 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440b179b1d79bd8325237108e57d162881de8b047646342ed73e73d6ff3a44465e3fdb75e"], 0x0, 0x0, 0x0}) r8 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x842) ioctl$KVM_GET_TSC_KHZ(r8, 0xaea3) 18:25:33 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101c00, 0x2) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = getpid() r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x11, &(0x7f0000000100)) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000180)=r6) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0xfffffffffffffffe, 0x0, 0xc, &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000140)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@exit]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000080)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:25:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 382.579251][T13318] binder: 13317:13318 unknown command 1379063963 [ 382.586187][T13318] binder: 13317:13318 ioctl c0306201 20000280 returned -22 [ 382.758253][T13323] binder: 13321:13323 unknown command 0 [ 382.764817][T13323] binder: 13321:13323 ioctl c0306201 20000280 returned -22 18:25:34 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) [ 382.816798][T13325] binder_alloc: 13321: binder_alloc_buf, no vma [ 382.852058][T13323] binder: 13321:13323 ioctl ae41 0 returned -22 18:25:34 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) [ 382.917041][T13325] binder: 13321:13325 unknown command 114 [ 382.924480][T13325] binder: 13321:13325 ioctl c0306201 20000280 returned -22 [ 382.944782][T13323] binder: 13321:13323 ioctl ae41 0 returned -22 18:25:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r2, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x14, 0x9, &(0x7f0000000100)=@raw=[@generic={0x7, 0x0, 0x3, 0x7, 0x3ff}, @alu={0x4, 0x0, 0x4, 0xc, 0xe, 0xfffffffffffffffe, 0x8}, @ldst={0x2, 0x3, 0x3, 0x4, 0x0, 0x8, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x35}, @alu={0x4, 0x0, 0xd, 0x3, 0x3, 0x2, 0x10}, @alu={0x4, 0x0, 0x0, 0x3, 0x0, 0x30, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @generic={0x80, 0x2, 0xc, 0x1, 0xfffffffb}, @generic={0x1f, 0x1, 0xc, 0x7fff, 0x6}], &(0x7f0000000040)='GPL\x00', 0x4, 0x98, &(0x7f0000000180)=""/152, 0x0, 0x0, [], r2, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 383.149613][T13334] binder: 13333:13334 unknown command 0 [ 383.155782][T13334] binder: 13333:13334 ioctl c0306201 20000280 returned -22 [ 383.206468][T13335] binder: 13333:13335 unknown command 0 [ 383.212928][T13335] binder: 13333:13335 ioctl c0306201 20000280 returned -22 18:25:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 383.277574][T13334] binder: 13333:13334 ioctl 4141 0 returned -22 18:25:34 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 383.325454][T13335] binder: 13333:13335 unknown command 0 [ 383.331475][T13335] binder: 13333:13335 ioctl c0306201 20000280 returned -22 [ 383.386417][T13339] binder: 13333:13339 unknown command 0 [ 383.393555][T13339] binder: 13333:13339 ioctl c0306201 20000280 returned -22 18:25:35 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="d0"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) write$midi(r2, &(0x7f0000000080)="3b201de2b1e6c970faf4ac45fee5b399467bea433e12f413f5b1f9e2c155e71e752bc5863f20a8a3e6d1cf2cd3a908caf8b395627aef4bd30d04bc8d9fd69aabc55c2712f4362fced3ff782d06c3f001c0e99647c4dcd12edc75c7758f203f40f72d6065c4d7fc4aa87f61be4a71c9c64a6e31e53d0e9d03134bf117f3884276c66dfa9e71f542ad433d9c68cd00315de46657667ccbff9964797b556945428b78fdd307c8a89cbc1041e34a035b0dadd383806a5fc644ca604e21000953c99c6a37117c3b542b91f3f02c70857670e33be183f59d480fc8e3a3fe109436ae8a7fccf80b2cab64e6f74ffb3343571c206820bd0e63ddd6", 0xf7) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:25:35 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) fgetxattr(r0, &(0x7f0000000140)=@random={'system.', 'GPL\x00'}, &(0x7f0000000240)=""/112, 0x70) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x74) r3 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000080)=0xaad5, 0x8) [ 383.948843][T13361] binder: 13356:13361 unknown command 208 [ 383.954951][T13361] binder: 13356:13361 ioctl c0306201 20000200 returned -22 [ 383.988690][T13361] binder: 13356:13361 unknown command 0 [ 383.994663][T13361] binder: 13356:13361 ioctl c0306201 20000280 returned -22 18:25:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 384.055605][T13365] binder: 13356:13365 unknown command 208 [ 384.062103][T13365] binder: 13356:13365 ioctl c0306201 20000200 returned -22 [ 384.092766][T13365] binder: 13356:13365 unknown command 0 [ 384.098685][T13365] binder: 13356:13365 ioctl c0306201 20000280 returned -22 [ 384.109339][T13366] binder: 13362:13366 unknown command 0 [ 384.116125][T13366] binder: 13362:13366 ioctl c0306201 20000280 returned -22 18:25:35 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:35 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x1002) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05610440"], 0x0, 0x0, 0x0}) [ 384.317873][T13366] binder: BINDER_SET_CONTEXT_MGR already set [ 384.324909][T13366] binder: 13362:13366 ioctl 40046207 0 returned -16 [ 384.375076][T13372] binder: 13362:13372 unknown command 114 [ 384.381135][T13372] binder: 13362:13372 ioctl c0306201 20000280 returned -22 18:25:35 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 384.681494][T13383] binder: 13379:13383 unknown command 1074028805 [ 384.688141][T13383] binder: 13379:13383 ioctl c0306201 20000280 returned -22 18:25:36 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="85000000080000007600000000000000270000000000000395000000000000002c1ad5e24cd442548536811c6e35430334b1ac0a4c99055c5b48c6b4f8215f2388407e7b53ec9d41cafd3e001de74a44146407907d0c96990572cfe9e3e86552d8840806e0036e8c12700cc621a354a01a7646dea8f6eb7e15eb8ba438b4525854dde8406d343437833f7e4d5cf895db5bac3bb8e103a18d63d4b993c9132716c40dbe9b3b"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, r0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000001180)='.request_key_auth\x00', &(0x7f00000011c0)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="183767ae836cfcf2e935eeabfa8ff14fa3b50c306cadf1232cbc2078aa11bc2ab7da0e98f848ab83", 0x28}], 0x1}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x70bd28, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r4 = socket(0x10, 0x100000000000802, 0x0) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000940)=0x766c, 0x4) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r5 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000900)='NLBL_CALIPSO\x00') recvmsg$can_bcm(r5, &(0x7f0000001040)={&(0x7f0000000980)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a00)=""/53, 0x35}, {&(0x7f0000000a40)=""/169, 0xa9}, {&(0x7f0000000b00)=""/204, 0xcc}, {&(0x7f0000000c00)=""/92, 0x5c}, {&(0x7f0000000c80)=""/92, 0x5c}, {&(0x7f0000000d00)=""/187, 0xbb}, {&(0x7f0000000dc0)=""/225, 0xe1}, {&(0x7f0000000ec0)=""/127, 0x7f}], 0x8, &(0x7f0000000f80)=""/134, 0x86}, 0x80000000) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000008c0)={0x1, 'veth0_to_bond\x00', 0x4}, 0x18) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001080)={r6, @broadcast, @broadcast}, 0xc) recvfrom(r3, &(0x7f0000000140)=""/47, 0x2f, 0x40000000, &(0x7f0000000840)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) recvmsg(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/123, 0x7b}, {&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f0000000800)=""/9, 0x9}, {&(0x7f00000005c0)=""/198, 0xc6}], 0x6, &(0x7f0000000700)=""/168, 0xa8}, 0x103) 18:25:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x8c, &(0x7f0000000180)=""/140, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = socket(0x10, 0x100000000000802, 0x0) openat$null(0xffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x840, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 384.811938][T13385] binder: 13379:13385 unknown command 1074028805 [ 384.818506][T13385] binder: 13379:13385 ioctl c0306201 20000280 returned -22 18:25:36 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00 \x00'], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0x10001}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r4 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000140), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r2, @ANYBLOB="74533be1db5356e56f38c2d9b5c3b0f834f57c94062f048a14856857fbe5b4b7d1033749", @ANYRESDEC], 0x0, 0x0, 0x0}) 18:25:36 executing program 3: r0 = openat$proc_capi20(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x4001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 18:25:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:36 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000039500000000000000e39fc2c7c243388fb6129f04029b19faeab50583e50b3972e08d604658e6cbd5aa4bafc1c781b3c6ef22359f19fcc5596dd14f7a65f4dfbd2a29ca7d3d0e85ee02edd38e9037408a4fa48adac027b49e8ecebb34636953315209058c8b3d468624df5b801d7af0151838"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32=r3, @ANYRESDEC, @ANYRESDEC=r4, @ANYRES32, @ANYBLOB="4a0ea1e7807a32bcb200d3413b455a25b1369c86306f900508559d3b252ee8bad0e8e2aa0cfd3fe281a778ca6d4e81e031be45bd639b3dd87857157e19f05aba19add5e6f090447685e6ef374a0110ba1ad38b0422331ba6ec2b5f43e01c30b2f301e48b557468e73e37daa9aa6c1fe554016e4a88730683dda4eed9396091b7a1b3ab475583b463a8cff971a9ff40d95f9e1fd7f5915dc7e082bd9ef94159aa939ca27023c4f8b6c2be6af0258c4e51cb57de05e0c59f7caf239c61e7a52ce5ddd3ae70daf37d0a0ed7abc0afc8672bdae35f62aea3548a31bc64786ae1b5512b62b9f5e8cf7d5b", @ANYRESDEC, @ANYRES64=r6], 0x0, 0x0, 0x0}) r7 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4004240b, &(0x7f0000000240)={0x0, 0x70, 0x1, 0x1, 0x7, 0x7f, 0x0, 0x7, 0x16000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x41000, 0x81, 0x8, 0xbdebdce7951f3bed, 0x4, 0x4}) 18:25:36 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) [ 385.500558][T13404] binder: 13402:13404 unknown command 2097152 [ 385.506880][T13404] binder: 13402:13404 ioctl c0306201 20000200 returned -22 [ 385.588494][T13405] binder: 13402:13405 unknown command 808464432 [ 385.595702][T13405] binder: 13402:13405 ioctl c0306201 20000280 returned -22 [ 385.687421][T13405] binder: 13402:13405 unknown command 2097152 [ 385.693948][T13405] binder: 13402:13405 ioctl c0306201 20000200 returned -22 [ 385.749655][T13412] binder: 13402:13412 unknown command 808464432 [ 385.756382][T13412] binder: 13402:13412 ioctl c0306201 20000280 returned -22 18:25:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) 18:25:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000fdffff0295000000000000aa"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 385.982456][T13414] binder: 13409:13414 unknown command 875837489 [ 385.998416][T13414] binder: 13409:13414 ioctl c0306201 20000200 returned -22 [ 386.102499][T13418] binder: 13409:13418 unknown command 114 [ 386.108506][T13418] binder: 13409:13418 ioctl c0306201 20000280 returned -22 [ 386.129141][T13418] binder: 13409:13418 ioctl 4004240b 20000240 returned -22 18:25:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'caif0\x00', {'macsec0\x00'}, 0x200}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0}) r4 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 386.229989][T13418] binder: 13409:13418 unknown command 875837489 [ 386.236470][T13418] binder: 13409:13418 ioctl c0306201 20000200 returned -22 [ 386.276507][T13414] binder: 13409:13414 unknown command 114 [ 386.282647][T13414] binder: 13409:13414 ioctl c0306201 20000280 returned -22 18:25:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000002000100002000", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000000000000000000000000aa14000200fe8000000000000000000000000000aa4ebee48125dd03dc8624e2ab3284c3d2b2628c9f1c2d7ef1dcaed180b612440477c510c27fa7c8ebb510d09f9b244ce1e67a9858695f81438347bdfda62301146db44e13304010047e9f4379d9dedbf9b7d0f257211b0535c45b62aee3c5c1824b9783e844a7a42f92706ff7335ff1f6deba3a8708252595451af831b385917a226f0e9821b8c0a3a17471a08b"], 0x40}}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=0xffffffffffffffff) exit(0x5) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 386.630036][T13436] binder: 13433:13436 unknown command 808464432 [ 386.636570][T13436] binder: 13433:13436 ioctl c0306201 200000c0 returned -22 18:25:38 executing program 3: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40080, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, {0x9, 0x7f, 0xff}}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="8de3a46105045ba61791c654945e0fceabc36bd39907d9e3af754d63405c96772ccd8418bc5450a19847437fa5633b726637fa33", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 386.693840][T13441] binder: 13433:13441 unknown command -2012457152 [ 386.700613][T13441] binder: 13433:13441 ioctl c0306201 20000280 returned -22 [ 386.786780][T13441] binder: 13433:13441 unknown command -2012457152 [ 386.794288][T13441] binder: 13433:13441 ioctl c0306201 20000280 returned -22 18:25:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:38 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:38 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r7 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffb) [ 386.946480][T13444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=13444 comm=syz-executor.0 18:25:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:25:38 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 387.454805][T13462] binder: BINDER_SET_CONTEXT_MGR already set [ 387.456616][T13464] binder: 13459:13464 unknown command 0 [ 387.461273][T13462] binder: 13457:13462 ioctl 40046207 0 returned -16 [ 387.466775][T13464] binder: 13459:13464 ioctl c0306201 20000280 returned -22 [ 387.511910][T13465] binder_alloc: 13459: binder_alloc_buf, no vma [ 387.519637][T13465] binder: 13459:13465 ioctl 80089203 20000080 returned -22 [ 387.554849][T13465] binder: 13459:13465 unknown command 114 [ 387.561021][T13465] binder: 13459:13465 ioctl c0306201 20000280 returned -22 [ 387.573518][T13464] binder: BINDER_SET_CONTEXT_MGR already set [ 387.580531][T13464] binder: 13459:13464 ioctl 40046207 0 returned -16 [ 387.598096][T13465] binder: 13459:13465 ioctl 80089203 20000080 returned -22 18:25:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 387.746481][T13444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=13444 comm=syz-executor.0 18:25:39 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) openat$md(0xffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x80, 0x0) r3 = openat$uhid(0xffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r5 = dup2(r3, r4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:39 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) 18:25:39 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:39 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) connect$x25(r4, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRESOCT=r5, @ANYRES32=r1, @ANYRES16=r5], 0x0, 0x0, 0x0}) r6 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x3ff, 0xc92f]}, 0x8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x0, 0xffff59d9}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x2, 0x0}) r4 = fsmount(r3, 0x0, 0x2) fcntl$setsig(r4, 0xa, 0x17) 18:25:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 388.662175][T13500] binder: 13497:13500 unknown command 808482864 [ 388.668765][T13500] binder: 13497:13500 ioctl c0306201 20000200 returned -22 [ 388.715383][T13502] binder: 13497:13502 unknown command 0 [ 388.721387][T13502] binder: 13497:13502 ioctl c0306201 20000280 returned -22 [ 388.761766][T13503] binder: 13498:13503 unknown command 114 [ 388.767904][T13503] binder: 13498:13503 ioctl c0306201 20000280 returned -22 [ 388.839923][T13503] binder: BINDER_SET_CONTEXT_MGR already set [ 388.839956][T13506] binder: 13498:13506 unknown command 114 [ 388.846481][T13503] binder: 13498:13503 ioctl 40046207 0 returned -16 [ 388.859331][T13506] binder: 13498:13506 ioctl c0306201 20000280 returned -22 18:25:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000100)) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x3, 0x20}, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r5 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f00000000c0)={0x7bf, 0x496, 0x4e61, 0x80, 0x80, 0x10, 0x26, "434c47728b988712f6e0f4f1c62b0bfce648d11d", "bcb4dd76e91122ce3e2b52f68e46381bed447f00"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440", @ANYRES64=r3], 0x0, 0x0, 0x0}) r7 = dup2(r6, r4) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\a|fB'], 0x0, 0x0, 0x0}) 18:25:40 executing program 3: socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 389.169666][T13515] binder: 13514:13515 unknown command 0 [ 389.175811][T13515] binder: 13514:13515 ioctl c0306201 20000280 returned -22 [ 389.221595][T13517] binder_alloc: 13514: binder_alloc_buf, no vma [ 389.234754][T13515] binder: 13514:13515 ioctl 125e 20000100 returned -22 18:25:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 389.262405][T13515] binder: BINDER_SET_CONTEXT_MGR already set [ 389.268705][T13515] binder: 13514:13515 ioctl 40046207 0 returned -16 [ 389.309648][T13515] binder: 13514:13515 unknown command 1114012679 [ 389.316611][T13515] binder: 13514:13515 ioctl c0306201 20000280 returned -22 18:25:40 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 389.391148][T13517] binder: 13514:13517 unknown command 0 [ 389.396997][T13517] binder: 13514:13517 ioctl c0306201 20000280 returned -22 [ 389.407818][T13515] binder: BINDER_SET_CONTEXT_MGR already set [ 389.414470][T13515] binder: 13514:13515 ioctl 40046207 0 returned -16 18:25:40 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) [ 389.449987][T13521] binder: 13514:13521 ioctl 125e 20000100 returned -22 18:25:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x9, 0x8, 0x6, 0x7f, 0xdfa, 0x3, 0xff, 0x1, 0x38d, 0xf97, 0x100, 0x4, 0x1f, 0x1f, 0x0, 0xae6, 0x10000, 0xeed, 0x1f, 0x9, 0xfffffff8, 0x0, 0xdf, 0x100, 0x9, 0x0, 0xe77, 0x7, 0x6, 0x2, 0x9, 0x401]}) r3 = openat$mice(0xffffff9c, &(0x7f00000004c0)='/dev/input/mice\x00', 0x0) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000500)={0x2}) 18:25:41 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) 18:25:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 389.940925][T13538] binder: 13535:13538 unknown command 114 [ 389.946839][T13538] binder: 13535:13538 ioctl c0306201 20000280 returned -22 [ 389.979266][T13539] binder: 13537:13539 unknown command 0 [ 389.985336][T13539] binder: 13537:13539 ioctl c0306201 20000200 returned -22 [ 389.997546][T13536] binder: 13535:13536 ioctl c0905664 20000080 returned -22 [ 390.029432][T13539] binder: 13537:13539 unknown command 0 [ 390.035673][T13539] binder: 13537:13539 ioctl c0306201 20000280 returned -22 [ 390.073267][T13540] binder: 13537:13540 unknown command 0 [ 390.079018][T13540] binder: 13537:13540 ioctl c0306201 20000280 returned -22 18:25:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:41 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x70bd29, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$DRM_IOCTL_GET_STATS(r6, 0x807c6406, &(0x7f00000000c0)=""/217) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r7 = dup2(r1, r3) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010095f4"], 0x0, 0x0, 0x0}) 18:25:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850a00000200000076000000000027000000fdffff0800000400000000e0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xd5, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=ANY=[@ANYBLOB="400000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000100)=""/121, 0x79}, {&(0x7f0000000400)=""/5, 0x5}, {&(0x7f0000000440)=""/134, 0x86}], 0x5, &(0x7f0000000540)=""/29, 0x1d}}, {{&(0x7f0000000580)=@x25={0x9, @remote}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000600)=""/143, 0x8f}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f00000007c0)=""/45, 0x2d}, {&(0x7f0000000800)=""/252, 0xfc}, {&(0x7f0000000900)=""/159, 0x9f}, {&(0x7f00000009c0)=""/8, 0x8}, {&(0x7f0000000a00)=""/91, 0x5b}], 0x7, &(0x7f0000000ac0)=""/24, 0x18}, 0x7}], 0x2, 0x40000040, &(0x7f0000000b40)) [ 390.593947][T13552] binder: BINDER_SET_CONTEXT_MGR already set [ 390.600345][T13552] binder: 13551:13552 ioctl 40046207 0 returned -16 [ 390.657846][T13555] binder: 13551:13555 unknown command -191561727 [ 390.664586][T13555] binder: 13551:13555 ioctl c0306201 20000280 returned -22 18:25:42 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 390.706404][T13552] binder: BINDER_SET_CONTEXT_MGR already set [ 390.712817][T13552] binder: 13551:13552 ioctl 40046207 0 returned -16 [ 390.725658][T13555] binder: BINDER_SET_CONTEXT_MGR already set [ 390.731980][T13555] binder: 13551:13555 ioctl 40046207 0 returned -16 [ 390.745774][T13559] binder: 13551:13559 unknown command 0 18:25:42 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) [ 390.752290][T13559] binder: 13551:13559 ioctl c0306201 20000280 returned -22 [ 390.789921][T13562] binder: 13551:13562 ioctl 807c6406 200000c0 returned -22 18:25:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1b, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500000000000027000000fdffff02950000000b000000000000000000000000f67aab29767bd673d5fc670043e5d5f4f26eceb5965d32c849c124f6ef85a7c1884e8dfca4939f6c5974dc44d30f76511b31d1d8f06203dbcca1d4035d612c9c4fa19b1139dc327ac5f208ad6cdfa417d0f7dc3aa67131d78bce4b4b6466fb288fab53b5b3fecca02e600028243d1fe3f2aff55cb4b34d400afb42f0b9a7694697578f2d852cc88b21f2912ee8ab"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:25:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:42 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000ff07000100000000000000b24ff691c945", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000000000000000000000000aa14000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 391.439513][T13585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=13585 comm=syz-executor.1 [ 391.484565][T13586] binder: 13577:13586 unknown command 0 [ 391.490555][T13586] binder: 13577:13586 ioctl c0306201 20000280 returned -22 [ 391.523983][T13586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=13586 comm=syz-executor.1 18:25:43 executing program 3: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x80, 0x0, {0xa, 0x0, 0x13, 0x2}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_CACHEINFO={0x14, 0x6, {0xff, 0xaa, 0x41f, 0xfffffff7}}]}, 0x40}}, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x5}) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0xff, 0x4, 0x0, 0x6946}, 0x8) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_MASTER={0x94, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x92edabc266461f9f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={[], [], @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) 18:25:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 391.584628][T13587] binder: 13577:13587 unknown command 0 [ 391.590492][T13587] binder: 13577:13587 ioctl c0306201 20000280 returned -22 18:25:43 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000080)={0x0, 0x3938700}, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) [ 391.851432][T13593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=13593 comm=syz-executor.3 18:25:43 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) 18:25:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:43 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:43 executing program 3: r0 = openat$nvram(0xffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x82000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={[], [], @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="8514000000000000000000000027004bfa0000fdefff0295000008000000009028a7d71b90e5e576cb7b8c6d8b2f8b1689100246a37bbc4415397d5dfcc35150de62593b7c0b77ad4cd4024077f54a7cd29b708ad863f238ada5c5b87acbf361c60c070cbf21e91bfba2ab8a5c58ff839669f972888490898e11"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], r1, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) openat$fuse(0xffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r2 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r5, 0x1000, 0x9}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={r6, 0x7, 0x2, 0x9}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x982, 0x2, 0x0, 0xffff, 0x2, 0x6, 0x1555, 0x80000000, r7}, &(0x7f0000000440)=0x20) [ 392.184061][T13601] binder: 13598:13601 unknown command 0 [ 392.190664][T13601] binder: 13598:13601 ioctl c0306201 20000280 returned -22 18:25:43 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc044565d, &(0x7f0000000080)={0x1ff, 0x4, 0x4, 0xb22ca7fe333a843d, 0x4, {}, {0x3, 0x2, 0x8, 0x0, 0x41, 0x20, "1bdad8a9"}, 0x1ff, 0x1, @fd=r6, 0x1, 0x0, r3}) syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00') ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000100)={0x1, 0x4}) 18:25:43 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 392.626170][T13618] binder: 13611:13618 unknown command -1 [ 392.633646][T13618] binder: 13611:13618 ioctl c0306201 20000200 returned -22 18:25:44 executing program 3: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) vmsplice(r1, &(0x7f0000001380)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000000c0)="19f620dcd78c946f4b04d69820b6e4c05bc18b13c1beacf26f8cb2e0a3484be55ae8cc42388187a217dc1c3164231a499ce7b60f87676786c120ed07ce583cb387657898fc0c19bfba0949c723f3dca4965448c022dc289caa20fa7f924c47eb450cf76ce4e0dee0e692bef69fa7983d5bffc3c79efabba511df035c5dcaa0935499fcf0950c31c7019dd62dfda986890e0b7141a58259132ff8709dedac68e0cbff9c52", 0xa4}, {&(0x7f00000012c0)="723edf247d11d8e81d558dc82247391263d4eb5f8160b3241ed922b3977732e97fe3db03223f36c7e6fd2c657079500f64fcc61d7a31c08942ba40f441c86e20bbce541677a263465f10dd19a6f3d48438d54fb92649", 0x56}, {&(0x7f0000001340)="c26c4fc7c908eae0559d1ef633db2e30af797eccfc1210e3b868d3f1007de90a7e144ab7a61a", 0x26}], 0x4, 0x7) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000001400)=0x8, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f00000013c0)={0x12}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) open(&(0x7f0000000080)='./file0\x00', 0x301800, 0x2) 18:25:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 392.700960][T13619] binder: 13611:13619 unknown command 0 [ 392.706839][T13619] binder: 13611:13619 ioctl c0306201 20000280 returned -22 [ 392.747634][T13618] binder: BINDER_SET_CONTEXT_MGR already set [ 392.754116][T13618] binder: 13611:13618 ioctl 40046207 0 returned -16 [ 392.794767][T13618] binder: 13611:13618 ioctl c044565d 20000080 returned -22 18:25:44 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(r0) [ 393.004303][T13626] binder: 13624:13626 unknown command 0 [ 393.010686][T13626] binder: 13624:13626 ioctl c0306201 20000200 returned -22 18:25:44 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04d7c461"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 393.085814][T13626] binder: 13624:13626 unknown command 0 [ 393.092175][T13626] binder: 13624:13626 ioctl c0306201 20000280 returned -22 [ 393.134652][T13630] binder: 13624:13630 ioctl 4010640d 200013c0 returned -22 [ 393.197656][T13630] binder: BINDER_SET_CONTEXT_MGR already set [ 393.204486][T13630] binder: 13624:13630 ioctl 40046207 0 returned -16 [ 393.227837][T13626] binder: 13624:13626 unknown command 114 [ 393.234121][T13626] binder: 13624:13626 ioctl c0306201 20000280 returned -22 18:25:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 393.240891][T13633] binder: 13624:13633 ioctl 4010640d 200013c0 returned -22 18:25:44 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x4, 0x2000) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040844}, 0x2000c040) [ 393.406277][T13637] binder: 13635:13637 unknown command 1640290052 [ 393.413026][T13637] binder: 13635:13637 ioctl c0306201 20000200 returned -22 [ 393.463490][T13640] binder: 13635:13640 unknown command 809004142 [ 393.470039][T13640] binder: 13635:13640 ioctl c0306201 20000280 returned -22 [ 393.521076][T13640] binder: 13635:13640 unknown command 1640290052 [ 393.527710][T13640] binder: 13635:13640 ioctl c0306201 20000200 returned -22 18:25:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) [ 393.571551][T13642] binder: 13635:13642 unknown command 809004142 [ 393.578022][T13642] binder: 13635:13642 ioctl c0306201 20000280 returned -22 18:25:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:45 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 18:25:45 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 18:25:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x264, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x18}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x63}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c0000}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4297}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xda3}]}]}, 0x264}}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 394.218866][T13664] binder: 13659:13664 unknown command 809004142 [ 394.225615][T13664] binder: 13659:13664 ioctl c0306201 20000280 returned -22 18:25:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 394.358807][T13668] binder: 13659:13668 unknown command 809004142 [ 394.365556][T13668] binder: 13659:13668 ioctl c0306201 20000280 returned -22 18:25:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000000800000076000000000000eb26d2764edff7e37d00618c91fb5b2e8dc68a212f00000000000000a9a74007b2eceba7bfebc1606661b04141e42f63f9a20edfe5bbe6e008efc6f01fa91763ebfd686e789c158f9ba36da41dc8f58ca57e669981f8d9b5bc0e787f739be5cb2ec4f635b31bcbb8cf039a70a57b41a8f77cdae4ad94cb1d6761a564b5d5674683c0ff030000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:25:46 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 18:25:46 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:46 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x401}, 0x8) close(r0) 18:25:46 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ef4030f4a685a1bd33d800ebdf96145795c430ee61f5228126662e92da96ab7346716e36c2e4acaf38975a450aef03d21690f4d8a4190fdc61a7046ad8514000f43c9f2299366da3979229581d1685b75a9eef97ea"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$NBD_DISCONNECT(r3, 0xab08) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="14630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e22, 0x0, @private2, 0x10001}}, 0x9, 0x2, 0x10001, 0x12f7, 0x1}, &(0x7f0000000940)=0x98) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0xffffffff, 0x1f, 0xffffffff, 0x9}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) fcntl$setsig(r6, 0xa, 0x3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="13af7f22643d3461959db19e92514e4a70845b6a831fc8775dab3a7ffe43f1aef09a5f9b24c26cba0d7c1586fc7bae7542d553341216b2d4e74baeba686048b509b0cda5542ef66396a7a11c8bd67a6dc0452610e77749f4c9714368e2f77a8706b930"], 0x0, 0x0, 0x0}) 18:25:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r3 = openat$full(0xffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8c3357eb5d32e97f, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x5, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x800}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:25:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 395.453140][T13696] binder: BINDER_SET_CONTEXT_MGR already set [ 395.459417][T13696] binder: 13693:13696 ioctl 40046207 0 returned -16 [ 395.487836][T13697] binder: 13695:13697 unknown command 0 [ 395.494224][T13697] binder: 13695:13697 ioctl c0306201 20000280 returned -22 [ 395.515045][T13696] binder: 13693:13696 unknown command 1074029332 [ 395.522106][T13696] binder: 13693:13696 ioctl c0306201 20000200 returned -22 [ 395.543323][T13700] binder_alloc: 13695: binder_alloc_buf, no vma [ 395.554967][T13696] binder: 13693:13696 unknown command 578793235 18:25:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x401}, 0x8) close(r0) [ 395.561789][T13696] binder: 13693:13696 ioctl c0306201 20000280 returned -22 [ 395.601293][T13697] binder: BINDER_SET_CONTEXT_MGR already set [ 395.607539][T13697] binder: 13695:13697 ioctl 40046207 0 returned -16 [ 395.618676][T13700] binder: 13695:13700 unknown command 114 [ 395.625302][T13700] binder: 13695:13700 ioctl c0306201 20000280 returned -22 [ 395.672801][T13696] binder: 13693:13696 unknown command 1074029332 [ 395.679372][T13696] binder: 13693:13696 ioctl c0306201 20000200 returned -22 18:25:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000), 0x52698b21) 18:25:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r3, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) sendmsg$xdp(r0, &(0x7f0000002540)={&(0x7f0000000080)={0x2c, 0xc, r3, 0x3a}, 0x10, &(0x7f0000002500)=[{&(0x7f00000000c0)="6af3f324c79a558b4f7f2b49d8f13d7af038621ed9b25ee668023bf23639d1620b62ab074895e9e62d7906f604a5d78caa1671b2d3c4ef2eef13b18a1391ee9fe56c7106519eb6a24d85f669f699cef2ae9ed74e2c5a8df5594151c9c1537d0e58783eab530ae9ee18f965b4471773482729c85a79351adf459196250bac91805221f57b29cfdb653d5ea6083d1bf2345223", 0x92}, {&(0x7f0000000240)="86336dda3d25f826e08237ef6dc18aa0f33727288393a0061c48ecb60bbcbfd75d2f06ecd6bbf59d1dc23b5582b25f36bce5e23ff25a5f3153b83795b9b49052499a5ea52d133776b66d1d59f1c999cb5fe4cc8e835d69b534dd2fab3e1dc3f0ef30e1e935a5de152daccc9ffe3ea937ce2d2d8a03f324e8676dc8945eb067d4cbeb6198be77705dddb5857a7f0879573ac08e879a6a251fc009d35bd69ceeb395f0eb9398b3534a200560b1ef8db3b1f1a9af3b93bf14785b7572fc3b3e3f903eac045b55", 0xc5}, {&(0x7f0000000340)="9d9a76889d99032aeb3edf55e328eef950019fae558d3f8fdc4ea19822dc3b042a6cfb7ac061304c32c8e03ae59eca1e851dd3290730eb2c", 0x38}, {&(0x7f0000000380)="316bb044f92a5e6c4a865b892548ac3923e1614dac7ab8732bfb8d8fdb77f820d7a5f96ee2e5c74c57002870e9a794e4f6e7210abef683ded7fdb4c333b49bb878a5013b806be4471df2c49d8673fd72a7252ab9e8b29966583938145d86e63911bc4bc47214d66ce61051e525e70054c3268189cc51564706d6f87750ae58a45aee8896b91821137beeb8f28a988cb3f5588324cccb1ccca259fee7e2ddca6df583e7dbcd8b4a5cea67a2a220b799881481e318e54507a870c355bd7b87236c426e57d8d2c8eee066ef5f06dae6cafb83879f839476188a", 0xd8}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="6dace68a1d4a33", 0x7}, {&(0x7f00000014c0)="a75c3efa705b4d843e878820a3df583b9f5a561de136e368a337886758a7d86182acf1e9b8", 0x25}, {&(0x7f0000001500)="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", 0x1000}], 0x8, 0x0, 0x0, 0x4001}, 0x2008000) 18:25:47 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x401}, 0x8) close(r0) 18:25:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'ip_vti0\x00', {}, 0x20}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') r2 = socket(0x10, 0x80002, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0x3f, 0x9328, 0x4, 0x8001, 0x18, "a84d08be54c161f0"}) sendfile(r2, r1, 0x0, 0xf0d) 18:25:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff}, 0x8) close(r0) 18:25:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000002c0)) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) fcntl$setown(r5, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="4966f4ff00000000850000004f000000180000000600000000000000660600003fab2400080000000e000000ff7f00000000008aff01000004d0000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x99, &(0x7f00000000c0)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x26, 0x10, 0x0, 0xffaf}, 0x74) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) [ 396.653739][T13734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=13734 comm=syz-executor.1 [ 396.759963][T13734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=13734 comm=syz-executor.1 18:25:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) [ 396.830200][T13740] binder: BINDER_SET_CONTEXT_MGR already set [ 396.837032][T13740] binder: 13736:13740 ioctl 40046207 0 returned -16 [ 396.970961][T13741] binder: BINDER_SET_CONTEXT_MGR already set [ 396.977241][T13741] binder: 13736:13741 ioctl 40046207 0 returned -16 [ 396.994638][T13734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=13734 comm=syz-executor.1 [ 397.028913][T13740] binder: BINDER_SET_CONTEXT_MGR already set [ 397.035481][T13740] binder: 13736:13740 ioctl 40046207 0 returned -16 [ 397.055963][T13744] binder: BINDER_SET_CONTEXT_MGR already set [ 397.062420][T13744] binder: 13736:13744 ioctl 40046207 0 returned -16 18:25:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff}, 0x8) close(r0) [ 397.074100][T13748] binder: 13736:13748 unknown command 114 [ 397.080336][T13748] binder: 13736:13748 ioctl c0306201 20000280 returned -22 18:25:48 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'ip_vti0\x00', {}, 0x20}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') r2 = socket(0x10, 0x80002, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0x3f, 0x9328, 0x4, 0x8001, 0x18, "a84d08be54c161f0"}) sendfile(r2, r1, 0x0, 0xf0d) 18:25:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:48 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 397.384352][T13753] binder: 13751:13753 unknown command 0 [ 397.390669][T13753] binder: 13751:13753 ioctl c0306201 20000280 returned -22 [ 397.438173][T13756] binder_alloc: 13751: binder_alloc_buf, no vma 18:25:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff}, 0x8) close(r0) [ 397.569433][T13756] binder: 13751:13756 unknown command 114 [ 397.569487][T13753] binder: BINDER_SET_CONTEXT_MGR already set [ 397.575612][T13756] binder: 13751:13756 ioctl c0306201 20000280 returned -22 [ 397.589216][T13753] binder: 13751:13753 ioctl 40046207 0 returned -16 [ 397.696226][T13765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=13765 comm=syz-executor.1 [ 397.806795][T13765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=13765 comm=syz-executor.1 18:25:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:49 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@broadcast, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x2, @link_local, @multicast1, @empty, @dev}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x2fffffd}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2f78e1490a0551e}, 0x3f) 18:25:49 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x76}}, &(0x7f0000000040)='syzkaller\x00', 0x9e73, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000080)={0x6, 0x4}) 18:25:49 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(0xffffffffffffffff) 18:25:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000080)=ANY=[], 0x66f) utimes(&(0x7f0000000480)='./bus\x00', &(0x7f0000000500)) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) [ 398.360378][T13788] binder: 13782:13788 unknown command 114 [ 398.366425][T13788] binder: 13782:13788 ioctl c0306201 20000280 returned -22 [ 398.414889][T13792] binder: 13782:13792 ioctl 541c 20000080 returned -22 18:25:49 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) [ 398.464456][T13796] binder: BINDER_SET_CONTEXT_MGR already set [ 398.470987][T13796] binder: 13782:13796 ioctl 40046207 0 returned -16 18:25:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0100002a00270d00"/20, @ANYRES32=r2, @ANYBLOB="0880000004"], 0x1ec}}, 0x0) r3 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)=0x48, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfb87, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xf, 0x2, 0x2, 0x4}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:25:50 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(0xffffffffffffffff) 18:25:50 executing program 0: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)={0xffff, 0xa, 0x4, 0x200000, 0x7, {0x0, 0x2710}, {0x5, 0x0, 0x1, 0x2, 0x0, 0x1f, "7cd90960"}, 0x3, 0x2, @userptr=0x1000, 0x8f2, 0x0, 0xffffffffffffffff}) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 18:25:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:50 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfff6ffff, 0x401}, 0x8) close(0xffffffffffffffff) 18:25:50 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185647, &(0x7f0000000280)={0x9d0000, 0x1, 0x1000, r0, 0x0, &(0x7f0000000240)={0xa20934, 0x1, [], @ptr}}) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f00000002c0)) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x5, 0x48200) setfsuid(r1) 18:25:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:25:50 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 18:25:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 18:25:51 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:51 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0}) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000080)={0x1, 0x5, 0x10001}) 18:25:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 400.191362][T13844] input: syz1 as /devices/virtual/input/input5 [ 400.286317][T13844] input: syz1 as /devices/virtual/input/input6 18:25:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) [ 400.518809][T13863] binder: 13854:13863 unknown command 114 [ 400.525565][T13863] binder: 13854:13863 ioctl c0306201 20000280 returned -22 18:25:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 400.577843][T13860] binder: 13854:13860 ioctl 4040ae70 20000080 returned -22 [ 400.669251][T13863] binder: 13854:13863 unknown command 114 [ 400.676063][T13863] binder: 13854:13863 ioctl c0306201 20000280 returned -22 18:25:52 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:25:52 executing program 0: r0 = socket(0x10, 0x100000000000802, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x39, &(0x7f0000000000), 0x20a154cc) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 400.910618][T13869] bridge1: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 401.011376][T13873] bridge1: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) 18:25:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:25:52 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:52 executing program 2: unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028408000a00", @ANYRES32], 0x40}}, 0x0) 18:25:52 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0xe, 0x2140, 0x0) 18:25:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27, 0x0, 0x0, 0x3000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) syz_open_dev$ttys(0xc, 0x2, 0x1) [ 401.720789][ T32] audit: type=1400 audit(1588962353.133:27): avc: denied { create } for pid=13889 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 18:25:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 401.884605][ T32] audit: type=1400 audit(1588962353.173:28): avc: denied { name_connect } for pid=13889 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 18:25:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612239c24a0000", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 18:25:53 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0xfffffffc, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 402.341540][T13909] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 402.426905][T13909] device bond1 entered promiscuous mode [ 402.459118][T13914] bond1: (slave bridge2): making interface the new active one [ 402.468149][T13914] device bridge2 entered promiscuous mode 18:25:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 402.476275][T13914] bond1: (slave bridge2): Enslaving as an active interface with an up link 18:25:54 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0xe, 0x2140, 0x0) [ 402.661791][T13912] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 18:25:54 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) [ 402.745814][T13912] device bond2 entered promiscuous mode 18:25:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:25:54 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) 18:25:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612239c24a0000", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 18:25:54 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:25:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 403.636312][T14009] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 403.680621][T14009] device bond3 entered promiscuous mode [ 403.703898][T14007] new mount options do not match the existing superblock, will be ignored [ 403.768209][T14045] bond3: (slave bridge3): making interface the new active one [ 403.776167][T14045] device bridge3 entered promiscuous mode [ 403.784279][T14045] bond3: (slave bridge3): Enslaving as an active interface with an up link 18:25:55 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:25:55 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0xe, 0x2140, 0x0) 18:25:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:25:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffe01, 0x1, &(0x7f00000003c0)=[{&(0x7f00000000c0)="eb3c906d5866732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 18:25:55 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) [ 404.192152][T14052] new mount options do not match the existing superblock, will be ignored 18:25:55 executing program 0: r0 = socket$inet(0x11, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3b0f, 0x4) pipe(&(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg(r0, &(0x7f0000000040)={&(0x7f000005e000)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 18:25:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:25:56 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="850000000800000027000000000000009500000000000000a579753dec29fe276240f076750753bc7b952ab5ad939c40c5f89f8b5c13a24800a26b3c68cea54994e702d609331ab3c70aa6b030ed69efddccea3e793e8287051d4f5fef499e2a4ce758601229b94574e7825441222e81748b4ee09cc6d847ef6943a143669ef5fc545ab7ffef72fd2ca305f386142d7835f213e7ff0b00001731859eba975d4a1809acbc7b716441ef6bac34d0c99d62456cc766be4825548e085c7866d7ac33165a2178a5c647457a8713e7b70a85bbdb078320eafa48d43c96aebc3da20d188f590ec28e549e8e3d4fe60c9fea00000000000100019efc0060c9e1263ca5507f633b5b0402ffa95acb51428785ae09fdae241f51f7ff22745696f1ffe2ca9ed226213275a566ae3f64fb2dfe777d16832bbb703ea39868fcf0fe11894d2c876e4809a16ce03ba31d2e344151341d1008ae03265f8f99ae15d9b711f4b6746dce6ec1ce34d2e2d5241435b5ddc91e9e99ad6b9cbe55e294f5b1e5dc8f1c7bdd3cf375c0b30ce6ba07ce35f90f0c589bc98d678d7e258d5d74a133278866780ddac5fe771e6ae67da6e2df4a560436fa3cb7598f923c7316bb7c31f8e867734a5a66f0465d7183fc05c0d804ac719fa87f64cd637deb88254e9ded8cb00c1276b1aaffb3cf86fb92efc51802cdd76a73fd639edea01662abbc567a9db53997aa9abd409b5cb990ea1bc76127057ad3ae000000000000000000000000000000000000000000444e477613181b1c6fb1f9c3cb0f5b0a187994d25c55dd04442f2f739ce0b3e4377f3d9887cdf898a4463717a1cf4c5d83e93d581b815950e21279f8bcb5167247a398754a1493639f275c5d6c6ea752b63551125eda435ba90cae00e1383f43a77508c2cd9fb2636db3abed6453179e3ca03bd3a3dbc4b61dbbfce11ce2d9dbeb6844a88348197292379d22fb6ea97a4f734953d3697cad93d588172c99700fc4f2983edf5d8bb2ec6dc0cc319881b43b7a8a1d1f872d0000000000ddad9444a6f712c20fd0d908c376316a7b26cbaad28bc703c9492f01de1f5d2093213aa1354e783b15f627834d840c6738f8b16b80cc0b0582a3aa02553979e47bdf3716228c4ff4676997286042b43c6cb7e2a01a16ae5757072574afadf6962a40ed57025b5a3897db7f94e8d5ba14fd018c5b302942916cf7314e3c9a00a378771ee3c704a3947879f4ea1f031cd8432a27bc2cb985d55dc9dda125e9f2"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) 18:25:56 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8a00000086dd600000ac0800060000000000000000000000000000000000ff020000000000000000000000000001"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x180ff, 0x0) 18:25:56 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0xe, 0x2140, 0x0) 18:25:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:25:56 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:57 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:25:57 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:25:57 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0xc}], 0xc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=[{0xc}], 0xc}}], 0x2, 0x0) 18:25:58 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0xe, 0x2140, 0x0) 18:25:58 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:25:58 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:58 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x3, 0x0, [0x0, 0x0, 0x0]}) 18:25:58 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0xe, 0x2140, 0x0) 18:25:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:25:58 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0xe, 0x2140, 0x0) 18:25:58 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) lseek(r0, 0x80000000000000, 0x1) 18:25:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ftruncate(r0, 0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f00000000c0)) 18:25:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:25:59 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0xe, 0x2140, 0x0) 18:25:59 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:init_exec_t:s0\x00', 0x21) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10}, 0x10}, 0x8}, 0x0) 18:25:59 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) open(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) pipe(0x0) close(0xffffffffffffffff) 18:25:59 executing program 0: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4}, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0xffffffac) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000b40)='./file0\x00', 0x2) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) 18:25:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:25:59 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0xe, 0x2140, 0x0) [ 408.246699][ T32] audit: type=1400 audit(1588962359.663:29): avc: denied { create } for pid=14140 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:init_exec_t:s0 tclass=netlink_audit_socket permissive=1 [ 408.275191][T14144] ===================================================== [ 408.282999][T14144] BUG: KMSAN: uninit-value in string+0x522/0x690 [ 408.289466][T14144] CPU: 0 PID: 14144 Comm: syz-executor.2 Not tainted 5.6.0-rc7-syzkaller #0 [ 408.298274][T14144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.308403][T14144] Call Trace: [ 408.311785][T14144] dump_stack+0x1c9/0x220 [ 408.316182][T14144] kmsan_report+0xf7/0x1e0 [ 408.320674][T14144] __msan_warning+0x58/0xa0 [ 408.325332][T14144] string+0x522/0x690 [ 408.325738][ T32] audit: type=1400 audit(1588962359.693:30): avc: denied { write } for pid=14140 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:init_exec_t:s0 tclass=netlink_audit_socket permissive=1 [ 408.329419][T14144] vsnprintf+0x207d/0x31b0 [ 408.329492][T14144] audit_log_vformat+0x583/0xcd0 [ 408.329554][T14144] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 408.329581][T14144] audit_log_format+0x220/0x260 [ 408.329650][T14144] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 408.329722][T14144] audit_receive+0x18a4/0x6d50 [ 408.352640][ T32] audit: type=1400 audit(1588962359.693:31): avc: denied { nlmsg_relay } for pid=14140 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:init_exec_t:s0 tclass=netlink_audit_socket permissive=1 [ 408.356722][T14144] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 408.412965][T14144] ? netlink_deliver_tap+0xdba/0xea0 [ 408.418422][T14144] ? kmsan_get_metadata+0x11d/0x180 [ 408.423685][T14144] netlink_unicast+0xf9e/0x1100 [ 408.428578][T14144] ? audit_net_exit+0xd0/0xd0 [ 408.433492][T14144] netlink_sendmsg+0x1246/0x14d0 [ 408.438589][T14144] ? netlink_getsockopt+0x1440/0x1440 [ 408.444014][T14144] ____sys_sendmsg+0x12b6/0x1350 [ 408.449127][T14144] __sys_sendmsg+0x451/0x5f0 [ 408.453816][T14144] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 408.459922][T14144] ? prepare_exit_to_usermode+0x1ca/0x520 [ 408.466749][T14144] ? kmsan_get_metadata+0x4f/0x180 [ 408.471913][T14144] ? kmsan_get_metadata+0x4f/0x180 [ 408.477108][T14144] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 408.482982][T14144] __ia32_compat_sys_sendmsg+0xed/0x130 [ 408.488606][T14144] ? compat_mc_getsockopt+0x19a0/0x19a0 [ 408.494189][T14144] do_fast_syscall_32+0x3c7/0x6e0 [ 408.499271][T14144] entry_SYSENTER_compat+0x68/0x77 [ 408.504419][T14144] RIP: 0023:0xf7f1ad99 [ 408.508514][T14144] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 408.528141][T14144] RSP: 002b:00000000f5d150cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 408.536581][T14144] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000340 [ 408.544597][T14144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.552690][T14144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 408.560704][T14144] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 408.569056][T14144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 408.577077][T14144] [ 408.579413][T14144] Uninit was created at: [ 408.584032][T14144] kmsan_internal_poison_shadow+0x66/0xd0 [ 408.589775][T14144] kmsan_slab_alloc+0x8a/0xe0 [ 408.594655][T14144] __kmalloc_node_track_caller+0xb40/0x1200 [ 408.600689][T14144] __alloc_skb+0x2fd/0xac0 [ 408.605136][T14144] netlink_sendmsg+0x7d3/0x14d0 [ 408.610194][T14144] ____sys_sendmsg+0x12b6/0x1350 [ 408.615170][T14144] __sys_sendmsg+0x451/0x5f0 [ 408.619791][T14144] __ia32_compat_sys_sendmsg+0xed/0x130 [ 408.625549][T14144] do_fast_syscall_32+0x3c7/0x6e0 [ 408.630627][T14144] entry_SYSENTER_compat+0x68/0x77 [ 408.636495][T14144] ===================================================== [ 408.643464][T14144] Disabling lock debugging due to kernel taint [ 408.650891][T14144] Kernel panic - not syncing: panic_on_warn set ... [ 408.657520][T14144] CPU: 0 PID: 14144 Comm: syz-executor.2 Tainted: G B 5.6.0-rc7-syzkaller #0 [ 408.667626][T14144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.677708][T14144] Call Trace: [ 408.681039][T14144] dump_stack+0x1c9/0x220 [ 408.685965][T14144] panic+0x3d5/0xc3e [ 408.689966][T14144] kmsan_report+0x1df/0x1e0 [ 408.694521][T14144] __msan_warning+0x58/0xa0 [ 408.699058][T14144] string+0x522/0x690 [ 408.703104][T14144] vsnprintf+0x207d/0x31b0 [ 408.707591][T14144] audit_log_vformat+0x583/0xcd0 [ 408.712598][T14144] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 408.718441][T14144] audit_log_format+0x220/0x260 [ 408.723366][T14144] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 408.729308][T14144] audit_receive+0x18a4/0x6d50 [ 408.734131][T14144] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 408.740251][T14144] ? netlink_deliver_tap+0xdba/0xea0 [ 408.745597][T14144] ? kmsan_get_metadata+0x11d/0x180 [ 408.750841][T14144] netlink_unicast+0xf9e/0x1100 [ 408.755736][T14144] ? audit_net_exit+0xd0/0xd0 [ 408.760547][T14144] netlink_sendmsg+0x1246/0x14d0 [ 408.765553][T14144] ? netlink_getsockopt+0x1440/0x1440 [ 408.770977][T14144] ____sys_sendmsg+0x12b6/0x1350 [ 408.776624][T14144] __sys_sendmsg+0x451/0x5f0 [ 408.781427][T14144] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 408.787908][T14144] ? prepare_exit_to_usermode+0x1ca/0x520 [ 408.793664][T14144] ? kmsan_get_metadata+0x4f/0x180 [ 408.798804][T14144] ? kmsan_get_metadata+0x4f/0x180 [ 408.803947][T14144] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 408.809790][T14144] __ia32_compat_sys_sendmsg+0xed/0x130 [ 408.815365][T14144] ? compat_mc_getsockopt+0x19a0/0x19a0 [ 408.820941][T14144] do_fast_syscall_32+0x3c7/0x6e0 [ 408.826039][T14144] entry_SYSENTER_compat+0x68/0x77 [ 408.831166][T14144] RIP: 0023:0xf7f1ad99 [ 408.835276][T14144] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 408.854913][T14144] RSP: 002b:00000000f5d150cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 408.863354][T14144] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000340 [ 408.871346][T14144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.879341][T14144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 408.887397][T14144] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 408.895400][T14144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 408.904620][T14144] Kernel Offset: 0x2600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 408.916174][T14144] Rebooting in 86400 seconds..