0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x2, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1571.361673] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff00000000}}) 02:29:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1571.544447] binder_thread_write: 6 callbacks suppressed [ 1571.544459] binder: 320:322 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1571.570734] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b245735808", 0x5, 0xfffffffffffffffc) r4 = add_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r3, &(0x7f0000000100)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, r4) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:29:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x541b, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1571.774330] binder: 345:347 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:29:32 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) userfaultfd(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r4, &(0x7f0000000480), 0x1000000000000237, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5421, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:32 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000100)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x800, 0x101000) ioctl$KDSETMODE(r2, 0x4b3a, 0x800) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000200)={0x3, [0x0, 0x0, 0x0]}) 02:29:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1572.369738] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1572.382241] binder: 459:460 ioctl c0306201 0 returned -14 [ 1572.405935] binder: 459:460 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:29:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5450, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1572.504642] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1572.598165] binder: 477:479 ioctl c0306201 0 returned -14 [ 1572.627723] binder: 477:479 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1572.710347] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5452, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:33 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@local, @dev={0xfe, 0x80, [], 0x28}, @remote, 0x2, 0x6, 0x9, 0x100, 0x7, 0x0, r3}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000200)) close(r2) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x314, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='.^\x00', 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:29:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5460, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1573.340466] binder: 598:599 ioctl c0306201 0 returned -14 [ 1573.369269] binder: 598:599 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:29:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8910, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1573.513514] binder: 614:615 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:29:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1573.743946] binder: 628:629 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1573.779186] net_ratelimit: 14 callbacks suppressed [ 1573.779197] protocol 88fb is buggy, dev hsr_slave_0 [ 1573.789289] protocol 88fb is buggy, dev hsr_slave_1 [ 1573.794436] protocol 88fb is buggy, dev hsr_slave_0 [ 1573.799574] protocol 88fb is buggy, dev hsr_slave_1 [ 1573.939267] protocol 88fb is buggy, dev hsr_slave_0 [ 1573.944432] protocol 88fb is buggy, dev hsr_slave_1 02:29:34 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000300)=@generic={0x3, 0x80000001, 0xfffffffffffffe00}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0xc0bb000000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x95}}, 0x4, 0x80000001, 0x1, 0xff, 0xe}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000380)={r4, @in={{0x2, 0x4e21, @multicast2}}, [0x9, 0x101, 0x5, 0x10001, 0xfffffffffffff39c, 0xe5e3, 0x0, 0x0, 0x3, 0x80000001, 0x20, 0x7, 0x10001, 0x2, 0xfc69]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x80, "1fa54dfdaedc02512a07ddcbb4ecae154ba388db607a3db735dbe8eeb12432f021473da916eb72507a143a52fdd7e9ea4e3839187d533254d363cf1261fb74b94924b8126b15919cf9d5328ba08ae92cb20261d4fbf6f37c3f9e21ccb10c9e66bf3e44b86ad819029fa078f7dae18adff3f2e933dbd25cc99c451dbaec7220a3"}, &(0x7f0000000000)=0x88) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x2, 0xf0, 0x200, 0x3, 0x3, 0x2, 0x1, 0xfff, r5}, 0x20) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009, 0xffffffffffffffff]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:29:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8911, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1574.179344] protocol 88fb is buggy, dev hsr_slave_0 [ 1574.184454] protocol 88fb is buggy, dev hsr_slave_1 [ 1574.244412] binder: 744:749 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:29:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8913, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1574.512577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.519232] bridge0: port 1(bridge_slave_0) entered disabled state 02:29:35 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x80) fcntl$setstatus(r0, 0x4, 0x2400) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000000)) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000140)={0x40002002}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x100000001, 0x5, 0x1f, 0xff, 0x40, 0xf6, 0x9, 0x1, 0x3ff, 0x89, 0x5c7, 0x8, 0x6, 0x400, 0x2], 0xf000, 0x104102}) splice(r1, 0x0, r3, 0x0, 0x200010005, 0x0) 02:29:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xba230000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x8, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100200000009, 0x3, 0xfffffffffffffffd]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:29:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891d, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1575.143751] validate_nla: 7 callbacks suppressed [ 1575.143763] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891e, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1575.286254] binder: 896:897 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1575.323276] binder: 896:897 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:29:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1575.342832] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1575.859207] protocol 88fb is buggy, dev hsr_slave_0 [ 1575.864315] protocol 88fb is buggy, dev hsr_slave_1 02:29:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff0000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891f, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:35 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', 'lo\x00'}, 0x8) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a41c) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000012c0)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f00000013c0)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001400)={@loopback, @dev={0xac, 0x14, 0x14, 0xe}, r4}, 0xc) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000100)={@rand_addr=0x3f, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x325) 02:29:35 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x404000, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000080)={0x5, 0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, &(0x7f0000000100)={0x6, r5, 0x1, 0x2}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000000)={0x1, 0x7}) 02:29:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1576.107979] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8920, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f0000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:36 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="75098c8a08545912410d041808ebe8906de57520e96cb3c2a4dc84127b0cd5bff261c2427cbb42f2efcb17a2d293b4b6125f1b52803ebd7c388a6e77a555d6ea83cecda49acb981f33f1079fc3e148ff5bccb712852d74d3aff8e03fa72879272f753acd9902b6d429a2f916386361e0538b717c841660442fe2ffd173e55dedbeba43ffd47999b97ab3e0ac92a64d3dcb6c0c7e84a8a928dcd6b7e46720a763b32321f8a8a9804126bddda1ad6a9cd05e3c50eb", @ANYRES16], @ANYRES64=r1, @ANYRES64=r2], 0xfffffffffffffe60) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) sendmmsg(r1, &(0x7f0000003400)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @multicast1}, 0x4, 0x2, 0x1, 0x3}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="a5641a4e710f426149ab5c113ad477ac34e6332e0ee50ec62dbdc4fc023612752fa80bea383729ffec1d3b8e5082913c3ee0327434db6d8e4c8abba8ad92dcba61e97f41fe628e35a70a1877a3d9264b2372bc451a9fc7bb52ba851b85fb311b13e9d0c671533f7e2a6251c128c6cd109812772e48673492e948c10075ff436d99", 0x81}, {&(0x7f00000002c0)}], 0x2}, 0xefe0}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000380)="eb9dff62e05c5c7897f2db9ad12b89503c5469d5e44902f89877739ef4b4756a2ed173af057a1b76ca55f9b0cbe227eb32f6e07255fa1ac50ad3f04b0fcfe3b85eeda391c80f29116f5510a097131cdd3b0b0e083c67c0c015", 0x59}, {&(0x7f0000000400)="10a29cd7865a4a0ba8c79a0b42d86d05c9d945fe154bce28fce6dc50f7b23a814585ede741fcae4d22d8654a588d37b91033cf", 0x33}, {&(0x7f0000000440)="05af79d26e0be41f8a819ac600b37c6f0f836a9db231188269736f4457b25cffd7db7354effda9f24a94bb7f1a867f6d17f64bcfb7233d4a848d9b55affdc59974b109c856d38e066e8c9f00890ab9322516e35aaf75cdcefd85c0715b54f3e98a5a245d01eb939329b655ccb448cc1206d3aa271b4a519fd0b2af233368f4b6351f96d163fb3c793bdbf59d", 0x8c}, {&(0x7f0000000500)="6ac93d85dc2a429fc1f19acd6aef4204308747d9a77331af2db6d9045653a370485624a138f9eb38ef30de0aca12e28cd8875d0c7befd5a416a24d6b031f9b62e4b536e5131fa42735c470e633c494802fdb8c3166a53bb9ad753d63062930a7cf13be4285a148390a87c8b658a4ac71e8ac8c321ee1045cd652caa37293f209f3dfba36ee940cd33633d1c2ea937481059ad2f6c0bd44f69d709c9fe4da146917d9eee4d1100a77eb81cb3a209a69f88faf7940f62cc85e12c230c28288de0baaa83adfc68d52d6c418e3bc480b7342f05b24030196", 0xd6}, {&(0x7f0000000600)="603ac4a0a3cf89cf5718a7ae19a9982670e4173e4cf6462ea03c7bb53f92ed2ac61cd522df7983937ef17151577e8138aa56eedf6ea80d2aa94768e82deb6a668f0133e0e11d8b6c651a31226874a6", 0x4f}, {&(0x7f0000000680)="73faa227ecc8baf3d174e444e5001b8544ce23fd7f8c3b68b968f487c87fb07478f5545c", 0x24}, {&(0x7f00000006c0)="9980e70bb81c9ad4b9255c9ef266f3dfe1064ddc6f91b25d401f8bf25c27874268b95c4aac1b2a5597979911039a1579749b5b30515a6c76eaddbf50cffe18fb1c22f6aea929e06944735fc21acfcc11429990cc001d63a23a76e4e3f05f3840d5d4c12208bdb26cc7502807db65a6dcd151a541845695ccd26392c1e26a105a210d4ed272726046b3aabdfb87e25274c5c1b532afbf2fc2cf7f1b5300cf60aacb6d96acc29ce2ba2c6331c5cc635e25ec0b32d97ddd72b76271", 0xba}, {&(0x7f0000000780)="13f74487bac825e585efc44a5778e927da32408da1175dfbb968ec4f738e34d50716c68978320dfc08d065c7f128426e3af29b641aecbf35e3b5b3caa9783617b3b5abd13a1d643000045aa5125b912ac6b8083f75aa29ab790e34a123159fa223ee3bb9887a7e8c9d488c6297732e62a57dabe4a0b248839b4b085f61aa7c9edb227385ef8b31d467fcbae2edfd5bb2b3b34fe02f429ad6dfed51507837f4424aab5843", 0xa4}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="9020add585115228a0fde128cba6e9d2fa93995e691ee43a785fbc94e16963523f6f7c3b", 0x24}], 0xa, &(0x7f0000001900)=[{0x64, 0x13f, 0xe45e, "821babaee30e1549d74339c4ada4adbe393dd1a8499d784492711a52700d32757c0aa0d27954b7373e489e4f408b990a58bf545eebab69352607623747f3c38046af0f03540c649d030d8b0cedfbcdcd18531d49b7a8a6"}, {0x100, 0x108, 0xff, "7b303ece747224d99e07ebef7783bab48873cb67ab6c93f021a15a7330085f3b727c05e3c234fb7ad91eeb245f49c5a97246374b6525f6cbe1866f664be2c112ed3fedf9d6829e4b0d62453e491b801e25d6647d098d9983147ff3df6331175d3eba3f7f4459fcefd04a1321ca4158bd63dc7d0b912ac2926f43d7e9651d49744969d5b3acf9d36e15370a4b3a03bb117a84b7a08f68b300cb21a4f4069ac69d5036adcb1aab632460aabf190314f54f76e67f40f52961cc9d46fbaf52988a199f4c1afe3dcc8af0a2f115972f9e23e2f1944aa50a4d75d72bdaed3a83fe0be5c57683e92dab1c170fea962d936994c8f9"}, {0xa4, 0x18f, 0x9, "37dd628ef9cc375cc8af18ad5495692827e58d37427f1bae15521634f2a3b9f43ad5b0fc78b489659d3d5b9558280da1324b81e28631ed9da0e0a73571afbe9ff78627b78fe6d31e11a9c4484a3aab4ecd0c8663c9ab80899aefbf6127830a4f21429434f1c01460f274a9a763d3d4eaae580580b728454db092b76aa163e99b2431c1c4c350751acf55e87c2439b4bf0bf7838cf9e1c1"}, {0x6c, 0x111, 0x180, "8d020fc10f9c8e2e79a44ac0efabcc11fae5bc1242a412d678428d6912f0bcfb2b0765e0eacaf846ae81b57e517d3b062c24349a779733dc29c0a8d145968cebd09037404e25ceb35d2b8be9a9c4c91b9e3e4219483e1878d70e994a118f"}, {0xf0, 0x113, 0x7, "fdda15c923eaa7eb950376d7d82e4203cfe492dd0778687027429a3f6f0c00fd806a19aa1b2b82c9747dbf639869f24ac0325c3598ae20474eb09e850ae657894e848b3f0a65ff460131815d00108dda0317bfadd0276b147153402f3b3e23628ac9d2f09e3f43e4eea721c8749b65f0af8a2607cf648777f1a516720af622d9efb60788e06606b8312a0e32372cbd94d676fabb530b185ac9ca43fc4154a3158b833c797574ffdd81e172f326facde9b9238e1aec9a9c5b0d0786539a6176b2f64e1e93d5822b3f03f0cbfd343f41b08334627725eb513e376f6e9e33a9ae60e160383a"}, {0x104, 0x10a, 0xffffffffae5ded05, "a5940ce829c65e58452e3d8d8f5e564f8f73725b7fe3e7d01af731c2999efffc18e154148c99012c3314faba20d64e75efdf52dfa4435d62c5994a54d277816998c5c7323b6d60a11028f8606243bd8d887925df212a6db888f08e516ced0ca68d2276e8c88d3fce69dd26b0283a2e9880e8d4b5b5a356f16eef448d5558552e82c72b74f0405ca3318766b1f7fb49d797c83a1be56afd2393b412ea9d584b9f74a680668ebd4717fe2d44e1f105df1022488960927c23744acd973013043d0f8e8b9ab80834cf41f6d2e59ba4744d8cf879c845a01d12364dd3032d19e0545937b9b70743f0025466e5cd8928bed5bce921821c6edd"}, {0x38, 0x117, 0xfffffffffffffffa, "255825591d3794db69433dc333cbe651611ee20f82709ae9401406d1ebbf627f306e878648c7bae4ef"}, {0x68, 0x115, 0x5, "41b1cd9ba3cb48d6e4e17f1fba866c3eaf347a9eb0eb67feb2fe026a125c8ee2d17aaf79ea4f40703871dc079e175ac1cb42f2cb5e32eae03569c7216fb00c1dd45d91b5a5410c68b4f71fc17587613d25dce5f130ddfc458bd5"}], 0x508}, 0x5}, {{&(0x7f0000001e40)=@pppoe={0x18, 0x0, {0x1, @dev={[], 0x28}, 'bcsf0\x00'}}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001ec0)}, {&(0x7f0000001f00)="d6de7f0c7fac8fefc875fe3dd1bbf41d9fbdf270f47404cf64a3850bbb939ecd10ff2dcbdd9cf7dbf1096a6d4b8c54fe7393c7de4fbd91c329a857ca260709965be21720bdbf751b11879d128b1efe34cf783d2d9b7738a77a1573f9bf875a39ce46b39d2536a63b8f2abbd5362cf6e6c2e6d3ebfd79f01708c4354bb7c6fc1f0a5237015bad8a7613c5ee233128f34fb5f473806e9878213c3ad774f637c542b759b41dc34c25b9b979c4af85e7bdf5a8ff1f45b8a82fd2f4a828ddcfcf8ec06c7b1173daa5b2130cc390f5837e3466df03c3c599b6d58ac5c9a0fc", 0xdc}, {&(0x7f0000002000)="6d0e", 0x2}, {&(0x7f0000002040)="0580833eab8a7b32cebc0c3e5b339fd02e1a9e07ce44ff2a539cb944b51e32109884cfeca38c37ee0757809169f95467d50deb5e58a69caf660cea8c9d8792a82598cbf53e53e8136014e8cc50d72ba1bc1df99b0d796f1b6446d52b963bcee3c4b9bbb556de", 0x66}, {&(0x7f00000020c0)="7f52a80b02627eaf7b078d193ecb7e0390fe0e5718019dbf189aacf147ada40cc4c46ac75ae16ba55905e7316110567aaa7982df3bae188c1a8c2764dbc86265971a5557c40a3e454cafdfdcf993784beffdb038d7778fef4cd09052e1564944abc9927fe07e0c", 0x67}], 0x5, &(0x7f0000002180)=[{0x4c, 0x103, 0x714072c2, "27c82aa06cdee93ce3a1bb4e22ebab7ffa60ed7acef1b307669dd2b2b474211e064b84712e911177e00ebe2128950d061639fb21ee97f179e4cdbf7751"}, {0x2c, 0x29, 0x2, "857063c479c0e3cd79f4dbda779b4bd5771724711ea2011a05723b339fa0"}, {0xdc, 0x107, 0x3d1, "cd027ebc261b4f2d9e36d756a5eecad9e021db15a2d769c8171c747a39c6b12946f8d4575ef47924b6535c29878a0fe22a3f6acf03187c9d39f8ad9dcc4989f612c3e8fe5077536937ab92d469f525bf089d35f7f09bcf5be2cea9ed16a71afed51eddb5cfbca5ee696e2e76386fe5c8feba67c066790c1e974a24cd287605130727f34ba6c5da16d09fe498d9327da442e959f88708691a34e22fde6fafe55db618df3364a12aa003dfc1c5a15aed072d85d70140bc15e4305aed88a727f58fb77e6cc1ab050508aea550767bdcb2"}, {0xb0, 0x84, 0x7fff, "c2677670fe7a2bd07abec01afb553ff184e53bf54053998eee835fdbcbfa9659d8fea5c4e09f2911bd656aa396df4565cb3a4cca8cee4f51412947a24d1eeaab75338a45bef8f37f28aa59a201bc64d16129996bd64aad16e578e495e2817c36e5c522dcf1e4f0159dc3769fc7e3aa24844b255ef2af8eddb92652398bb47d1f78e2ac9497e1dd0238427060b734a2b7fa4028e48adeb791d334938afe0d6ebc17"}, {0x100c, 0x117, 0x9, "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"}, {0x44, 0x88, 0x5, "9cc993b90d244cc74a301d0cf5c8bfa1d460ec90f101e25d725f0e517fb489323f2f1aef11cdb919ae9f761d4655501c349e9a81b2"}], 0x1254}, 0x5}], 0x3, 0x4000000) 02:29:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1576.332577] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8921, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1576.576574] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:29:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1576.857977] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:37 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8923, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 02:29:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1fd, 0x140) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000040)={0x5, 0x26, "814fdea90f2e74daadf20046d78a4d1db4bf34a57c54e51ad461e26ea9e81b2ea9020e87e370"}) 02:29:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1577.300881] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1577.310851] binder: 1322:1332 ioctl c0306201 0 returned -14 02:29:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8924, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 02:29:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'bridge0\x00\vR\x1c\x8c\x97}\xa8M', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1577.495586] binder: 1342:1347 ioctl c0306201 0 returned -14 [ 1577.502869] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8927, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:38 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x20a400) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f00000000c0)=0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 02:29:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8929, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:38 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) clock_gettime(0x3, &(0x7f0000000040)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000000)={{0x0, 0x0, 0x5, 0x3, 0x7}, 0x8, 0x492e}) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x81, 0x10000) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000080)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x103ff, 0x0, 0x4002, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:29:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8930, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12080004000000000000000800f00000020000000000080000d8adedfeeb350000000000"]}) [ 1578.133520] binder: 1466:1467 ioctl c0306201 0 returned -14 [ 1578.159021] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:29:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1578.411420] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:29:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40030000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0) userfaultfd(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001180)=[{0x0}], 0x1, &(0x7f00000011c0)=""/54, 0x36}, 0x92db}], 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB]) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:29:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:39 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x800) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 02:29:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:29:39 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) write$binfmt_aout(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x91c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0xa4180, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8937, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 02:29:39 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x8000, 0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000100)={r1, 0x2}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) [ 1580.019198] net_ratelimit: 15 callbacks suppressed [ 1580.019208] protocol 88fb is buggy, dev hsr_slave_0 [ 1580.029314] protocol 88fb is buggy, dev hsr_slave_1 [ 1580.034567] protocol 88fb is buggy, dev hsr_slave_0 [ 1580.039850] protocol 88fb is buggy, dev hsr_slave_1 02:29:40 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r3 = socket$pppoe(0x18, 0x1, 0x0) dup3(r2, r0, 0x80000) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8942, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:40 executing program 2: socket$inet6(0xa, 0xfffffffffffb, 0x0) epoll_create1(0x10000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0xff) 02:29:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = fcntl$dupfd(r2, 0x406, r0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x68, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1000000000006, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4880, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1580.179174] protocol 88fb is buggy, dev hsr_slave_0 [ 1580.184330] protocol 88fb is buggy, dev hsr_slave_1 [ 1580.188059] validate_nla: 5 callbacks suppressed [ 1580.188070] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:40 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x101001, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xce, 0x400400) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000000010120800000000000000000000"]}) [ 1580.220885] netlink: 'syz-executor.1': attribute type 15 has an invalid length. 02:29:40 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000200)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'veth1_to_bond\x00'}}, 0x1e) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=""/125, 0x7d, 0xffffffffffffffff}}, 0x10) write$P9_RMKNOD(r0, &(0x7f00000001c0)={0x14, 0x13, 0x2, {0x40, 0x2, 0x2}}, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r4, 0x4) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYBLOB="7aeb3a061db41ff8751adf758e1bcc7976c2b0f2f68185e4b5ed37fd32be050daa75ac7522bce60a6b9a5e89c510d645f7d08708c8ab87657c5e709bd41aa03c2109fab061db99eda3e6896e8d381ccf4054f1ab96e88ceb14496d033809f510ab146025287d00258e98b7d617c27019b3cedabbf7b872230010000058dcc68764821a6372b1e7a157b3ca98e5b3c8a79e477e90ed83aa433c17d3873f7e08a13dec61dde8"], 0xf9) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3f, 0x501000) fcntl$addseals(r0, 0x409, 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = pkey_alloc(0x0, 0x3) pkey_free(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x141005, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000340)=0x80000) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x1, 0x0) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000a80)={{0xfffffffffffffffd, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r7, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['\x00', ']\x00', '^lo\x01lan0vboxnet0\x00', 'selinux@\x00', '\\\x00', '\x00', 'ip6gre0\x00'], 0xfffffffffffffd32, [], [0x3, 0x800000000000, 0x3, 0x2]}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0x4ba) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) getgid() r8 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000010c0)=ANY=[@ANYBLOB="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"]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x2}, 0x10) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x19b) [ 1580.389789] QAT: Invalid ioctl 02:29:40 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(r2, &(0x7f00000000c0)="aee6a1ef0bd955feb4ae54f370d4f090ab8fe68ec0153ff1da39ff4863dc110372354e4a82a877fb6c7cc9cbf35ce1a86b461806b1114e9b93caeff49747a54e1efca3991bf9f14e96b61a43f48d739ad4a13cae207b73cb193f6798082773ddb6b65eb7371d96baeb511d19ae5ebd2457073ff7cd5293e93d6324b59c2361119401b1c233f1d2da738cbd51", 0x8c) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1580.419462] protocol 88fb is buggy, dev hsr_slave_0 [ 1580.424622] protocol 88fb is buggy, dev hsr_slave_1 [ 1580.445366] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={0x0, @remote, @multicast2}, &(0x7f0000000700)=0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000740)={r2, @local, @broadcast}, 0xc) r3 = memfd_create(&(0x7f0000000240)='\x00', 0x0) mq_notify(r3, &(0x7f00000001c0)={0x20000000, 0x3, 0x2}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8947, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1580.668612] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:40 executing program 2: r0 = socket$inet6(0xa, 0x800, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/99, 0x63}, {&(0x7f0000000600)=""/98, 0x62}], 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="ae8789ef12000000000000000010120800000000020000000000121f468c4c65ba3900005c11515c8b0d0af77950e47dcf89b2957d230d27b1a7f4ea6bc85bbe4f151b1e27f1aeecff50aeaa0038de7b5f9c462ecf915641b4f5494dac089ddaac82d006373a05bc92ba3013c8af052ce0ef4edd3aaa4e5a5aaa3d2e6ccb7541852739fb69bb2a819e5ecd7ade560a8d593f0a70b3c7e6c753107fcdba6cd42b381d3134a59eacc77e6e47551ebae8fbd49bbde2c337b6041046a6df78"]}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x20) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000200)=0xc) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000180)={0x1, r3}) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f00000001c0)) 02:29:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init() ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:29:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1580.992131] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1581.142943] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1581.165811] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:41 executing program 1 (fault-call:3 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1581.332266] FAULT_INJECTION: forcing a failure. [ 1581.332266] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.343931] CPU: 1 PID: 1973 Comm: syz-executor.1 Not tainted 5.0.0+ #14 [ 1581.350800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1581.360167] Call Trace: [ 1581.362836] dump_stack+0x172/0x1f0 [ 1581.366615] should_fail.cold+0xa/0x15 [ 1581.370544] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1581.375682] ? ___might_sleep+0x163/0x280 [ 1581.379883] __should_failslab+0x121/0x190 [ 1581.384149] should_failslab+0x9/0x14 [ 1581.387979] kmem_cache_alloc_trace+0x2d1/0x760 [ 1581.392689] binder_thread_write+0x1968/0x2820 [ 1581.397306] ? __lockdep_free_key_range+0x120/0x120 [ 1581.402362] ? binder_transaction+0x6690/0x6690 [ 1581.407068] ? __might_fault+0x12b/0x1e0 [ 1581.411176] ? lock_downgrade+0x880/0x880 [ 1581.415368] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1581.420929] ? _copy_from_user+0xdd/0x150 [ 1581.425102] binder_ioctl+0x1033/0x183b [ 1581.429117] ? binder_thread_write+0x2820/0x2820 [ 1581.433916] ? __fget+0x381/0x550 [ 1581.437400] ? ksys_dup3+0x3e0/0x3e0 [ 1581.441144] ? fput_many+0x12c/0x1a0 [ 1581.444918] ? tomoyo_file_ioctl+0x23/0x30 [ 1581.449175] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1581.454738] ? security_file_ioctl+0x93/0xc0 [ 1581.459180] ? binder_thread_write+0x2820/0x2820 [ 1581.463959] __ia32_compat_sys_ioctl+0x197/0x620 [ 1581.468751] do_fast_syscall_32+0x281/0xc98 [ 1581.473104] entry_SYSENTER_compat+0x70/0x7f [ 1581.477530] RIP: 0023:0xf7f59869 [ 1581.480926] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1581.499999] RSP: 002b:00000000f5d550cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1581.507725] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 1581.515012] RDX: 0000000020008fd0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1581.522296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 02:29:41 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x10001, 0xe54, 0xfff, 0x7fffffff, 0x4}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x8) 02:29:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8949, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @dev}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', r1}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1581.529586] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1581.536895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 02:29:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x9, 0x3, 0x0, 0x2, 0x8, 0x7fffffff}, 0x20) [ 1581.578081] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1581.586349] binder: 1971:1973 BC_REQUEST_DEATH_NOTIFICATION failed 02:29:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x80000000000) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000300)={0x8}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f0000000100)="d49b1c397bba7b0a9b61b59e1600e5990a7a", &(0x7f0000000200)=""/37}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r4 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:29:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1581.624299] binder: undelivered TRANSACTION_ERROR: 2147774976 02:29:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:41 executing program 1 (fault-call:3 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:41 executing program 2: r0 = socket$inet6(0xa, 0x4, 0x7) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1581.784735] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1581.797922] binder: 2079:2081 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:29:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8970, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1581.974052] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1582.099178] protocol 88fb is buggy, dev hsr_slave_0 [ 1582.104659] protocol 88fb is buggy, dev hsr_slave_1 02:29:42 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x7000) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) munlockall() write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:42 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0) sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000380)="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", 0x102}], 0x1, 0x0, 0x0, 0x4000800}, 0x44) r1 = socket$inet6(0xa, 0x1, 0x78b66b41) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000000010120800fc0000020000000000000000000055b7656e000000000200000000"]}) 02:29:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8971, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:29:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8990, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1582.489966] binder: 2210:2213 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:29:42 executing program 2: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) utimes(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={{0x77359400}, {r0, r1/1000+10000}}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) fsetxattr$security_capability(r2, &(0x7f0000000400)='security.capability\x00', &(0x7f0000000580)=@v3={0x3000000, [{0x1, 0xffff}, {0x7f, 0x9}], r3}, 0x18, 0x3) getpeername$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) r4 = socket$inet6(0xa, 0xb, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000140)={0x8, 0x7, 0x4, 0x3, 0x8, [{0x81, 0x6, 0x1ff, 0x0, 0x0, 0x4}, {0x0, 0x5, 0x8, 0x0, 0x0, 0x2104}, {0x5, 0x700, 0x5, 0x0, 0x0, 0x800}, {0xec, 0x3a98, 0xe6, 0x0, 0x0, 0x8}, {0x0, 0x1, 0x4, 0x0, 0x0, 0x2}, {0x4, 0xdf49, 0x9, 0x0, 0x0, 0x2183}, {0x1e, 0x1, 0xc8f4, 0x0, 0x0, 0x80}, {0x7, 0x0, 0x9, 0x0, 0x0, 0x208}]}) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8992, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1582.695091] binder: 2231:2232 ioctl 2 20008fd0 returned -22 [ 1582.757385] binder: BINDER_SET_CONTEXT_MGR already set [ 1582.771613] binder: 2231:2232 ioctl 40046207 0 returned -16 [ 1582.778259] binder: 2231:2243 ioctl 2 20008fd0 returned -22 02:29:43 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:43 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0x8, &(0x7f0000000200)='bridge0\x00'}, 0x30) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r1) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000000c0)={0x4, 0xffffffffffffff80, 0x0, 0xffffffffffffffa4, 0x5, 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x7, 0x7, 0x40, 'queue1\x00', 0x69f}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040)) 02:29:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/43) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000100)) 02:29:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x84, "393a5423f3d71c7e1ae57785bf1e0344eac243d1a5a1827b0b0cfa210370c3fd1da11f5fd5833b8a06170f9672c7dc18e1b00849db139cd1732877aef2f66e9ae6837fc6fcab2ddd7967f670f4967a878c41fd37450b970206b1d093e458ebc3fdc98f240ae73c4dbc90ce3f12007822dee926306f58ed6872479adc1a87d65f04e819c1"}}) 02:29:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1583.384891] binder: 2352:2353 ioctl 541b 20008fd0 returned -22 [ 1583.416708] binder: BINDER_SET_CONTEXT_MGR already set 02:29:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8994, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1583.444137] binder: 2352:2353 ioctl 40046207 0 returned -16 [ 1583.478743] binder: 2352:2353 ioctl 541b 20008fd0 returned -22 02:29:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:43 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xe4b, 0x101400) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) [ 1583.643686] binder: BINDER_SET_CONTEXT_MGR already set [ 1583.690130] binder: 2374:2375 ioctl 40046207 0 returned -16 02:29:44 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r1, 0x0, 0x200010005, 0x0) 02:29:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8995, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8001) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x200000002}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000002c0)={r4, 0x10001}, &(0x7f0000000300)=0x8) ioctl$TUNDETACHFILTER(r3, 0x400854d6, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009, 0x0, 0x7ffffffc]}) r6 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x200) r7 = getpgrp(0xffffffffffffffff) write$FUSE_LK(r6, &(0x7f0000000040)={0x28, 0x0, 0x8, {{0x1, 0x1, 0x1, r7}}}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, &(0x7f00000003c0)={0x3, 0x1, @raw_data=[0x9, 0x0, 0x0, 0x0, 0x8, 0x100000001, 0x2, 0x4, 0x5, 0x3, 0x0, 0xffff, 0x7, 0x4, 0x8, 0x45]}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000340)={r5, 0x4}, &(0x7f0000000380)=0x8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) [ 1584.261203] binder: BINDER_SET_CONTEXT_MGR already set 02:29:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@rand_addr, @broadcast, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$xdp(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x2c, 0x0, r2, 0x1e}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="4b9879121220f6f6e27865b4b3b36a", 0xf}, {&(0x7f0000000280)="f233a2f5e047e320b3ffd0b36625107154c8b10445f894b82b1fd896778621334344d35b9605c5dd10189ee8ebd5f6f57eb96e89b1412671f0b8dd63b21c5fa11e635eed04a643afca1570658b53c40a5f08a3cac177f62c5823db0c2bd5229a01c9fb4b67ff325f519173209062383022a773b7f68f39144a9452dc84d9bbac20962c1010dbd67227abb4e5c1d9a4dca8de851a8eff40a62428a65e681e09038e91c387742dfdfa24d272d7dbc9ddd18b1a4332a4a98ce9d3c9390ae42b7c3f8cc6da55cc0965c3728f5fea202e826f507cf78ab067ab64e8487ae385d6fb5684eeaecf502b39641b4c5ee2b6cbaf6dbcf2d988be5456", 0xf7}], 0x2, 0x0, 0x0, 0x4000040}, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1584.295551] binder: 2498:2500 ioctl 40046207 0 returned -16 [ 1584.332839] binder: 2498:2503 Acquire 1 refcount change on invalid ref 0 ret -22 02:29:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89a2, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1584.344886] binder_thread_write: 4 callbacks suppressed [ 1584.344901] binder: 2498:2503 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:29:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89a3, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1584.472378] binder: BINDER_SET_CONTEXT_MGR already set [ 1584.497403] binder: 2525:2526 ioctl 40046207 0 returned -16 02:29:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) 02:29:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:45 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ftruncate(r2, 0x8) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xe, "c54ce50dd75f122241c35c7a4aed"}, &(0x7f0000000040)=0x16) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x8, 0x8000, 0x400, 0x3ff, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={r3, 0x8, 0x1, 0x5, 0x6, 0x9, 0xffff, 0x2, {r4, @in6={{0xa, 0x4e22, 0xffffffff, @mcast2, 0x7fffffff}}, 0x100000001, 0x2, 0x0, 0x1000, 0x2}}, &(0x7f0000000200)=0xb0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1585.171151] binder: BINDER_SET_CONTEXT_MGR already set [ 1585.190553] binder: 2644:2648 ioctl 40046207 0 returned -16 02:29:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/129) 02:29:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b1, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1585.325906] validate_nla: 13 callbacks suppressed [ 1585.325924] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x40049409, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1585.380849] binder: BINDER_SET_CONTEXT_MGR already set [ 1585.397070] binder: 2670:2671 ioctl 40046207 0 returned -16 02:29:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6558000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:45 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x22000) r1 = socket$caif_stream(0x25, 0x1, 0x0) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x1, 0x3, {0xa, 0x4e24, 0x8, @loopback, 0xe000000000000}}}, 0x32) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x4020940d, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1585.569966] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1585.601324] binder: BINDER_SET_CONTEXT_MGR already set 02:29:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ftruncate(r0, 0x1) [ 1585.618691] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1585.631841] binder: 2725:2726 ioctl 40046207 20008fd0 returned -16 [ 1585.658592] binder: BINDER_SET_CONTEXT_MGR already set [ 1585.679434] binder: 2725:2726 ioctl 40046207 0 returned -16 02:29:45 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000380)={0x9, @vbi={0x0, 0x7fe0000000, 0x2, 0x7e314f5f, [0x8001], [0x3f], 0x2}}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="ec7ab0aec64bbc087c120171928d8117", 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) r4 = add_key(&(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="6f9499b83f6295b84618b3de04f10cbb425333b94e8de207fb66a2893768b04581d6e8ee5e16a20fbea3343e9fce", 0x2e, 0xfffffffffffffffe) keyctl$clear(0x7, r4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x4, @empty, 0x4}}, 0x81, 0x40, 0x2, 0x1000000000, 0x7}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, 0x4) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x402c5828, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 02:29:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:29:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="1200009b00ce00000000101208000000000200365f9943957a465500000000000000000f00a618a9e2000000000000000000"]}) [ 1586.062088] binder: BINDER_SET_CONTEXT_MGR already set [ 1586.075400] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1586.082689] binder: 2809:2811 ioctl 40046207 0 returned -16 02:29:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x402c582a, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1586.243231] binder: BINDER_SET_CONTEXT_MGR already set [ 1586.259183] net_ratelimit: 14 callbacks suppressed [ 1586.259192] protocol 88fb is buggy, dev hsr_slave_0 [ 1586.267468] binder: 2830:2831 ioctl 40046207 0 returned -16 [ 1586.269540] protocol 88fb is buggy, dev hsr_slave_1 [ 1586.269666] protocol 88fb is buggy, dev hsr_slave_0 [ 1586.285527] protocol 88fb is buggy, dev hsr_slave_1 02:29:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0xc0189436, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1586.314436] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1586.345497] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1586.419408] protocol 88fb is buggy, dev hsr_slave_0 [ 1586.424663] protocol 88fb is buggy, dev hsr_slave_1 [ 1586.659179] protocol 88fb is buggy, dev hsr_slave_0 [ 1586.664300] protocol 88fb is buggy, dev hsr_slave_1 02:29:46 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) getsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)=""/100, &(0x7f00000000c0)=0x64) 02:29:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7400000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:46 executing program 2: r0 = socket$inet6(0xa, 0x4, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0xc020660b, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1586.954452] binder: BINDER_SET_CONTEXT_MGR already set [ 1586.965055] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1586.976676] binder: 2950:2955 ioctl 4018620d 20008fd0 returned -16 [ 1586.997171] binder: BINDER_SET_CONTEXT_MGR already set 02:29:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1587.018277] binder: 2950:2955 ioctl 40046207 0 returned -16 02:29:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'vxcan1\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="12000000000000000010120800000000020000000051916377f3995580f69f746022d8fc1551b60ea5147f2f8cc5fa671678db000000500a0000002320a9077540b2d90479a9ff0a162bf2e3496d8df3946d6680d13e0100c69dd3b4575473d0d3c4cc6e627cb50e34f6a6e70d374187107b51d55130f4a08e5bb16d5c50be9c8810e36b717ea45831100ffc027dac7fc6b73c1cd9bb97e561c3bd8abf931b5d633899465276b413cb6ced59ad681ed93ea3ae3a10255743d3935f9a9fc5be3bcdfcfb019963a28302e162704de4714f23b4625bd35e8141b7da2a6d315a0ee34ba6c9973a7e73b52cc21ae94be0f1b434564b70a97b"]}) 02:29:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1587.126140] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:47 executing program 2: personality(0x5000004) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x6, 0xb88, 0x6, 0x2, 0x5, 0x5, 0x4, 0x9, 0x9, 0x4, 0x80, 0x1ff, 0x8, 0x401, 0x6, 0xf61d, 0x3bd, 0x2, 0x7f, 0xfffffffffffffff7, 0x3, 0x1}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0185649, &(0x7f0000000100)={0xf9f0000, 0x10000, 0x9ba, [], &(0x7f00000000c0)={0x9b0b5f, 0x80000001, [], @p_u8=&(0x7f0000000080)=0xffffffff}}) 02:29:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1587.243542] binder: BINDER_SET_CONTEXT_MGR already set [ 1587.285915] binder: 2988:2989 ioctl 40046207 0 returned -16 02:29:47 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-'}, 0x28, 0x1) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x402c5828, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400000, 0x0) timerfd_gettime(r1, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = dup3(r2, r3, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000000)={0x5, 0xffffffff, 0x4, 0x2, 0xa92c, 0x8}) [ 1587.894284] binder: BINDER_SET_CONTEXT_MGR already set 02:29:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1587.915053] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1587.922549] binder: 3108:3112 ioctl 40046207 0 returned -16 02:29:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x402c582a, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x440202, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={r2, 0x0, 0x2}) 02:29:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1588.083074] binder: BINDER_SET_CONTEXT_MGR already set 02:29:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1588.105720] binder: 3129:3134 ioctl 40046207 0 returned -16 [ 1588.114589] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1ff, 0x200000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f00000000c0)=0x201) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000009940)={r2, 0x1, 0x6}, 0x10) [ 1588.339176] protocol 88fb is buggy, dev hsr_slave_0 [ 1588.344428] protocol 88fb is buggy, dev hsr_slave_1 02:29:48 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_smc(0x2b, 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) ioctl$KDENABIO(r0, 0x4b36) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="c122253947a3f1ab6faf78f13ce2f40a093c949908241d5ca294f3a254be57dd1e4fb0910d014d31fff920d98cd6295dee77395afada0c79cfff8b437f801ba8981dc25724ce0fe142560a01cca4e16b0404b72f96687461f6056683cc80026a0f87a3d0c7378dd4c57812f0b30d3d445b4645ba22b642d283ab454dcbfbb58c", 0x80, 0xfffffffffffffffb) r5 = request_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='lo\x00', 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r4, &(0x7f0000000180)=[{&(0x7f0000000200)="4f42f25c0fe7c667ec1fbec0b64b1bb9dc9fe9e0854d1206240ce3b5424a3878b6b411497fe85487ca75330c5add2e584d72ca7952c75f44f5b14d4982149168bfa943337a47b45ccc89809a4146a72a2654b327eb27023d02a250789f228374b4b5841967a91ac118e6cef89aa23102e7d58a9f1687c63a516bdc68c4f2d42ce2aa4f8b26a45663e0a25705b277b13ffe737d3022954dad78304b68e7c9021158f4a2a3b60de4963f615049721fbeef5ebfb489c792d79b840b33beb56b351b94fb25c7215317ae3c73ce649d4c47a7b8b17a668313eafe5b54ee11a4ccb23fd5fd156b81193152dff6205c97", 0xed}, {&(0x7f0000000140)="5a4655c57e22890cb135234418cc08451c8c9357eab1c089eeff8d470008a716c35295e758b37d60555567d337dc2aa4111d7b899ec3fd2a21592ea711", 0x3d}, {&(0x7f0000000380)="3f272708c1be35150ee07eb58864dfbdf03b4185d0acd7639e2320e1e23b53f3fe78ef5be7594ca66988cbd4cdfa94350c2e501aca755e6bed482426608e809a17c474284ea649e84f923eeab16f03fb2cdb6d39a140c9961d1d8c27af23249338770f65e693af2b4f9eb5a410a62df21a6ee9a74546c75cbf9cebcd679dd3011007b9d4f80fe1588c4bfc52a948216d09a3dd8cff2157ecd87ab923ce8f34c09b15bc47ed5a9bbaa0e7e27edc8f882a9bc3bab7fa1c1c0e1bb8f7830447207097b21c641b122732a011f6", 0xcb}, {&(0x7f0000000480)="6a4b67b835ccffd81d63192b0423cf5c4b8961c525b01942d68e98cf42e45102d44bf82f57999f8749e6d4b64c6d39baa9aba67b2d032d6f8b35b7f51fa6b9023a760983826d4d7be1ec57e1642afbd630db727d9c210a33f6f8bf91bf80452828a236f0d4fe43adc038c52748821fe8", 0x70}], 0x4, r5) 02:29:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9900000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2, 0x10a) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f00000000c0)={0x3, 0x10001}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x8001001, 0x7, 0x3}) 02:29:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x900) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x7f}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000100)=r4, 0x4) setsockopt$inet6_dccp_buf(r3, 0x21, 0x8d, &(0x7f00000002c0)="93011f133abe3534f49ab2b8eefcbf2a2c3594bee2212370a074680c03fee2a0995c2256890866df901a24f9635d39d86315274054a9648cf228e26a652bdd974ead47a063e0b6412bf7dd0ecb5e13a21f691999ef5bee8d45a54375a9f6a9973cb8999e5cd0d21376472cbcea2811acaf23bad2cf1f322e02161c1355e5991617388f273e62446a189a6fefe3c40b", 0x8f) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:29:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1588.764242] binder: BINDER_SET_CONTEXT_MGR already set [ 1588.795758] binder: 3287:3292 ioctl 40046207 0 returned -16 02:29:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'b\x00\x00\x00\x00\x00!\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x39, 0x1, [0x86]}}) 02:29:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:48 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1589.003059] binder: BINDER_SET_CONTEXT_MGR already set [ 1589.057803] binder: 3324:3325 ioctl 40046207 0 returned -16 02:29:49 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r3, 0x0, 0x200010005, 0x0) 02:29:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xba23000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x01\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r2, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) getuid() lstat(0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000000010120800000000020000000000000000000000000000000000000019fde84685b4ecc0c2cab506b767967335e49ace94eba35a68f0213d4caffcceb6d11ea10e041b3fd9278700000000000000b5aa55610185bf94d293c813de6e33bc3a4dd2df3e668036cfca0c23863d9e307ded7c92aa1c94c768b67e9e622c7d2201f162f14c8e250e727dbcad78bbf8784dddd874f9"]}) 02:29:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1589.699850] binder: 3452 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 1589.699877] binder: 3452:3453 ioctl c018620c 20008fd0 returned -22 02:29:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1589.760757] binder: BINDER_SET_CONTEXT_MGR already set [ 1589.808277] binder: 3452:3453 ioctl 40046207 0 returned -16 02:29:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1590.022194] binder: BINDER_SET_CONTEXT_MGR already set 02:29:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1590.077636] binder: 3486:3487 ioctl 40046207 0 returned -16 02:29:50 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f0000000000)={0x40000000, 0x80000, 0x7}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1590.565760] validate_nla: 7 callbacks suppressed [ 1590.565771] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1590.578671] binder: BINDER_SET_CONTEXT_MGR already set [ 1590.584650] binder: 3587:3592 ioctl 40046207 0 returned -16 [ 1592.499206] net_ratelimit: 14 callbacks suppressed [ 1592.499213] protocol 88fb is buggy, dev hsr_slave_0 [ 1592.509277] protocol 88fb is buggy, dev hsr_slave_1 [ 1592.514383] protocol 88fb is buggy, dev hsr_slave_0 [ 1592.519445] protocol 88fb is buggy, dev hsr_slave_1 [ 1592.659242] protocol 88fb is buggy, dev hsr_slave_0 [ 1592.666258] protocol 88fb is buggy, dev hsr_slave_1 [ 1592.899215] protocol 88fb is buggy, dev hsr_slave_0 [ 1592.904344] protocol 88fb is buggy, dev hsr_slave_1 02:29:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket(0x10, 0x5, 0x10001) fstat(r0, &(0x7f00000000c0)) sendmsg$nl_netfilter(r1, &(0x7f0000001540)={&(0x7f0000001580), 0xc, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x1, 0x5, 0x808, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x1}}, 0x14}}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="12000000006bd479303d7c2c3e73d99210751600000000101208000000000200000008000000000000005e0896604c80887d"]}) 02:29:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @pic={0x9, 0x0, 0xfffffffffffffffc, 0x400, 0x8f9, 0x3f18, 0x1, 0x3, 0xd2f2, 0x7, 0x20, 0x1ff, 0x7, 0x3523, 0xfffffffffffffff8, 0xfffffffeffffffff}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:29:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc030620a, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:52 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x114) [ 1593.013785] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1593.014359] binder: 3604:3607 ioctl c030620a 20008fd0 returned -22 02:29:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x8f2b) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1593.059303] binder: BINDER_SET_CONTEXT_MGR already set [ 1593.077826] binder: 3604:3607 ioctl 40046207 0 returned -16 02:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1593.221563] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x2000) write$capi20_data(r1, &(0x7f00000000c0)={{0x10, 0x9, 0x2, 0x0, 0x0, 0x1}, 0x49, "4f74697cdbcb8da89df63c0db25cc982f4f6a0d538ad937678a02072b8a50230684fda180a7f7031b95e550f9aec6ba19613e4b4d3c392c20ff883432e9280dec7eeca854ddb2947c0"}, 0x5b) [ 1593.275672] binder: 3631:3634 ioctl c0306225 20008fd0 returned -22 [ 1593.295539] binder: BINDER_SET_CONTEXT_MGR already set [ 1593.311095] binder: 3631:3634 ioctl 40046207 0 returned -16 02:29:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000000101208000000000000000000000000000000000000000000000000f469930210b342ef2a3b063d54114ac6ef32805ccd6bfa86c2c111c59b414fde17faacde2f4c6b04c2cd8b2e4215c72ae008188799a1725b716d65183b88ab"]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x81, 0x7, 0x4, &(0x7f0000ffd000/0x3000)=nil, 0x1}) [ 1593.327454] binder: 3631:3645 ioctl c0306225 20008fd0 returned -22 02:29:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc030625e, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1593.476348] binder: 3671:3672 ioctl c030625e 20008fd0 returned -22 [ 1593.501884] binder: BINDER_SET_CONTEXT_MGR already set [ 1593.507262] binder: 3671:3672 ioctl 40046207 0 returned -16 [ 1593.530900] binder: 3671:3677 ioctl c030625e 20008fd0 returned -22 02:29:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7ff, 0x420000) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}) [ 1593.738940] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:53 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\xff\xff\xff\xc3\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:53 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001340)='/dev/dlm-control\x00', 0x20400, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000013c0)=ANY=[@ANYBLOB="07000000000000001b00008000020000030000000400000001000000000000000d00004001000000010000000300000000000000000000000100004001000000000000000100000009000000000000000f0000c000040000090000000600000700000000000000000d0000000900000003000000ff7f000008000000000000001f0000c0ff0000000000040009000000fc000000000000000b00000003000000ff070000000000000001000000000000"]) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0245720, &(0x7f0000001580)={0x1, {0x0, 0x1c9c380}, 0x7ff, 0x100800}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001480)=0x3, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f00000014c0)) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, &(0x7f0000001540)={0x0, 0x2040, "176e36b65a231445a0cfefe6ae048869ad2d8ca70a54feb1", {0x8, 0x9}, 0x9}) recvmsg(r1, &(0x7f0000001300)={&(0x7f00000000c0)=@tipc=@id, 0x80, &(0x7f0000001280)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/150, 0x96}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000001200)=""/86, 0x56}], 0x20c0, &(0x7f00000012c0)=""/44, 0x2c}, 0x2000) 02:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\xff\xff\xfd\xfd\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1593.913077] binder: 3774:3775 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1593.922332] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1593.949234] binder: 3774:3775 unknown command 0 02:29:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x92000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = dup2(r0, r0) openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1593.969258] binder: 3774:3775 ioctl c0306201 20008fd0 returned -22 [ 1593.995340] binder: BINDER_SET_CONTEXT_MGR already set [ 1594.035981] binder: 3774:3775 ioctl 40046207 0 returned -16 [ 1594.074375] binder: 3774:3786 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:29:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\xff\xff\xff\xfe\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1594.077389] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1594.110555] binder: 3774:3786 unknown command 0 [ 1594.133069] binder: 3774:3786 ioctl c0306201 20008fd0 returned -22 02:29:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 02:29:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x5e, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:54 executing program 2: r0 = socket$inet6(0xa, 0x4, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="12000000000000000010120800000000f4ef000000000000000000000000000000000000ae1bb13220109c6d5f25151de5cf0b8748ce2a3a58253a5e661253c0b2cc53af18f6a0a767b4f1e054717c699f86a9002a0816c45d0a1b26ab30f12ab3faecd2f001b19dd9eaef4b59416ce2aaf5df6643d978bab2086e01fc475bfece34d1ad48012fb35e18d66f2cfe967f307a19174ba08be08da333eddc603106d937ab998c2555d1530c77e08aef33f13a3324727bad156b4c3e48e47425f777138f5375c33b6525b9254c62e58246de3a2a55f3d3acfe6abc04882910eb9460952de40df2b9d470861d59edbb75698345fc7c37aef8a61f03133a81e7303892a70a2e71e3a708a4521521bfe32b56bae95afcec484f94c1f5dd1014c6480f63070e2f185c12c96e43d06bbcd463ade11ec4b12c5d0269a05843200eda65cd73dce694c97ad08dbf772c2b7391f66fb879ade6e3cb35b4ef8c036d04f5ce47094faa91b674678aa5"]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000140)) [ 1594.439292] binder: 3898:3899 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1594.457456] binder: 3898:3899 unknown command 0 [ 1594.464009] binder: 3898:3899 ioctl c0306201 20008fd0 returned -22 [ 1594.486412] binder: BINDER_SET_CONTEXT_MGR already set [ 1594.498308] binder: 3898:3899 ioctl 40046207 0 returned -16 [ 1594.505190] binder: 3898:3899 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1594.529885] binder: 3898:3899 unknown command 0 [ 1594.534606] binder: 3898:3899 ioctl c0306201 20008fd0 returned -22 [ 1594.579201] protocol 88fb is buggy, dev hsr_slave_0 [ 1594.584328] protocol 88fb is buggy, dev hsr_slave_1 02:29:54 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in=@empty}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'veth0_to_team\x00', 0xae}) 02:29:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\xfd\xfd\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x2, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:54 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8c0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f00000000c0)=""/240, &(0x7f00000001c0)=0xf0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x7, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:54 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={0xcb}, &(0x7f0000000040), 0x8) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x40000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x4b, 0x1f, @buffer={0x0, 0x2f, &(0x7f0000000380)=""/47}, &(0x7f00000003c0)="fd16166b3dc974a756b00b18309d8cc3c642e82d338b40c737c117c21b8eeb99d7a74369bb764eda19b279420859fa81185f6faa727d13ad9bb42b67a4bff55cdd1f8273c88a67fa4a966c", &(0x7f0000000440), 0x100000000, 0x0, 0x2, &(0x7f0000000480)}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000500)=0x757, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "c70e066fc326a079296a9887d873d1e3"}, 0x11, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000440)={0x1, 0x9}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x80800, 0x0) getsockname$netlink(r2, &(0x7f00000002c0), &(0x7f0000000300)=0xfffffffffffffe89) 02:29:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\xc3\xff\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1594.843250] binder: 4016:4022 unknown command 16396 [ 1594.848390] binder: 4016:4022 ioctl c0306201 20008fd0 returned -22 [ 1594.861701] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1594.897383] binder: BINDER_SET_CONTEXT_MGR already set 02:29:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) [ 1594.925110] binder: 4016:4022 ioctl 40046207 0 returned -16 02:29:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1594.968622] binder: 4016:4022 unknown command 16396 [ 1595.010029] binder: 4016:4022 ioctl c0306201 20008fd0 returned -22 02:29:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x3, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\xfe\xff\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) close(r0) [ 1595.060188] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1595.180219] binder: 4079:4081 unknown command 64 [ 1595.218776] binder: 4079:4081 ioctl c0306201 20008fd0 returned -22 [ 1595.248995] binder: BINDER_SET_CONTEXT_MGR already set [ 1595.267398] binder: 4079:4081 ioctl 40046207 0 returned -16 [ 1595.287913] binder: 4079:4096 unknown command 64 [ 1595.294520] binder: 4079:4096 ioctl c0306201 20008fd0 returned -22 02:29:55 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000000)={0x4d8f, 0x90c, 0x10, @dev={[], 0x1f}, 'sit0\x00'}) r3 = socket$pppoe(0x18, 0x1, 0x0) write$capi20(r1, &(0x7f0000000040)={0x10, 0x8, 0x5, 0x80, 0x7244, 0x1}, 0x10) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x01\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={'brid1\xe1\xf7\xa6!\xf1\x1d_\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x4, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x10001}, 0x28, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1595.738769] binder: 4165:4167 unknown command 0 02:29:55 executing program 2: r0 = socket$inet6(0xa, 0x80802, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000240)={'veth/\vto_bridge\x00', &(0x7f0000000180)=ANY=[]}) 02:29:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1595.768131] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1595.778131] binder: 4165:4167 ioctl c0306201 20008fd0 returned -22 [ 1595.807460] binder: BINDER_SET_CONTEXT_MGR already set [ 1595.852640] binder: 4165:4167 ioctl 40046207 0 returned -16 02:29:55 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x440, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) read(r2, &(0x7f0000000040)=""/25, 0x19) bind(r0, &(0x7f00000001c0)=@x25={0x9, @null=' \x00'}, 0x80) 02:29:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1595.897144] binder: 4165:4173 unknown command 0 [ 1595.904087] binder: 4165:4173 ioctl c0306201 20008fd0 returned -22 02:29:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x5, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1596.039704] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1596.134019] binder: 4217:4223 unknown command 0 [ 1596.152011] binder: 4217:4223 ioctl c0306201 20008fd0 returned -22 [ 1596.184621] binder: BINDER_SET_CONTEXT_MGR already set [ 1596.196475] binder: 4217:4223 ioctl 40046207 0 returned -16 [ 1596.204161] binder: 4217:4238 unknown command 0 [ 1596.215127] binder: 4217:4238 ioctl c0306201 20008fd0 returned -22 02:29:56 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x0) splice(r0, 0x0, r1, 0x0, 0x200010005, 0x0) 02:29:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x6, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:29:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1596.612444] binder: 4303:4307 unknown command 0 [ 1596.621586] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1596.628578] binder: 4303:4307 ioctl c0306201 20008fd0 returned -22 [ 1596.683353] binder: BINDER_SET_CONTEXT_MGR already set 02:29:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1596.704277] binder: 4303:4307 ioctl 40046207 0 returned -16 [ 1596.723375] binder: 4303:4313 unknown command 0 [ 1596.734403] binder: 4303:4313 ioctl c0306201 20008fd0 returned -22 [ 1596.804046] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) write$P9_RRENAME(r1, &(0x7f00000002c0)={0x7, 0x15, 0x1}, 0x7) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x200048, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000170000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="2c616c6c6f775f6f746880722c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030382c6673757569643d356439797f6364662d353077382d006361732d667732302d7f37647739007d772c66736d61676963303078303030303030303030303030303730622c6d6561737572652c6f626a5f747970653d2a2c0032d4b9dd1bd71a26b47b846759e93d6198a2bf54c44fa20bec88f9d6a613137077f7a58ebf3ae7419f4c870bba5fbcae18902fecd6bad182600fd9ce33fc8700b0f770f2fc7a63fc95bb"]) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000880)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x1, r4, 0x10, 0x0, @in6={0xa, 0x4e23, 0x5, @ipv4={[], [], @loopback}, 0xc0}}}, 0xa0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000005c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) lsetxattr$security_ima(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='security.ima\x00', &(0x7f0000000540)=@v2={0x7, 0x3, 0x2, 0xcc, 0x39, "26b4f9c6065018b37bc7940940d9358b38e63a9ffe72df3de1f5bb6cd659ef57ff54ee0ae6dee3902d5476373b71820d38bd6b2e6b5dfef9d7"}, 0x43, 0x3) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000300)={0x1, "a6064072d3d263f9ead510961b36cc762bf8decabb49e4418a2c5080d67d213f", 0x1, 0x1}) 02:29:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x7, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1596.959449] binder: 4351:4352 unknown command 0 [ 1596.964185] binder: 4351:4352 ioctl c0306201 20008fd0 returned -22 [ 1597.020934] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1597.045221] binder: BINDER_SET_CONTEXT_MGR already set [ 1597.079487] binder: 4351:4352 ioctl 40046207 0 returned -16 [ 1597.110696] binder: 4351:4352 unknown command 0 [ 1597.128633] binder: 4351:4352 ioctl c0306201 20008fd0 returned -22 02:29:57 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000)=0x7fffffff, 0x4) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x5) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) write$eventfd(r0, &(0x7f00000000c0)=0x6, 0x8) clock_gettime(0x7, &(0x7f0000000140)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000180)={0x8, 0x7, 0x401, 0x2}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0xffffffffffff0001, @mcast1, 0x7}}, {{0xa, 0x4e20, 0x81, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5a}}}, 0x104) 02:29:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x48, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\xff\xff\xff\xc3\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xc0002, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x8f9, 0xe2a6, 0x3, 0x873}, {0x1, 0xfffffffffffffffd, 0x0, 0x6}, {0x1, 0xffffffffffff8001, 0x3, 0xffffffff}]}, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000140000a9b887d6b98fbbd60bcd555c00001012080000000002000000000000000000000000c3eab9c8e7a1ab1daef18e8f2cd4577c29894834c49ad5bfb000000000000000"]}) 02:29:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) [ 1597.502550] binder: BINDER_SET_CONTEXT_MGR already set [ 1597.508116] binder: 4448:4450 ioctl 40046207 0 returned -16 [ 1597.516376] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:57 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x800) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000280)={0x9, 0x80000001}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2100000000000, 0x42000) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000000c0)={0x8, 0x80000001, [{0x84c8, 0x0, 0xfffffffffffffbe6}, {0x3}, {0xff5b04e00000000, 0x0, 0x3}, {0x0, 0x0, 0x7647b16f}, {0x3, 0x0, 0x4}, {0x101, 0x0, 0x3}, {0x3, 0x0, 0x6577}, {0x115, 0x0, 0x4}]}) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @loopback}, 0x40, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='vxcan1\x00', 0x20, 0x7, 0x5}) write$P9_RFSYNC(r1, &(0x7f0000000180)={0x7, 0x33, 0x1}, 0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x20, 0x9f, "098538410e4ef04645c383297627805a62d0f39eeb62fb7207d40a8bf7e150821866033989ffe3dd467ab84d73ffb92f64e886f5d8a463c35fbf252314d7b850099abc3d1c1e342d51844ae4394b4cefe31f330c8d465169c1ca9ede2c0835ed692419b5b976e40717ee1b8a984bd0a52a5a5cd9a88d8efe3ed7d47d1df9dc3dfc992b6067428b5e5136bc19dd7a8444dcde6bd8a1e974ebf6d43f12617082"}}) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000002c0)={0x1, 0x0, {0x100000001, 0x3ff, 0x200b, 0x4, 0x9, 0x8, 0x1, 0x7}}) 02:29:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x4c, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\xff\xff\xfd\xfd\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\xff\xff\xff\xfe\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1597.692147] binder: BINDER_SET_CONTEXT_MGR already set [ 1597.699773] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1597.713169] binder: 4468:4470 ioctl 40046207 0 returned -16 02:29:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1597.862892] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:29:58 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, [], [{0x37, 0x80000001, 0xffff, 0x18a, 0x3f}, {0x6, 0x100, 0x61, 0x0, 0x3f, 0x1}], [[]]}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x60, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\xff\xff\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xee, 0x2000) [ 1598.409629] binder: BINDER_SET_CONTEXT_MGR already set [ 1598.431784] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1598.451217] binder: 4589:4590 ioctl 40046207 0 returned -16 02:29:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x68, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:58 executing program 2: r0 = socket$inet6(0xa, 0x4, 0x43) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc044565d, &(0x7f0000000140)={0xfffffffffffffffd, 0xf, 0x4, 0x11, {r2, r3/1000+30000}, {0x5, 0x1, 0x0, 0x1, 0x7ff, 0x1000, "aba18458"}, 0x5, 0x3, @userptr=0xffffffffffffff80, 0x4}) ioctl$RTC_PIE_OFF(r1, 0x7006) write$P9_RFSYNC(r1, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7) [ 1598.618761] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1598.690685] binder: BINDER_SET_CONTEXT_MGR already set 02:29:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1598.716620] binder: 4617:4619 ioctl 40046207 0 returned -16 [ 1598.739258] net_ratelimit: 14 callbacks suppressed [ 1598.739267] protocol 88fb is buggy, dev hsr_slave_0 [ 1598.749377] protocol 88fb is buggy, dev hsr_slave_1 [ 1598.754534] protocol 88fb is buggy, dev hsr_slave_0 [ 1598.759633] protocol 88fb is buggy, dev hsr_slave_1 [ 1598.899205] protocol 88fb is buggy, dev hsr_slave_0 [ 1598.904398] protocol 88fb is buggy, dev hsr_slave_1 [ 1599.139181] protocol 88fb is buggy, dev hsr_slave_0 [ 1599.144355] protocol 88fb is buggy, dev hsr_slave_1 02:29:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x6c, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:59 executing program 2: r0 = socket$inet6(0xa, 0x7, 0x7ff) syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:59 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x1ff, @rand_addr="3632ccf23ec1042964449fe3aa66762a"}, {0xa, 0x4e20, 0xe5f, @mcast1, 0x80000000}, 0x6, [0x3, 0x888, 0xce6, 0x6, 0x6, 0x8, 0x81, 0x51]}, 0x5c) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000680), &(0x7f00000006c0)=0x4) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x314, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2852}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001000000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}]}]}, @TIPC_NLA_LINK={0x110, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe6ea}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff00000000}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffbacbdf67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff0001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffff01}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3df, @empty, 0x32}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xc}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffbff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1599.295649] binder: BINDER_SET_CONTEXT_MGR already set [ 1599.311033] binder: 4739:4748 ioctl 40046207 0 returned -16 02:29:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000000101208000000000000000000000000000000000000000000000000"]}) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x10200) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000100)={0x0, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) 02:29:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:29:59 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40081) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x38, r5, 0x101, 0x70bd2d, 0x25df5bfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:29:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x74, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1599.512519] binder: BINDER_SET_CONTEXT_MGR already set 02:29:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000003, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:29:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1599.536265] binder: 4766:4767 ioctl 40046207 0 returned -16 02:29:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:29:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x7a, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:29:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1599.743302] binder: BINDER_SET_CONTEXT_MGR already set 02:29:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000000000000001012080002b752186845d7443c6f96c50000000200000000000000000000100000000000000000fa22dac50aa5f520de40291e7b6db20950b0deb872893ad325d7b01f5ffa166d87f0265cee05dafdb667774eb90bbb5f68b00c510e117fa7321795e90d784b9f2a6c7de576e23c6e130ecce203653e709102d60e6b270b3daa1d624af2008ec6e58091a90828"]}) [ 1599.773328] binder: 4808:4809 ioctl 40046207 0 returned -16 02:30:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x99}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x300, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1600.129975] binder: BINDER_SET_CONTEXT_MGR already set [ 1600.140019] binder: 4904:4906 ioctl 40046207 0 returned -16 02:30:00 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0xfffffffffffffda2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:30:00 executing program 4: sendmmsg$alg(0xffffffffffffffff, &(0x7f00000092c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="6009e31c888cb86d911ee85842a56fd39a7c1827a6c9e1f247116b2de69d4707a4be4d29157596bfeee2ad56d06a769fb4537b67697a081815b7f2c9ef031fae5b5c931c1b9dbabb662cfacf3273dd0a38e6bc94fbf79a916dc581f1920a41349c5118009152a5b82f4076fa579bf382de0d975abc962f608c7cf0fffddef1f1dc3b79186535ddef78e2fc629acae0bd24cbfd9a8b83e326d9716d8e2c58edc74906af86e305239703c071d42dc3e241055852938ee0e7119c5b3e45", 0xbc}, {&(0x7f0000000380)="d548df4f4848d9f067856ca425e777e2b6784d7597670cffe69b5acf8b15d645a2fb104aae7b60eb0b259a8101066a2ed1bf7c69e44650b0798e853357d38951fa10cb9750bf237f30a8c151358e354b5d29d10b3a637d22ecbc48e182c010ae882d2c680769633985b1a043afb0ba6a4d0bc1029449c1b2123f16298a8c5107c14a8ba4b73e8b8d2b7a2e3016b7e48d7c0c79", 0x93}], 0x2, &(0x7f0000000440)=[@assoc={0x10, 0x117, 0x4, 0xa2a7}, @assoc={0x10, 0x117, 0x4, 0x20}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0xffff}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x5}, @iv={0x4c, 0x117, 0x2, 0x3a, "a788d97675d3c86962a291e4e9f3553f83d13ed367c87a05fe3028478aa399976dbfc730012ad2d495fdf5f1b1b6cc25d154e7faf3cfad736f67"}, @iv={0xe0, 0x117, 0x2, 0xcf, "6f696b57a871b4907be69ed18b32d447208e1f20ba1abd282fe16348140077a7240f1a4f161ec0ec6d6a5adbfb3d42d40997492c0a519da1e5b1e31e897480bb4f84fa3358654db3448a359feefa9b9acdc10f05e47c40aed0f93ed995e7a5e7516efeb93626f9a059e2fe8c9f4ca02a5028cfe790fe3038e96632bed4af0c3c5dc282d5481d12520c874690955f3f41aaeb4ca2061df9cf0f73d21a9062a8818da0ee86ef966c1a93189c97ae896f8562c364a119f64a284882bad02bf583b2106ad1b837fb718104d00da350fbf2"}], 0x18c, 0x40000}, {0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000600)="f17debdd20546c80e809a2b09c16ed59702184e031f8ff5abb67aed17d2a53c3289bbc409917ef87fcf3ea6976ea54794c9887ddb4e56103e1c3f24879ef022d4bbf", 0x42}, {&(0x7f0000000080)="c18b30b339126a5b99d27ff3061f5a4645769a4288e233e64db0", 0x1a}, {&(0x7f0000000680)="9344cc498a699ac2d0e150dc9034a3c47db5a3905ea2449d91895385ecf42d9a562790dd331ee52da309ee552dc51a9f377eab7ebbce1dc908e74c2ece8e069f3f7e595c2a62766ff324e0313e7a9123f48bcd40d5b5766a2f82ff3f2d6363038616cbc4ec33c993a4fb173957dd1d4f3f1c936cc6f1ddcceac9c0912af9e93c7fd5e479304a8034ebf1900a205fad61ce335b14daa53d1d5e7693bacc453234160f23cdda8743d034fe5832db2ece7ea9660c516a23657686ae2a80a4c8057c9a4a105ed9f24b848cafa02289ba52", 0xcf}, {&(0x7f0000000780)="07362cb8ea28ecd43ad1f5c28a6b592a81d6445f19f9fd9ad05266770113283e15aca574240879953b996c3a486d0b1d8a6e8d013edc1f50f2ae7db1d516a42942c23a3c2067e7a23637d684035138ed1c4fd62d11ad09e831c43a7c6f143927b2c3b27b3f744dc3c3081256f4fb038093abf662f32ce458fd6aefba", 0x7c}, {&(0x7f0000000800)="1b7a969eff6b0eb9202e32cfe0604307131541c19105fb6562db648ce0a8ee382604c66086008aa2aae0947a05ad168d19b27a11ad424ccaa400e68bca52cc3b0c7431195b9aa904d2818e3b594814938c070a20170300a033beb0cd1e52ba7aa7a5830d1c312f1cd705752cab3e4251c4f76efaebb105650c9ec1ecbf5b1d1832f99ace5f540fe82ec9966db103d4562ba7fcbadfc855faa40c354276c65a79fd7a7cc90dd3cdc68bbec09557f5ecf04992822d8d7dc6b915ac29f3dd5bcd4d3d168ac94868edae9d7a4672a64d91563d40314a362f0ad05e8d8bb0231d8b2eecd37e53b8f004f582d834f2853b4b8753e83df466b452dea8", 0xf9}, {&(0x7f0000000900)="055c135649c50a4638ebd55fcba5ad14328a8fb5c664040039c23cf009fdbf6772a5ddf8aaa473e3052f9685b9e8c758ba7bff15c90437e446b4a49391000d5994a5e49538976e492f774a3317d2ce749169914a94689e9390cb8ecde503bf09cc7d3da060cddcc0978232829f73eb143021d8d0466b92b6d6afd62b34115c5249fa7d5fe430bd5f", 0x88}, {&(0x7f00000009c0)="cf259ec8bad6fcdbf3fdab2ae44e933f007938e9f61b13d108b23f82a2f8fd27cb8d5ed87b75aadd6a9dca54040dde08cc1ebd99ef64d69e52fc9afca592040374e39551f1f859f6185e9bef7c14cdf59d4ebf0400c442a70d5e746de9345f1cdf0b30824e3b8e76b5b0c317dd6cb2ee9fc6d53eacf398648a9d008db2186e2ee81a42cad1d1726731e0b8530b84140a25527a235fe9492eb8f788", 0x9b}, {&(0x7f0000000100)="a1a9de2641d3446bc4ddca14fa7aa1f5b3387fb67e2244c8ceb426c88cb7b223", 0x20}, {&(0x7f0000000a80)="579912634e90a86428e48dd13c5b5ca23181c189700263acc42b079efe9f84aefc17d2a069108451b5a18e6ec592e8955e04ffccbd1e59ffd50ccb19b76052810bc88b62ff608896115f426ba124833fd00b29930ca237e7672ec4857ff89811820773433e2fa65e", 0x68}, {&(0x7f0000000b00)="99a6f89d5b893e2cf6cd2f25841021d771363cfadfd193e9442da627624a6a94e75798691012a581104d16722811f86a4fd024b52366e52cb6039999d3b55a2e4db2895ac0eb4173f9149508732f2c8c25b03a78795d876b96a1e088ad1c1f2d", 0x60}], 0xa, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000c00)="2c9ec0a5476a819b7472c3a8a098ecc9ac7b9f6cf928d3d6702b72086cb2f2f761f6f2ca9e934d3392f9a9bb58eb70a7801455080e06811d677698aac5ee2218c062e6f12a322ac6bc12bb2848df96f414ffb72a11c92b41603a8f8eabbc7e454546082ff52985949d5c17a17d265cb947bc3423030cf111ce5bf4e38119221f08e4f5c12d7fa971e2ec589a129f80bbfd9eedcc5006c255500dc57d15421140c17ccf072bec7d", 0xa7}, {&(0x7f0000000cc0)="7b3cce75535c17a6006befa3d7ae210c672ff02ee6333faa050b9207ca6ca0f2678eaedb5f580c28096fd33cddb9e30f252e5b50db47c9d5a14b1337fc264ad954e81fc3bce8a4f200a53e84319903b8079737f676cf6c4033854718c5bf1f33530cd9e5342e0122b61f4037e79669690f1167a599b10c5489fde1661107358c0b7d38ee002e85d7aba28db570bae58098709196976440e49ef3089cb8998c955eb2ec8fbff38a2893c6a97d3eafdbc7370da26c3e803d42b7aeb3b00a4ce20a19b6d07f00e90923111d2970ca7a48d6dcce1fa06a2588fc", 0xd8}, {&(0x7f0000000dc0)="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", 0x1000}], 0x3, &(0x7f0000001dc0)=[@iv={0xd8, 0x117, 0x2, 0xc5, "f4882dfb07981c5a985bb68edfef3108289e7e3a6b4620580c53e7282c25bebe49bd380688843e2549bbb9ddbeac7dfe275a3985ff27159c8df0fd5d89c4e019b196a6e54211c1863cf18085c71c2e96410b4d112de77c7659b25c879e3ad329837a781300f558d2d47c7ac5971c3138143d183c889ddbdc94a9544d53137db089ee6ae8d75bcff2ddc5ee57931700333060d407fbae23538b79d20b785312c7dd8055106eda578c84dff49ec017eb6a8da61cf69bd20c8faa2b997534d2a80c5bd7d76623"}, @assoc={0x10, 0x117, 0x4, 0x1000}], 0xe8, 0x40000}, {0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001ec0)="a8b0ad030211c6a11fe3c9639bc0f1b83eb4fa0c7448424e4ae45b14da93857bb31276beb6d595d2eca75ead1cfd20f227e19a5f6a2835bdd604452d84d902e88e8e1f7a3f28c15b45e1423c1c94efa1e1", 0x51}, {&(0x7f0000001f40)="086858a60b6682cfe4555ec12587156ba38f9baf0bff0f4821f46c9d6a0119f14b1fac4acc77f9eab25d98c751c51beb089c9e7b51e38c7feb2a9c2db80e6852dee950fedc80024347c8caf667e6f90d9c5a21782604260d33ceebe934a2cfcb74682d05c81f38940c87819aa2369c2fa3a9343f3e4855a2611e55ae7956b36ca2096e605c84a0eb13e144707114bfe5d41bd1b51c90ba7f7fb7952166408652a15582", 0xa3}, {&(0x7f0000002000)="b3125a7b52c498f798a0c6d12628af5cd0c513e10a77ab3d775339257c4e0bf4c331e63964ef95d8a7f427b24f79896f640d57f7ae2a3d3368fae5ee23631ca8a1138b6c6ab4538c02830167b5deab063808cc1faf4b16c2ce295afaafd40335943590f8500f958cdf4a57b1df5c8e801f153e6ebc96408d81b4d9c710b4d69015acdba5764de8b3535bb377471175", 0x8f}, {&(0x7f00000020c0)="72df599f5f6e1fb446be2a7d6b82ebb51e6a640874d86774a6c6127c239b3f4c017fcf537aa60b43c85638df24a3024e686c53ea11493f5cbc72c5b6c9a939ea2bb36cc4ac63bdd921232efb5c6cdf97aeae308395f5cc0c1eff900d9b2fae24668cf54465cae793614ee069d24ec9cebd97f41ebe421c1bfbf5a2d6e2623f3d00c463292068e97666b529ba40b0900126e8e80626ce9102cc0c31f5a11ebca0b13c4ad2caec652bd41b510f9175d9f1b474ee4afd4ac312257e635835c4b5fdeb63d28dcdaa38783b9ce3b4ce1e5392bf0b7158fbc3c5d13b219cceb7cd992ff682b08fc38f99549299002a41", 0xed}, {&(0x7f00000021c0)="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", 0xfa}, {&(0x7f00000022c0)="7afe80695b7245676a84c007e2138999a5f7edf157ed28a410b03126aed2b6a5fd48c99e14b1ea2a3207152538c7e1244fc304e177c1deaafda944598bdb1ea6f3e450ff9a1da0d31657d321bc5bfb9e03bba9925ef681815c44eb76e318dcd4f4e0c7c9b922f2724086ee03c37a329c6bb006cba163da2da97c95849f3d0a02ca9e0b34255350c1f972ef7108eb2108cce97475bc84fe0336a3a0da2762ecab7047c469f094937200ebca0348dfc4142e0523ff32470b691d96b9b04e9651d4e22c", 0xc2}], 0x6, &(0x7f0000002400)=[@iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @assoc={0x10, 0x117, 0x4, 0x2}, @assoc={0x10, 0x117, 0x4, 0x2}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x28, 0x117, 0x2, 0x17, "9cdd821172d66abe06113f718275fd0242dbb441132f8b"}, @op={0x10, 0x117, 0x3, 0xa5a120a1e57f3f82}], 0x1088, 0x1}, {0x0, 0x0, &(0x7f0000005800)=[{&(0x7f00000034c0)="9e149475712c249b469b5d71ca310fecb6c3fc825f06a539efacdf0be53b35a6cbdc65e72482afb67daffc64442f3eba5f53deed7b25e16b6ad67177cec4f20a0ca8c14519353aa0ea53c48ab2fb0b080d84b6e187a7bde60caabd8c2feb48c24c2cc42416941214ee5f86f501", 0x6d}, {&(0x7f0000003540)="696a4599a7c5734ce6059fff04aaabf6f09fae4bb303e5732e0c8314b0ccf0bee463fb66b53458b11ef226236b799f5818be72a0ffb3168c960027a315961651c15f765168a10643d80e968467c14ac9b0df07a3e34ac1b22e74cdf3a96cb8d9e8ae8b8643a7424040c6143b90ada913d7bc70c2f0d9f77f6d1f5a97e3ea8289d5b0e1423a2a7f98e01ef16269eb0f1783482c96820a9fcfeabc2f32c7c02c612d7e42311196d0882f0861f3f8af4f2dd889ab5abb9eee5ada9385de", 0xbc}, {&(0x7f0000003600)="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", 0x1000}, {&(0x7f0000004600)="55c7c41f8901f860991fcc68fb11a85e43ebe633da3f556634a6775c1c60949b7c423ccbe3fe21de901447a03adba6c9dc5912fa16c6325709c6f5ddeccca5878cfa2105d10321ab68756c200aea718ee9be0df4d4d7ff393e1e28c8eed7f6dc8ae1082a19d5a86066a90a65801307289065169a76b510e1a0fc230b208f90a8e3f1cff04750f24f52c087a354e8187586276eadeeccb06702a38b6ab49be1ca0b818322f9d6", 0xa6}, {&(0x7f00000046c0)="b951b57d794df82a638e70cfcfccd1d045621339d5d933089949b762d1355a81fa525d8b62476365ff62a6430f46233440a87d013fae3c79d3dc2b4daed1de16b2d9e737c0c3cd5f515d63229294d80a859138aa1ed4d7a14dbf5905a71a122203bf7f34fbc0311b97b65a14e8cffcb9ce7f1b2406891ff9a9005754098f0d35c4bd8caa7f5c6d34e1d5ffd29f682213d673d792c617d9539d8bfc82", 0x9c}, {&(0x7f0000004780)="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", 0x1000}, {&(0x7f0000005780)="b8531e501cc5c774efa3f6a66ba3d20bf9ae6e6868786be2b0d95c3774dc7b7dec2850d9334325207c661b10d43b4592f28776071c4ad10bb741e362d813b88aae1b968dc01f135fa9fa2cc6e98df98efd4a200669e9d0150eea9544ea0e122b967dc9fd22465b59481f01e776f4ec38c9aad270d54ceb71", 0x78}], 0x7, &(0x7f0000005840)=[@assoc={0x10, 0x117, 0x4, 0x2}], 0x10, 0x40014}, {0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f0000005880)="defbda394cef85827ade37ba27390c4e554ce552e54b9d70b4300243f6c5fc81dd90279b7cb7bb2c6312e4a87266c4eff53e9c022075daff1ba71b5da149d946bcb0ecc466a0085aff4fc80ff08d2d0dcdf1f7533b5eea8fb1dc6b0af0bb385564c60e7222b021449bd4c64668de66cc13afb7e27a9127290e91de649b95cca488fc9074d0f445d40e9ede8b099ef5849267d4f55e0ff4c4f27b42f59b", 0x9d}, {&(0x7f0000005940)="4aad47ada037ae27c07a4a9aa89efcd327f2774bc4d6fe7438b8ff187bc2bc501a0c451542f4cc897c57107d63be9327ffbf795c4899fc46c3fd16efac33ec22e280c49c2520ea2c6a5f8876fcb8e8f8083e55cc7065cbf368e887918d98b5eba986a91b6b31ebe2310fd29043907854fdb9b895b0ec1be5d330963a999e6b70c1472981f299f7647dfc8b52300adb07d41e5d382cc57472a81ddab061591466b74ae8ccfe992801c0995d5b9f70caf49ef90d42457012b8cb9778d46206597a1291164f5dcffbbaa2ff07cb4822541fa305fc5d871f", 0xd6}, {&(0x7f0000005a40)="0c174afc49ee4d5518fac43b47b688017a1e50a72e6ac0f8c6811829d591c8f4762fccbaae7c0db61c734abbce12928a371c9aa93ce6e9103a326b9a55d6083cb7ade4cbf33cec4940cc0f656de90fc8c0b95fa67309d3c8d25f64665fb993fd6bfa0624cf616532f96de7c4b112682874d67327210f67a0cea9147558630f4ce6c6a386d0f32d8afac6ccd48cb09dfe1f296bf465ab6d7558a13fa82c50fe41db09ff572d1d71e2fa04d89b19d5ebfbe21b2b7f84ac7e9c57c4f27f15e052bec51c8d39a6fec73f9ec930a801115fe33a01beeb412b3113b64e168b4ad1f136d82774885f0ea8f079325931caf28d960352a00e6f54aec7f7e3fb", 0xfb}, {&(0x7f0000005b40)="b0eba442fe9044a431b0caa17914424b567be0b489b0c138e38bf21b1a3a1647d12f1cd7bf9980752771e48be8b9312f9117bd862059e8bc49ffad6fafa8a65ec46ff6410c56e1924aaf1fad551cbb9971dd02fd15c231c04f9c002346a08c96f7a1a72555f5721792d059463059ac33c832dcf703a41954f4cd06eeccf7b87604e36b69728ea9f75915e77c4a4c2480248a96816f4283a41a2002458ba3d301e855fe37a42eb1b6c67aba6ee33474b6cc5651586dbdea541d315c564d72985f99e911d1c75e6ba68eff60f3ea1369414ab1463c1845219f0706946a399674f579476acb8f56a12cd4b8bcd1b947762c030108696a0400b30b62a80ee2464db0c6be2d3deb3e7adf15f6f079d595925ebdac76f673096b4b784f0e03ce3e88b4f473569016e3c428ef2d74be19b46218076b8d787630647514207e27d058cceafb298f92e826b263ceda16fdcc7ea36000c376c1892faa013550ac7c34740f24947df54cfa5eb17e166896c55e8e57149871bff7cd845f330f5852717006ea74283e61a8b2b221270a104051aa9a0a4b003bff0613af759207944753179f222dbcdc377b4c627e6fed5bec11abf88ce2c9a90f5edd1737847e98da1fd442ee08b43750577d3d1f5086169f441bff8400880dc085f9e86ed3475da975684277798e3177eac3e8394f2a02cc603fc54611f49871d5c0f5020ea22d59fc79e597756ede0b08c198227296066781aafc1b38aba8d958bc70ebf97b6cbbe3f9eb75e41c83c803301a07338a17183fabd04fe7972e75147c580ef63ba67c8a496485544ee0920100d53f0d658d53d8599b4b5a80fe7b30a1577a612ac6be1298c6bf534ba4067551ced3dcb2fff2259076bf65a074327efdbc97940a0883b0ff75d62844b4497f914df986a4f4e43a2ba2367c8be6c581029a6e6a26b880eff950f8cebaf77d0b5df441bf4227419d6fd238940abfd94d3e7e22ce0bee7f33b2378f848370cf6453502eca55d8df0a788076b63a902e54fc9791131d8d056b3bd47588e3f4773214a3e0c8e82fd9f3c28dc29c0325b2e72d468d546f2c48570312c72f67f3d0150371abc8885c9c3d30ee9c63cbbf3779c5abec40a3f25cb4f3435cb422bd7aa1b728167af8dc5fa5f7632cc09663bfe14951b90f3a1e8152d520c6c82f02fa046a1d85e3aef87735d2c0918955574afd0600894b6f0e9b351ea64b1118ae3c676f1b3790571b4094a72b257c00c29b797ebd194c2bc002c063192bb3d8f6054962c2e587c27ec69d64618ddd94d12dc0aff5c30da7231cb492f78c31a51b78ada7b4fd3d453cb54c6e9db0f89131b8073a07f67610eea476117ef7cd12ff0cd4aceffd3836a1b3dec2094c27f542689ce8b3833e22a7494f1163f49ff59c39e1061dbe9c245edeaf05451f76c4e3fa8ae28936e85c3082f092e4ba7f783ba0ff49acb67aaf5c3ef34f8ff590d87651ae2d3bf62a61637c71801ff7509b1c17b5b6e4fc7257423678b37844e4c2e242748926fc5ed7a152c8e86edcbaf10e4d82ca82a1e311067fc1181c32ba61a1d7baf96d2c271008f5f11b6936ff68605f0b9629732051d78f46323adff7baf106f9d75a15b3fc13fe397f1d1042ffc9c6cc9386f1a3634400ae91b201c2e24d0a81a270b9212d3e091001eab5dbbd27d32d96ef02299bfafb7550dd510d30204b190522162803034e4e132df1fc9d97a60ad50ee3a876021435edd0e49742447e0a9143840741ba52b253983291dc3fc1f9eae23a283306e175f247df8085ba1d3b7b7488e554a44ed8fffe14da6d42ef577f2349780f9ecdf2c3cb79c43f5288df7e6c7ac2692f90f12adf137801a7daa5fe5c054b02406ef4f1f6d532e1ca70144d47f819005cae724c290128d8391456176aeee58db1941456aa0be0dfa3f57bc857d61110595d82d4df4b99ad32b7db2ba536b584ad4526e0b7cd02bfa0d924b682691712ae8b83898eef01b43592be22eed50d905cb8f59cacdda7a5beaa0f1d4c962bc2e597d6ce577b31c4dc52759f27536819a574dbd092730b330825d92e203a723737301a1c9cef6abb6d87ba353cb26e434497f67a39aaf2bf391125c8ee5a0f6979c3774e1884bc8e478ee0cc76ca46860857b614e175c763090071efadf0e14b4fbb746c7f79849bfe68c5f079b1cd210af1bc75b0f7a50b26492a5f759a5967b314df70bb988bc44b2634ce7ba5b1631c0d52fb770609bb6944c359829b28f24c907f57e696cbce1aab76320be31d78de0cb4b86ca0c50bd3c3f7df4d524b150fa227f9102a831b80a33f277ed2866d4f4dad12c970240fffe0e41721cf9718001ec545d708691ed7559009b2f5c05949263ffbce73b1e3f7a91ce41e4cadafe225a0647967ceb5f3417592bf30a73141a6aff30111ddd29c964ce2cb4f64700e9690450692dc6c9213bb03a1408b49c67d6254fb93aa5bc2665f154aefae81427d17148b7ba9bc8505a4acb992bd546a27542a4fdb660a98c930518697f885901859a1cabd33ef36369760f1d78bdc47c50c52be8caaa5e7176de707a1b5d1705905ea67ad943db2311f38431e105b7be801b05453dbd04356b8775383e76bb6cf61ea2d08e2497d632ea693aace2fd4c183c637671b85ec5627ebbbf038c2c6b60bb2cc460e07fa2b421a28c661eae30165f273d569d5a45f21aca2403bb5fd40778d264271cceaa4de411d6cd1d886f410bc1a0ae9338feba2d701ccf51d08bb7268fcf64ceaf84dc087d303d95e44f77b4b6f5a4672ab6e09cc68d041018fc47b8e3f9abf0f8978c2f11980d311b63576481309527c46b7c93e6db8523ad54a07f043fd47dfee81884dea587f0b3a381ac3f1322068679523f142e555a2eb40f6aba580a0435d0d6957a4eeb19dfa6ce8ec15d5f03b151065b79b640ec20c61e1a8412848172ca14daa9a75e5fa6967d43e955a6cce4fd8f90e9253888a1ef3371a3411e1235e23222e429a0aefc26de44260f56bec4aef52dc9675f61eeb492e0240bb0219eeb147a09d891242b3832cbca972523451248ab8b4822d15ffc272208bfe99b5fcd92e9c5253a458c3503cef9430fedb10aefd61dd455f1d69054cf652e6d804df051eaebb1e45d329bc73de08c2011faeef2d0ed91f19e9006bf18b75f376c715eb95889fee3e904e3dd645fe63aabeef6e90e3c0b098d3307c7a4e507c2729d1d6c07c332e129b601445d564f5e13f890b65a79997076230da9d932ac0e814aadc28e221e91796499a34f8bd82523cdaaaf034a7095fc0338bb2ef7ef142834ed11306f726aed5406fb6dd3beb840a7e8cb7979949f62778807b5fba3f16f2d3f384b3a050a8f2b1731d86f59b1c79ed8e74a9c63a209b071b0eaeff93e4a222e14f44b322513de3f79bec8fea60e9315b994f42535a839cb96e93693eb00465705dced6c5dda9fe0172c77367cfdc0bb551812039bf5b27243a6af777797c3e3f54910cab7534deeccc835e6e6bc55b06f1d99ff3e10c8a356e3f2516cafc4af10a56d43b09fdeb665e6460dfc91a27379738c9daa43cd1c6cbfc886f309462ceafad5091891fc8403894583ab0b61474adc249294b1a57d37c42cbb0e0d98d4a9239aa73f64b5aac260dee71339382b4a990b362eba75bc52973927c92dcb59c9b09b57a1b15f5aad3c5f8d06d883a180f81bf4a61831f4760fadb83cb738c06d9a2f01954315f92446c91dba87d88f7e4c698f6f29333a81ec30795df7a8656e6199777d71a07f0072384f0cffab28798eaa9c2e45e9ec59fdd14d7018d8b7f0533c4274dc4ea70f803edd60dffdd5f7ef0215e4ffc9d351ba7d9558a2d002ee3931c2b2882c80c679a5f6363c36b901cea0602ca607d0cef0c3f60885976a2a68e62b236958fb6f118b1774b1b21d5a9bfd8025008bf5d86ea63fa94c6f355d4e98b6e33678c0db55f2c874b4142602f8cf2b0aff22515378b7a313e8fbc322268e18ffd74d6cab28505cdcf8ec9bb586b58c45cf7b74b389c006438497e183c487ff1f339e5310a27d73c3a814a45805cb94d4e4b926ff8244220f93f5efb9543afd2e6c198651dc4efbcc2547ef2ad7239f77b850bfd266e2d79ef5259b0da06b0af8d3c2e67a0db465ad2b924778a8e23f7370ba5b9df8614c7731ecbc68e9011579724cd55a2dac899e27f1942179f7cbb4fc54465cfb24304c9e1f261121f40c951016fbabc1143f5ce77bc75d7a9ce3cc62f9ed6bb662e440585a5bbd5d00c583fad5819f97ef6a04abab510f1e8e2bd35d24efe495b57617cb18c7ea38084b6ac4f093225fa5132d7a07b44d7f4224ac95b8bc678add6a603898197f23b3868e58edff19895fae6f69996ae0cc25bc29b87aa4509d79bcfc91a7fd3112da762c1485d15b0997bc97e608016500623232dc500b02e939707d19d4ffaf2d1ee436d178bca04515ef2d70eb40cbedf6cfaed3d9514a8e974cf96509e112b58e63043d631320a14df600d720602418d699b56e80158da3358d8368755bf803f083e0c2cb6797ed857824fad37da474edb72dbb76c2e4f7e5e940c6e86f3e407b8d1ecaf5888d2608deb8152d8d728aa15335d84aa8e7ec3a6226f55cea38f6f21a656cd1fa6f93f56fd3eb80d3da57e93f1b6de73f7f60e55f82ed639ba44b6102f811f4246013732646059100b6ec5ded4b3498425d9fe4fdc60d7cf5fd8f31f4bcc9167f361d711396a6e1a9d82f93d02c8629acefdd8f683406d3c3c3c6e7492572a3d9b5ebb4fe7ebeaef2992ea2ff76a80a6e4001493109072b65400dc74568bb9d3b50f5b1ae34814fe7e87e5819d35922cc2567f829c829441d7759f6e696fc408479aadb6445e5f0bf77d841c4327fa2269ce0a7818aa8b8a434bc07f5dd53c190c80b270925980cdd51b3a8d57899e9baf9ec1f951c1aea9cc1df620c234731c8af23e3a20e88a6034661efe3457f8ac7ff7ffda7c3ddb03b3ddd85aa36f8ceb4b69c41d79db94cc5831b26658b1fc86ff2c0e07ca1c097e9bceb7d52b16843315d2bfa738774818505ac1725ff5c58412f9443bfc4553bb222aaf8f30d6220440361df41e541d4ca608a630e57a6b6822598f1c16bf0f29ef6e8f517db0207c944cf478403df57d2e251f2ba964a62887f7b51dcb98776993a917a0db4774b3cbde51476ab00bb78e4922273eb117804b63e6011d6ccaabf0babf4e672b1583c5575166793618424d99d16209f11909121f367d805fde321c2424e6dd8b840fd2024ad4f7792aa2db496ee4ad22d5ec479f17b9422fa97bc0a70a7dfa6f1569a000fdb3d15f75ba67ac8af10e00ca88c473670dd070879b8c8c4c4f410a882ab693d760e7ef43de44404774b18b71e5c67fc29c540131534c983af17385677605d88491567853e4c5eaa92ab1e283b383933053b3a6fe3bfd5712925e0f4d4e57728630bd4e1e2be4cd40e2edb480b08204dd3f647322c1dc16294c86b39a116262b08d5acecd4dcf6e0180085c231872a2a2eca61677b0c1e4364eacc9a7ed2abf2a1a7d25a882d85888eb5324cb998dca2e2ea8427f6a8f82686df4d0180ae12374206c8b87672eeaf8c216c9c6e3819d4dd5a6e672557fbc0d63ba342eb568cd6e1d686b4f07c406531c505e31680fe6965a64692f7ea2b7bec47067f68bfca3b9fa02562e2702a629a7b38d9bd7c01f839a3666a14c30071af460d2081122722aac6c2f7c7e1810a88f763b2df2f9c10cf00a7379862905c0a44aeda57d6579ef54f6d5ce076f8626927a12201614c6d2d55204", 0x1000}], 0x4, &(0x7f0000006b80)=[@iv={0x7c, 0x117, 0x2, 0x6c, "5e25ff0da6c1ce513c3d0732a11c5647e957bbcc46564c036d9851d108bd27e35179a0cc1a4622561bf8407bf38e7d82fe833a9a3d71697aa9644d681c86432d978d8f39ea3149da64ee2fc70a82569543724eb9e66ffb2660d1e1cbad87e7b8c176280cd0aabf4d82c68f26"}, @iv={0xc4, 0x117, 0x2, 0xb2, "4ee85f393b64713f8be07cb576d6bd3b757337455a3075158e129c64a07a9ee8b7c7605db5ad1dea3ab6e0d4e2b1dca72f63c511fc47612e010b7021bdc7c5defd7587e741efe3a4d667cc021fe2c1f490d3c810612f1285fcd04ea8eee6016a24e57adc1a3158efaa0c4a6298a23df6861afb4bfff543950469351555cf97ea6dc620daed1c7c3331849f508fae79032101907cc017127aa334c8bf89cd8cad196c28adc4800ecf9ec2c3d993beed6c9852"}], 0x140, 0x1}, {0x0, 0x0, &(0x7f0000007e00)=[{&(0x7f0000006cc0)="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", 0x1000}, {&(0x7f0000007cc0)="e6acde27dd5d98ab0881db1b96527be30c31ab580f6c7c51dd7ab9408a3e968349a79b3d54714e7f79df1d2470c39c1cd36e615e7add4bec9478e42755a4da2d8f056f72aa1d5247f9be6091011b166c1e02341f922cdd", 0x57}, {&(0x7f0000007d40)="25fb695fa845c156f3f036aed3a28e313f80735ff00fa03b1a70e3266716a274790908c37fc756cec499a15eaf45f20c1c2709ff4f7ffe60f01d9f2124be64bc73d68b36", 0x44}, {&(0x7f0000007dc0)="4b846a31ae0dbeae9e8c889e897c3d2f38a7c13a38421c8c209b80", 0x1b}], 0x4, &(0x7f0000007e40)=[@assoc={0x10, 0x117, 0x4, 0x7}, @iv={0x78, 0x117, 0x2, 0x67, "7c11a4032c3827c39c65b9516f6b455c3db48f30e437b5650478043ab6c722d347cb51c32f446286a4f246a77a1966f0c0508c9f9921295dc8af63147271744df22a8f63f0000997719f4099dc95e73b44e829626d2c0a62543090df3c5a87a00feeff68f0d2e5"}, @assoc={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0xe8, 0x117, 0x2, 0xd8, "01484416479b4c6345d53ad8a555afe1024cbbce4dd8e031960e75100cd291f4217065cb7d89ff19152a6ba75fad32994001541af9566cc1064c59cff1a2e3fabecdf4d725a5a3f4b5fdca484e8270993c3e152094035ec1f545abaae7f95b75f4e4600d11b4346a235ba57ff867ddd79ac175a6d6e2f3963d93414b0fb1abbf9f82625312eef9d08da02a3b8987859080707fe2f39f1ea9bb80913c05e14f74147b566939a6171aa6274bbfda217ce4fe8e3cb0fdf9d9d41ef1aa1a2adb7afe2a6d0a1cb5c4f4b291e3fc73e62d4d03c64d1311ce59a44a"}], 0x190, 0x7421ff5510588ff2}, {0x0, 0x0, &(0x7f0000009100)=[{&(0x7f0000008000)="bb165310e61d04d8686d5b3d984db73a5ba82c39060bdb1e6edaf6b80356e8ecdfe8724715916d5e6a7c7ecafe346024fe7d2eb3b9d072bf5ead99fc3c5bc029", 0x40}, {&(0x7f0000008040)="f8e0610cb1a4c88cefdfc39f797fd248cf6679d355b4aa3de2f7d9347d56c66878cf4cdf2abd1d6b0d75515c1c47d122113a1bd8dd536f227b117609afe93373dbfc1d228646c6c053185eaa13778deb747379901ec405273e2833ca8bf72479787024d5bd06a1", 0x67}, {&(0x7f00000080c0)="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", 0x1000}, {&(0x7f00000090c0)}], 0x4, &(0x7f0000009140)=[@iv={0x8c, 0x117, 0x2, 0x79, "16f3e6f56b9066989c78d3d74a32c96714647dc13209f571cf4566edad3c344867966216f7351c8ffc56b7e41f92aa35ab08f81cd61e1b11664a1ba5d11c01970e1c43a631eced29209c1ee3a15b5c9bfcedc27e9ecff68d270a18d7af372d871717297b5faa629e49f3d646d18f1e5dc7c033540742ade3ce"}, @assoc={0x10, 0x117, 0x4, 0x401}, @assoc={0x10, 0x117, 0x4, 0xb3e2}, @iv={0x80, 0x117, 0x2, 0x6e, "d18bb4ee2bd72deac834971149692eef3d1b6402306a041f58497f1f2075a3f5fa024d8ccc686d0b929538992e25a69c93b22012957cb4cf46761ea46b1e534765b853a95f3364c5088ea4b4c8aabbdb5112f40cbd9a18146593567e9ffb5416679e5155f4b4cb7818058417494a"}, @assoc={0x10, 0x117, 0x4, 0x400}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x1}], 0x16c, 0x4000001}], 0x8, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000009480)=[@textreal={0x8, &(0x7f0000009440)="ba2100b0eeee2a760cd9f2baf80c66b84c5cef8e66efbafc0cb80050ef0f2042e7e20f01d53661dfcf650f01ca", 0x2d}], 0x1, 0x2, &(0x7f00000094c0)=[@cstype0], 0x1) r3 = dup(r2) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xdc00}, &(0x7f00000090c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000093c0)={r4, 0xee}, &(0x7f0000009400)=0x8) 02:30:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:00 executing program 2: setrlimit(0x8, &(0x7f0000000040)={0x10000, 0x7fff}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000000080000000000000200000000000000000000000000020000000000"]}) 02:30:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x500, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1600.374290] binder: BINDER_SET_CONTEXT_MGR already set 02:30:00 executing program 2: r0 = socket$inet6(0xa, 0xfffffefffffc, 0xc98c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="6c5aaff16c3fd53600000000000000001012080000000002000000000000000000000000000000000000003a1531e029d3ef0dfaedf2bbc0eef3e79433c2bcf6884866973532ec2e12d4bb2cc4ddf425003f29608ffbc563dd31a8637f6471e3b1165b2ea87790f5b73c19a37c11b77ba12b38dc1d0000000000000000000000c88c8ee691a99b5a9c9a32e7b4e6d5e976fc4bc6b9c6956da59d9c86d2f25747059b0b3e97fb0e04f8169f78cee18030ad37651ff6e8de2afbc0dc97f420e437f38ffc5f8171652393552a8b34d193169c304a977049568625b68493525103a6a0cd8c3b9a645025a5b132762853ac85c2f3e12808ba04e2"]}) 02:30:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1600.400546] binder: 4918:4919 ioctl 40046207 0 returned -16 02:30:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x01\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x600, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x18) bind$isdn_base(r1, &(0x7f00000000c0)={0x22, 0x1, 0x9, 0x56, 0x1fc}, 0x6) [ 1600.633832] binder: BINDER_SET_CONTEXT_MGR already set [ 1600.645176] binder: 4940:4942 ioctl 40046207 0 returned -16 [ 1600.819195] protocol 88fb is buggy, dev hsr_slave_0 [ 1600.824367] protocol 88fb is buggy, dev hsr_slave_1 02:30:01 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-cast6-avx\x00'}, 0x58) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000300)={@empty, 0x0}, &(0x7f0000000380)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10) close(r1) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xa8, 0x2, 0xb5, 0x40, 0x5, 0x2, 0x8, 0x80, 0x400, 0x40}, 0xb) write$FUSE_STATFS(r1, &(0x7f0000000100)={0x60, 0x0, 0x8, {{0x4, 0x0, 0x1f, 0x0, 0x5, 0x4, 0x1f, 0x80000001}}}, 0x60) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000400)={0xb, @vbi={0x81, 0x8, 0x6, 0x32315559, [0x1, 0x6], [0x9, 0x5], 0x3}}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000180)=""/11) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x301}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x700, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000004, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3f, &(0x7f0000000040)=0x8, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x208000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f00000002c0)={{0x0, 0x4, 0x1, 0x2, '\x00', 0x200}, 0x1, 0x3, 0xffff, r4, 0x5, 0xe57, 'syz0\x00', &(0x7f0000000080)=['%*!}eth1,*(&[\x00', '/dev/kvm\x00', '/dev/kvm\x00', '!]vmnet0posix_acl_access:\x00', '\x00'], 0x3b, [], [0x3, 0x81, 0x7fff, 0x3]}) [ 1601.277543] binder: BINDER_SET_CONTEXT_MGR already set [ 1601.302231] validate_nla: 9 callbacks suppressed [ 1601.302243] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1601.302444] binder: 5057:5058 ioctl 40046207 0 returned -16 02:30:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:01 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) dup2(r2, r2) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:30:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x2000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:01 executing program 2: getgid() r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x41, 0x4, 0x40, 0x100}, 0x10) 02:30:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1601.527167] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1601.564110] binder: BINDER_SET_CONTEXT_MGR already set 02:30:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={r3, r0}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x3f00, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1601.615689] binder: 5097:5099 ioctl 40046207 0 returned -16 02:30:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1601.748259] binder: BINDER_SET_CONTEXT_MGR already set [ 1601.755077] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) socket$inet6_sctp(0xa, 0x1, 0x84) [ 1601.789769] binder: 5127:5132 ioctl 40046207 0 returned -16 02:30:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x4800, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1602.151519] binder: BINDER_SET_CONTEXT_MGR already set [ 1602.156891] binder: 5222:5223 ioctl 40046207 0 returned -16 [ 1602.203795] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:02 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x20, 0x2, 0xbd6, 0x8, 0x45b1, 0x2]}, &(0x7f0000000040)=0x10) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) fcntl$setsig(r3, 0xa, 0x22) 02:30:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_settime(0x99534e8d06fbf280, &(0x7f0000003f80)={0x0, 0x989680}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) r3 = syz_open_dev$sndpcmc(&(0x7f0000003fc0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x2000) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000004000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r5, &(0x7f0000004080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001bc0)=0xfffffffffffffe1b, 0x80800) sendmsg$xdp(r5, &(0x7f0000003f00)={&(0x7f0000001c00)={0x2c, 0x4, r6, 0x2c}, 0x10, &(0x7f0000003ec0)=[{&(0x7f0000001c40)="bb55f0ae146ddb9e9e50b7b2c9853df9506397b91d4524245c0d1f03a43be6efc9cd8d4a479dd3473f9f306d6045cd64b49a24ea5d1c52309e8abad63d0b09bbc65d2babd58cfbe70058e07fdfb2c73858c9ed79885df7ff8ec80b7b02d767cc8e05a429dc900c436e25e704e05f7209964ff6253945690a0e6070ed07ee1fa17ea465871c329b8b4536ce656cfa4ecb2a09c7dfcd740e937f5be8176ff0bcbb0e2a169297b77a19f516833fb660cc2789483f18e234e7a5a4e7b8af9fd539489a7287ed25bb54c8d17c7cfc0e3fad2baac6f18f10f4d9649a0d8364aee1f4718fd175b440787111e01117aeefb99d062e4add45e3c8ebd0be62371dc01ca1", 0xff}, {&(0x7f0000001d40)="6d7918d43dadd9c977101b8bd1461924a3527c21cb8843ed5d0729a8ae311b7fba83fa93a0689a", 0x27}, {&(0x7f0000001d80)="e9228665e90e3eb57f5ac15416f13f87c5b8a1b6248f49804aae0a9a517d0b9e820e5bad666dbcf764550c0561b6f7015eecb7d6988247dc7ca450111f4836da816ffa675e00978ba098c3bf49d9d8d468c47df653d3b2c77ccafcf79b5483f0582ac18f8960a7a62aa5c61b3366aae2d7a999792ceb1db86d16da1b995ba2f4badb1575de5ab3b7905d83e08326fd2363b9656a937a9775d4cc002b6d9f1dba0cd7a80c59fdd69ca3506942996227086a71e2f6a6ac63c1b13dd7bee4ec8c17f7ade5474422dec23f9291534269ab4675355e36d5d373414aab63b1e94deb256cb5a3f7d7a3f85d9875ce88eb933fad39fcd728ece8dc32d2314fb4116863784bb51392b9949f6d56509cf9e4b498b5b41a26b7a01532272369218d923b28504ee8d42ed2746a1efa55f245de74a1b7caaf0e1603561cd06540f4aa551968c1869be50739303b6421a0c9ad1e3f4cda16675fc434eb4bde2873df035e7a47381a3528319078bd10e4cefa9a82562bc1fb61e587ecb50c7d33268cc77414e589949ee2f1431a64a515641568e3a5d7a4cc22a7a47b828390479da1f1066b2add83d5c2fcba8aa0d1bb3ed70e8cdd8d25a82c7926b1be85f3ce3fdcae7868c89303b93c0d006e8b3036c0d05719cc04fb08b468f3715ab4767ab9ac8769c5a961a6425ce77e15ec567531500898a2fc8bfba5fe3e695e911d18ed3d9f0467904eece62781eedd78ed26ab96e9c195cc12593f27a2642f48e0e6c7627c0bfb62886f512055017e5b16ef0f3ae0efc958e96defa36d5640ee82f33703cb0f5584bc429bf5283aa7a898f231c83898b320916935cd0187f3b336f7c20963ece31436fd9dcd48d373a1ca39eac8f5f49d010cf1bbec4cc0daf808bfee694c188df5add0560f4cf5a8ac70d23f2bee7d6b1543764c747a738af6e149667535b11a7f5914c78906a4120d24280a5ceacbde4092a100cc16cf6c511c9bb735736310cee54f69bc02875864b099955b0f14224a9f3c9c3369f91d26f94710dc6ab2bcc0bfd61d29464e251245d4fd9930ad67e90c1b0cacf062168ac123755dbda7b65c0962a3b2573c40fb356d822fd7022c70fbbfcfdcce2e529f2a2bfe697ad64dadc4bf3e876bc542f18773771aa5e6b641d8bece87f62975bfa5c153c0242ddbefc49f11e77a114e9d86f7c1bfee5f4e02bdb819c4e21117d97bc941e5d9a0fb2b6b477dc8879527610a8794bbed188599c85024546e5e059ac4345a785a311cee4ff4c5eabec12af8f35eb13448c1b944bf5ddf6c12a2117911b0c6e98107e62d9cdf5c53aeabafee188213139474fef596c1738bbdf2f0f13698070dbb6412175ac8ca315d8e8d7d35ea9652b8c98ed2c94735f0a9b793d697d6255dcf23f9acde3e1e8e76835ec33c5d5c79bf108a618ce17ec2a4c9d2b559e375ef9f9cd8446ce2de09667a02e845fffa84ea9b35db0436dbc96316c133ca744931a73fcbbf74b4fcdcdd3cba83d5ebfc558346da49b5782732f8c67ab96b411ffe846b8f17e81a1ab6060b15cc35d7115b59c62966ea6a9d4f51d9a36bb6743561c455ef9cefa4e09bb3c08905ff265f2ba76f6d0e85ab6e202cb6de0747d2ea10c7e87b0e081a717956edb91b89d36f3a672489065c3f983341feafacec2a617d439e4576875b5307a7b94baa6b4278ff8235287797d1ad5ddba15fe6e6da8b7600778834f2338fbc5e3093ba2a2061fd0259661f0816b517f23887963c2454e36a46be3ca3205781e5526403a8d60214db3b393d222bb39902017a3f0ca2d2912bda90e375546a8467b7d7f6dd64405fba7edc6be66caff4d8d3cb1e83fd356de7fa691b2b6ef2dd51bc7b71cc5fd05945ca896bfc10e765d5fa63b3cae6c7670840079a1fd3a16e801ed8c08d69da4faceb549c33f4c60b181c96d6efaa34cf030f2233c88e1cf58c91d4d8d938a30d64f0c6ea5cbe81aeca055fb430fd90da01f51c31cdc432dae56ea8667abfed8ff77d2953ccd6a267a2cbad5fdddd94936842134ea56d2612448f9c36a4adea50dc92a1032fa11f3518be92c674ad28529f7e6094be149934f30203696d7a95788f861050851687fe1a64cb57ef8598bc2f1e47b514ce0173d81d317af4ed589ca4248b7e9a828d6923f7cb76b46fc0831cc168d51c7e7f6245b1f092c120b6670629cf26a4e8df287657a80e8fe572fbc4cd953734b19e0c83665000091a4fed3776cd3362605e9b95e4921248f2bd9f7c3f7668aa1b9f5ee933bda0102760867792a1947b9d95463852d332a302587aeb8430c07f11fd2d851a04dbd6ea2e1e6a38eb2769a3587f0b4dc59e4d226a4b4c30b03a9f599a5eeb8489359f2d531421dc3ed1a9f5f62ba0602814a79abe71fa8795116de78ca873b898e236ef38ed5992a8feb842bd77ece8fb53aada0fafa6cc2f90a70f3dd2f5a2c492edd4d8cfc10d8ce63f2d34c5ebd1094a3b578b5d600b95196bf790deebd480552b5ec000e0b924a4f4ad01427288c91da4556b9c3aea9a12d9ed8934236ea137b92d6e43b84439ffa6cadc5a03a497d76c4c96b7de8e5ec25934a43e590912d32ef0e374542aed9e4ee9c890440afc8d245dfdb933f6b37054b9e244edfae83be94a0798dab57d99935eb4a15f6372ca43e3b98b60077616e8e622fcfd1049b197e36213f9c8f0172d2e06d601503988d80b581619d45316955b81a93b86bf92fe1d7baf16d69bad4b86be70594f38541c66945b5528765da44b6477497920b57d82e96a5d4e23c80634f2a4c5098f878d6bbe3bfd7cc5718cd4374a09c0c1d48c4ee774a06cb78b4e29be07d85556f4907eaedac4de3f5aaa72071a349438840928e682da895e61ef0d5f33aa99345d32c0f22843f307c9121bbf46d10fbf6ecb8fa5472fdcedc9b3f923a2f3b63516e4e17f0ec119d9f71340fed05c070d055102c4263defdfe4d9e132bfa324610158c7ac12939ce0026c4f5ca1ad7584f07b7dfaa2debe754df3e123053cb9709cabaacd245a438b9a1812c0f95350f634eaf94abfb5302e1bffc80e9854a61ed99709df26e08fff24c8cb3a8a3c525142a328f8908ce708b677f4f7178ece990785bbbdf8ef8c3f46c8eae4a8a317ef487b7ced0bedf6bdf2fb3a929dca1dabc4b7d6fdd5ef8e0fa2da046277bfcae56572bc8a2974e8a42e15e4544297cf5f0ff7f69a34a450a656e4e987aa8c618bf621e393cfb602afe950a19ea87a5ca9df1ec79ae109709bcc497cb6d2ec427b6b4d6aae4cbaecf2c00cd093ab2ecd626949da3e4b145e6c95d9f0cc1844b84923eabdb0411c4dff19254805eaa26652495cdd5f2531d2084adb69c01e9423798d5f18c88ccbb840d4af6d91cf2977932946e61a358c78d14f3a7c164674def029c91aed866893423164f46cc49dea27628081b1294d14f2884fa40768a266794dca7a7e3350ce2d4d0d915c7f9439df76a0a1e22c873f575c6f5939e511760983518d5498ae6c26d2a47c8b440c16e2322c35084e13640da5d81e3790ae14cf42a81ae9f69ddfa63cd1e1da63c8f852be70cbd2a4fec7ff398a978d90c957625e2d73a6b10a40fdf2dca359e1f9c4b6a75cb63fe8f82d605435b518e8229b1227610832f7302d39a1013b217bdc7bca09d60ba6abc9805d7e95431a9c6cf0a2eeb8304edeb8cbeabbbf97f7a46e9bacd9a29897741f5ca8a98b2d623a7edaea5c71435f3aaf9034f8583a9d6ab7c881ab4e52410b80d38252ef6eb463dee8e65eb8ec2e49117a4284485d1f0afdaaf4d50a4929afa0428b567263c4c9cbabf0796445a8ee182df9cb6a8164aa8c0467d215768d12d030d0999d6a320af419295af49a43c0ebfc8d4a3e935f759e8213b52d1fb1aedb39063ee56476df95024acd2b76f4be7e427f0d6ee7b78b36cced664c8740c9859c036e070b6b17b51a3bf5e6695b5f8b067d762e81ae1b5e625fe819ea6b953d4a86c6dcc14cfdf8e80d312349c22ddfb5205c8fc752e305cd60cafd5edd21863fcf13a663b3e045c1e03cc561351a946dae7363e986b26cccff99e45364f32f5f21cfa446418306f991cebd35684e77cf45f84b2ad6dd9728b909240c2568aa4a5d7d740e0d89ac3233ce16fc9efcf873938e22821ae23140522f39f73842a87d101b74147663c246cdde93bb8b45fd9f5bb09e784d672f1df44d56c46ad9c12177d5352a9ff8ce0692c7eadd0358ca10057f072f395b81874270400ecfcf38bc4bc7c755d9d3538fabddcf1ba61a411e6b6a32522814c9bc65cb4edda042d371caceb2754f5af2b019b7e0cbbb9198b3ea11ff648a00519590db96c996e29fe363edd06766c09268e5b0756e831a02641d2a4368065913da1a39672b98d591ec5bf87ac65700f7d41009e4e6557a002c7ca0f581c67cd998805108970633e294a7390af1795009ce2a2c0c8a046f332d51fe73fe283b48bca0ed84fd1d607cd7247aad6312f879a94f1b1156045595e3ec5eb99589e904763c0adabda8677c55f128d13d1f87d2d32f0b5f87d5f00e9239cfb26cb9e5ff6f206f772b2faba1a549e7dd00b2cc411a796691b6fe196af619cf10d29456c14fb1e11a2be9842b4c63f5eebb93184467e6fb5c6e58e14a7a409425e75fd77e4864b626f8ca465ccc74ddcdf71bf3c0ba36c910f7ccb86fcc3c34501620dc5e59822f2e6dde8cc1684c887b316e7f197bef8576da8982df2c2ea2802fdd0542a51d13d0261d5e5308a2028fb9479b5b5da746b05be9161710fac9e031528ecde53b5d9124b0da17049b84ac61987c96148e66bb63f7913a600bd5bab90dd8b268b74417782042b9b9f32dc0bffb202355eec437462afc169c34b342004717c5d9744c79ee778a9565f792c16d76cfabe5b3016c0fd83dd42bc9551258ef8c54d26c135ec47a044f2f62dd15f4f0bfde903edea5df79a77be79e9411b3dd4af4fb239d72b61ea864c7748edd1d5b4189f51ec8ddb827e1f7bfdb8678099ec45896971ff294b1015e5a96b5a99b4b221d4c26f771b23ec7e5b77d12551b5f4b11b5078d8e7ad08ddae7a1715eef0feee2f1216d0c32c6a89dc7e854b7b58def075ceb309446aac23e2bf4f6f75a033194ee82ec2e76405f7cbf73d555b8ce1158c028f623509ebd87e2deac3f308b443fe79d1c294cb5488e01159ae83761ea1127f02530524696759d4ddb3d21799f4098192cb29a9322a6d7e43696c6180efb3e8f55f0cf1cbce97195ae7a9a003eecd6e25832cf6878b61106ec1388e94f682b37bb997243bbd17c64d3468ca8f95b7efe799e6234ae32a02ed5dc3d2f387b7f7ec3dbc33ff67e9f624bf823ab56f4431634f3760cb48c50252d24670760b8c5fff8868620a436e9e8adc49891719787a1f7a7c885bf939829482162814a923ebc9d22a15ee06d2f9e5b1208e7a0658a1b98438c943b84f4b7b144f346d03e94d23b99f5b7f2f501bcd6104acdd157ee58489fec27f43d7fbf19dd57318179f9a4a9e4f9bd9c2bf19d41cc71ab8ecb8e8a39edef090e89c4162ec25f0cea9ec116cc8a07d977b1db8991cc56b77b6501ac6700b9d425c2a340ce0b1a26bc455dacea52cff9e72b48d974f0de61746ca28440b1d9e634cce33a76e0cd29ce232733747de3aa7f7d5196b34eac048064f692f21f90047d1bdc511e8d53655b6212c215f2bea5ee6725ceee95d75e538e6a43b60a06c05593b353a54c3f3b7130689090236b01a11a83e2e79a9a37b2456cc76c085ec3f5cf003ffa05b324e543049b00bb22cdd5eff6753f3d", 0x1000}, {&(0x7f0000002d80)="dad01c617c9c48d9c70bc4af0ef052dc9b89288e4e6235f802f88295cfa034d0c55c5db0f4c1d6afb1d18735e0ae0f2668ef0d4bdd50ee864ed33568b5287a4fce9ff1155c22c0a354a903f25c2cbcbd44d31c18b3be7de4f62b36751ed24d", 0x5f}, {&(0x7f0000002e00)="2f22fe50b0763f992f41465a46bfd8503241adaa7b1350b69a37280e4bbbaac849db61932e76a69e1e2f2cbeefba349498a89050966d16ab907aa66c1268b5c1435cc1332c388192ec7eebaf9616a7541cc2446526791b69b88e4006f3a5f47b3e75b085e04cc54c5b65b5aee659911dc0338626c2a9c72861cd3f4c7e284813c1c35f8ce4b8b32170f57084ea9fde7c2860de4b1a957133d38587aeac7f63417e3962f0d0ff761ecb527d6d4a9ddf5993f824bc93c7782a57bcd3ba47471fb2", 0xc0}, {&(0x7f0000002ec0)="5a16c1492825a6fdd600ed96c555e33614650d99997e4bcd7120a7ad09e6b4146210811e781c57ca36720c8d8a3d14b7ba032ed2f20415fb44cc22475f6b5fa448f901d8addd7a6965a28c83aefbc818b542a677fc703f8c132c9ead3098d12ed59eb99310d0778e5a90c5b54f722ed41e2f5a6743dfeba0d74dbb48bfcd86989a5e20322dda52d9b256b02acb8dcd649aabdd130b23b9d5a22bfb1754bc1c7c188ae91d5b37c3a967c33902a0669145a96c0b949fc04b43162252fb165d710d6c5b8f8d029e429b681aa24f7b873ea6090c610949d4bea274044e96716f47f0e3c93572c25260d9ec090e91265770f808de3824450c612adbc0d808230f9dfee412267acccfa3fc0e2c77afb042e18707fc31452b0fc041348945595d315e42fa0a340dd89484fff25763ac4909a2d7e137ff7894b75a69ec964ddca9ecbab1ff93cb3996a213064e2068ab6feebac1da41fbf95a43ac1a9e3567e9e05ff089ee65f477ff3150ee9b39948dbb7c76221c5ced8cc878859f08a95e65a665ce5195c184046a363c175d95918f65d78144157e554b68a2f82527a1337159ed8b1e1410ea76424c6a141b62034c499569c6f82bdb9fb79260d2f4226e014c7bc724741f13aab3ceec0a33d157e794beeec2a4da713a1d7c45aeadd1d06393d84872d2418df4f6c8bf6e388baca3b333b3ac165ce59e2a519267cc92fe8ad09c08f6d854a48580aac20f103552f6c85696c4c18ed94fdc9a0fef7a37748b7173a16d6cbfb052b6217f452bd467c281bd10aa5c8f7b68e15d1c32ac71bba52a836c92a7e1ae1d43e634c7b48a75a770a1107744c70cf5905376cd4d95401a698bf415d89b8a231f0140831a8bcc2d3fc49504effcfe8df54bffc20e43e79e736f90d8329d7b65a81f43bc121536e9a2ba1c8854c3947708803280e37fdcf1fac47cca3d17570329e20c5ec7b425e26c22054161ba87e6e782d87d40b90f34e51bc33f65b1beeb702e21ba62b9d8bd737b50e554cf87578a9e6fc458ef1a17b51b578920c50c9f157056f8055efc9bf0613de21daf559818b09d629934a3005fcfb0cc37ff7a40d6eefaf92b05959ff061e1b163e4e94445cceed932633168543a64021f501bdcee1e35780a1c87f013af19ab7acec9f92675c3f44a7a6ad931c8adf37391013eba4237083cbb03e1fd9b7b7571e006f32aa51010888d9298b70ea0f5896a41d8c5335085fac445f05d4b13fb1209e1b533e042750d60e4295e9d06900f2409d6227a4af11972ef30a81547711032150f1d0289305260f1dfd55c6c1c1c1ffc2a191b8680a04c2a4ce0b585560b3910b146d6fdaa942f9d05415cacf4a655328718387174b6d547cab05b3edf9c533d8764f5ce2a64c11e7e2242cce5a7d8d3f18dc6b5cc59e97e7fef375f6c08761174420e957d9a38cf56897b7f51f3072698e582c5b8c49d81ed96c996a8f8139f31d337c0ef1c9907e11ab88655d1768e9c1232d721aa8a4ac52742fc09dd918b395833cce249db7f1ac95b22eced07c2c0c1e6e3fc7ff61e1e0ce575c45058302b904caa049a3a46d37d059254c91565869decb42145db835aef4dd2618463ba1d72d423cabc6e50b663feb980bac25b97d7b2256e49752365e76f48631f8a8ceb343eacf662d4171ab314a7ee53be5059f651ca3dbac8076281e6d4b0e328158d7e8fe9d315e16694d8d5ca5ef2965d30b387591735605cdcc9d7619cf0a4e328d217fb7fb79e73ba3a4034707d17b8e6a7a7b2e13f9aabc1393ecb21a93b4fdb72bf46984b36db79436b029d835f793a574e6c5c31bf1a3b788ebde10c7bee0e1abd000572d4d166085909fc59b7fe1060f5f223a9f4567b5d6b9eda2459cd183a82f72f11c4a100e17ecb1dceea31a0a9ae2bd2404676707c063e3f9c42a0db705f487d3123f77eedbdb2adc4ca99071a8b46d50a2fda36355eb7f538b359aa538bc5e7847644d7945450f2b19f3fa83ca84d2ee7435e63667daa334e84bc810c9ba76fe8b44e552e9562bbf521c9462d6b47e9b266b614b62f8a19ce59b17bfe076253ca4c61be7021dc5e1b2401dac0ce14e3985bd1c3dfebd0dd67d34c9011f5fd66781989bb7acf6770c0fa7a05a21c0815f1a7ce1bd081b244a39326d5e930d70441317a811ea55ae740a56669f7f840e7e57683bb2fc9c20dd69411c01054f8008ccfc45c98258363363e0206468b31b6daba9f81c24639a54f973e63062f1f56e5c87378bd295045b3f84b5bdfef4e51199043903740ebd493e05f73ae3f2cc50a0f9cffebfc573246c3da855d35180d1ab2108d478465aac064fc6d3eda7a626e1111f4efbbb4886cc74f6cdd2aad7072cf3c6c1a905e2d843dd998dc088a9709675e27bf8869983a11447e68f098276607d35b3ba45ab314254c5993d86fe124f83a341a4883532f33df4f67b329a72e4da7500c438260c1d54274afe399d152e81135c2986b8b9fc26b2343376347db9c7f712ac23287fb4ce5af444f136bea09c1823078700503f3ed1d27b46d92cc4993fc67f2563d105632e5f9e0cc56c84c0a5b90fa27b5a334c5c4486a6c2d60e9ab8d34fac174081a66d41d410be9554e75d9c2f7b7b6bc077de50ab8105ff19089adb7884bf98003d3bd1b25889a87f40986fc3ade6f330d1ab6c11b9c5e84254b148ea9dd64ad34d1f5435d3b8be1eb1919e75180be61bf745d6230fd2457c58c6e608d96d9e239e089efd459bf3414cf1debe6ad2d17b5de834707dbcbdd7fd7da2efec705dadbecb4ddb06dc94a5d85c118ed511e7dad2d67e4d9ad7911fe2f6f93d13dbb0689de32db2d9bad1d72253ba55c363400017e7e1cfd128114b04c77b26dcbba0f5b4477beeaa64cfc29f1ad068d7e28a8c493131a8b38c5d2a01e77b1ba913f5eb56feb25890737de2d07031d445071621131f3b30ec464b19a0fe94761d78e89efc4d6ba45d0e547eaa4265d9b6b816e832008f12656fd902469455b743c5b4ae3dd6716e2bc52906b11a85211708c9fe76ccbb65b0d6d110ab03850bf47b50444cd2b0bb91b282d4982e43a110d14a2b03a188175141645806ddc5f20f6d055a0227b8c8287e2eccb3d4a98b0d249d12d95bf793e25724f77a5075ed6ba410d76298dc273cde6da797fc3d685300ec8b5604aeaf5bd887b5beacd457d971283791a6c415f3c1c8b22f31e2a475aa98356f5bc5c889e0d7d5ade3fcc0389ba72d99a5a87a6941be872d80b001b0506cb53daac6857110d53cf852c526040924df51e26ec8a6d5dbd0cd438bf350dc0733e04d79f4e313685857e1347a0a41247a585e0d74ddf164dc3cfd281b3ed7651f413070d1d8dac81c65bcfe8902366ce543264570491400751a799becc7a3f4f3700051b8474899b2467799aa84f80e2d2cc66ac82b2d6b91b6641327875ebe9ca09159578e77c11d9d7b6defb85152e0885585a8d5e6a64ba5a2fd317d7b3d8d3862d339de178737678f4d3e3aa534ca5eab0e501d8ad6759fea1413c46ee4e272deaa85ed2520b268e0d6cb4e9de439aaba3a825809f749574d21ec63bf9d2f8d77d9c3f8393e1189153abc1213ce364e0e590b647d2214c77c9257a30a170505ce1626372719bbf4c060ac721e0e1b708b75dd6205c6ad8909d19a37fbe407b5c03ff99047e5bec7b680afdf014495271df053afb4ea8abc124707dd5a514c524a1dde9cef3c7993b82404d6dfcd2956cd2f2b46a89d67374625d66b8cb2b61684cf090ca63e125c958544f0cd9f4be23268e23bc53b7a32885beeb1ab29113c5807470e66370c905ada20a06fedbaea0c35b665e2e67b6ff35524a7df4994e11767eb08aef8ece00b5a40f722297b53a9c10f0f072e3841eca06436f493ab970a00cf36feab717924f6189f14b331b5239a4c486ff9c8e0ac81f79c88c8f7eb22c19bd3cc61fe171d3f315969199f57363ff23216f5e1f6329047e0af26978235923b6299749c654d6a0e0bb3d1899de1f552f494deb1a83238c3bd6ea954202f3ad1b5e9bb755a6d61ab1b602385be79d623bb68fa14f0ba6af64a7746a3f0ece68a34878a987eb8e27f937477fae1fac487205b7669fa53b9d45533850ac42d42903c1be595ba0c6c29ef906c04a8754d75ded8870b65e898e61107f17f895c274bf5941d935b76f2663fe615817f49dcd54863427409c8660908058f2efb5aee1e812e0f5c386e8c675b04b48cbb3697b10f192413567be821e4ec15998bb552084798b964bfeb97356c4511c071f1c22bec929051e58c4c7d675db153c31e7b18c4198d97344e9c4a58ff79514d60cb97727a080791144eacbc96e642023a601e19b95e6d614360daed157975329095bfc6390f048689612e7ce0a654684867d278254737a28efd87619198440e5aa192dbad3302b28c49c56aa89fa0fd984dde5cf98a833a2b667d1a18bd84a259f84af756ac520511109589ba898dc8f820fbae4a177b3a6b003bf2534f059649faa495f2c97e9f9b96a415c3a811d4d87eedbdc4975eb1e69877e765ad288d79afd700e01ed9b5927ecfb0812277cb9d2869c474dce62c2dcd4cd8c53ed5ec1a7634c72e9536925e34f7f40dcacb118a3fa4674d3b80a8ebb0e8ef7437f7cbe4978dcd8302fbed1bca58e085665e287948c092239f20acbfbcfced45189b5ff8d4e10baa94fd9a89633419a2845a78b55bd4466b56e812fb5545ded60249ebd3396f1537f1a05a11b7a7cf80c1008f435fccbe61ba78297ca2004320125b87f294b04271ee37e434869a103a898366dff6755f4dab4a2ff1bda33e7447e6e72d8a7ff552db70b5ca73572c30a04fca44855ad47bf311af7f1f1c496b34276fbe5b15808cfbbfad733ebd9a9bb76f24c11bb09e517823dbf136b2043949669bbafc2a46b7d988092cece2ef3e19ae056403d45e8b889d8298121234387c0472902448c53aeed749d5f222706dd002f33ebab250acb44f32fe782498501263405ef00e7cee48a17931c1d1f0e0f3b143e3209d21eb166e72df71fa3f0606d597f55e8133d49798f912c8b4f26c7403f64e17660f0af6cd5c16f0ce48ce2f4f8100666afd6a8ead63fb1d3a21e46f8dff4ddb8107deacb18bf14713ece1513302416f4c6f4ec3900475ea095e0473e57a031b58d9c0192276807edf99898bd6f4327768ef67453c5e6e9e6a3a24c65a11474b943943c04cc42695506c95b5e2d050044b83d370799b109d9c0cffcfac7fd780c34ad7b4ae4e9afaa04f32efc5c9c653f75dc1642aa025c6a16a93ea46fed9895913d13b03b37fa9f6fbacb2cbf7fdbefb2afaed9dae932dabdccdc6450c938bd282dca619424a01f485cf63764cfde340b51a1b53dad9928de83071e73bbf4cadc3144d0a8801a9b947ae09713ae3ba218d30c4cc00f19f228b517dd272b06f130610cac3b6c65fa18a3132601e6c72de849431991b910ee4cc139940c9c0a4dda828fb278924e40cbe69dc2b6296dba9041aca89cd564a37a9433f79ac4b12016ffe7f604fc162c75e769fd3ee4ee417036ebda3bbe9c488721de3f48c4006bdd4365f6837a3a47d303c7ea22d4ab650dc3ae41a5e7bce64e12da63526202cb2bd4e5b99f64d10e0bc2f4b479f0497d345390fa8d2c5350adad8b656a5b03bb334f91b841c5dc8f525a28ac17489597ebbff51e0de26c6c637abec8d008d5883672e0c9d0ccdaf771710e535f357b91c5f8e9c438c80f7ac903d3e983758ae71a22d4df745118ba6c731971d9237e99365acac462774e498e7514", 0x1000}], 0x6, 0x0, 0x0, 0x20000090}, 0x44000) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000003f40)={0xffff, 0x7ff, 0x9fd, 0x0, 0x6, 0x1, 0x4, 0xc1, 0x1d87, 0x80, 0xa849, 0x4, 0x0, 0x0, 0xfff, 0x1, 0x9, 0xffffffff, 0x7}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000001a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f00000019c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="04002abd7000fedbdf25010000000000000009410000001c00180000000069623a6272696467655f736c6176655f31000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) sendmsg$xdp(r5, &(0x7f0000001980)={&(0x7f00000003c0)={0x2c, 0x4, r8, 0x36}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000400)="fa9f77e3369ce0f7909937fbd0ad0eba80e9bb297b5907b164e3b5cdea2b3ac6a6c2c384d38a9819e49b1a585f8686dfe8586383d35c309cc96e0db46bd4a813809e28827a1ecff9100d863d", 0x4c}, {&(0x7f0000000480)="5eb7a488c0c85ed8731c469d1f863ab05f94cfaffad1cd98a1838264f2cd0ad152040a03cd87a510a58290c7499da45bd4635ea894c485335be33205b82226490658ed7b250738fa505d1de85d4ad11e21e2ab2cdcaadc807b69eb6d0686d7d969020c23e4eb485ce998d42ad99c95793631bb32019019a2a0b413bf615b1d700e3f4e70da842e52d32788bb975b12dd8fe29cb859fa0041a66caec3332ab89b3e31df6848ec21d9", 0xa8}, {&(0x7f0000000540)="87c30473416cfdd1fadda4d26cc54f4a794ba426d0703a59b7231d5abda9a6ae63d3f598c958234728aad5c8775a864be7352fb18a610ad4fe60555dd12794a07ea99a4718b43dff84201461053da4af1f47e1188554b31c03354413e7a7fdb7d6f19d6c6a609903561289ecaa4a9bca65da3c103e8dd0aad1aedefc875c8ef119b6e19baac08797a04498223d14ae17a3527291048359f0ddc41532c9d87314352828e7aec9e87d2228dd67bfc539ad5cacef05fad07d95174221a2", 0xbc}, {&(0x7f0000000600)="95b0e93224133ab2f442b600840d5398cd0c3bddf359dc8aae1819e3960820daf41cdf274a2b132d9dbce40ad0ff8b70f961cdc9209604141dede3adc76a8d94db2583df2ed365a54517566090cdcea6b8f6c452c5d7f3e6ecd8697f8f114c62ecebc59b03cbb9a6e09dee6202b38b7a4de8048e0a704beca7b338", 0x7b}, {&(0x7f0000000680)="a4ca9fd81ca27fa209256de6dc59828314a2d2daff09d4bcd0edb4ee5f14d276c763d511302b716580f32a0039d2240b784134b3a69eac26eb49542dd26b909d0e2d5098500576d7e44f932fa43977166bf7a84a783c677a9218ea1b73a1c9bf0682bccc0e271aa58422827257e2e52cd9e5fa51cbe1d046656e703deb86b6dadc0cd6cde2e69f658fa02d90e90fba438351e0887ef404771844b6c1ca5b112a90e35f16aadf39c8bc3a3343", 0xac}, {&(0x7f0000000740)="f1eb53e0ad3f0571518400a9c3c31d05215da85857ab9f", 0x17}, {&(0x7f0000000780)="af41fa97c02d43d37801e1ab5ab997d672c92a039ebd7966a2d0929359ccfb08ae19ee69822230c65f224d46e20b110a0717ba211db5d5db1336e444166b9a53e7a400ae38f92818528ed302d43dbed3e88db5d2fd323ab3d12a96df724a40baa2e79193318097c611dc21b657fbe1a0d9aa4e1d948fcdb126", 0x79}, {&(0x7f0000000800)="3f6804493271ff029ae3eb24591486c7028fd8e1b94df385020b9eab0c7552e5c0541cb8929c0a2fd5a60763b6a203ad26ac6e58a125b8b66bca8c2990bcebef374c31df69c482c7d7310076a672b009f3242c353a72db6fe59616d2756a9669199ec4feb0e5fb59ed9925d9a886b1883ce3bc21ac18f7590f67ef65008909d526b43a390123d1a12bddca5a0b050546b09ab9bf0fc7831c39c0fdbf6929eb14d06ef34acab57f2b", 0xa8}, {&(0x7f00000008c0)="1133ae0b7087b2a886b7c732d1ff8b42", 0x10}, {&(0x7f0000000900)="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", 0x1000}], 0xa}, 0x800) 02:30:02 executing program 2: r0 = socket$inet6(0xa, 0x80005, 0xffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)=@ethtool_regs={0x4, 0x1, 0x39, "2749934886c836d89d661abdbf042ce54579d37400d50c6e680d672c42fe651859a817988064af7f4920a01d544e663984a902a828d5599e93"}}) 02:30:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x4c00, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1602.332964] binder: BINDER_SET_CONTEXT_MGR already set [ 1602.359607] binder: 5233:5235 ioctl 40046207 0 returned -16 [ 1602.359652] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:02 executing program 2: socket$inet6(0xa, 0x6, 0xdeab) r0 = socket$inet6(0xa, 0x800, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfffffffffffffffb, 0x400980) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x2, 0x12, 0x81, 0x0, "7c5d608ba80a0393d43593eec89c6226483a5c71294c776e9b76934bc2d3c88d"}) 02:30:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x6000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\xff\xff\xff\xc3\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1602.511935] binder: BINDER_SET_CONTEXT_MGR already set [ 1602.545967] binder: 5249:5254 ioctl 40046207 0 returned -16 02:30:02 executing program 2: r0 = socket$inet6(0xa, 0x800, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x6800, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1602.645456] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1602.743236] binder: BINDER_SET_CONTEXT_MGR already set [ 1602.767378] binder: 5280:5282 ioctl 40046207 0 returned -16 02:30:03 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0xffffffffffffff04) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:30:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\xff\xff\xfd\xfd\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x6c00, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:03 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x4088, 0x7fff, 0x4, 0x1}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000200)=ANY=[@ANYRES32]}) 02:30:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40047703, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = dup(r1) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r3, 0x406055c9, &(0x7f00000002c0)={0xb, 0x800, {0x53, 0x800, 0x5, {0x80000001, 0x8}, {0x7f, 0x401}, @rumble={0x8, 0x3}}, {0x55, 0x40, 0xffff, {0x7, 0x6}, {0x9, 0x9}, @period={0x58, 0x1, 0x401, 0x986, 0x6a26, {0x4, 0x0, 0x3, 0x6}, 0x6, &(0x7f0000000040)=[0x7, 0x80000000, 0x1, 0x3, 0x8, 0x6]}}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) 02:30:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x7400, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1603.230417] binder: BINDER_SET_CONTEXT_MGR already set [ 1603.238990] binder: 5389:5391 ioctl 40046207 0 returned -16 [ 1603.239520] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40242, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x1885, 0x5}) 02:30:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\xff\xff\xff\xfe\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1603.302805] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1603.377155] binder: BINDER_SET_CONTEXT_MGR already set 02:30:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1603.405289] binder: 5403:5405 ioctl 40046207 0 returned -16 02:30:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x80000003) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000000101208000400000200000000000000000000000000000000000000"]}) r1 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x440) ioctl$BLKBSZGET(r2, 0x80041270, &(0x7f0000000180)) bind$alg(r1, &(0x7f00000006c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x3) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000200)={0xe8, {{0xa, 0x4e23, 0x101, @dev={0xfe, 0x80, [], 0x24}, 0x8}}}, 0x84) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipddp0\x00', {0x2, 0x4e20, @empty}}) 02:30:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\xfd\xfd\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1603.498585] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:04 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:30:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x7a00, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\xc3\xff\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000040)=""/27, &(0x7f00000000c0)=0x1b) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @local}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in=@empty, 0x4e23, 0x61018c35, 0x4e21, 0xfffffffffffffff9, 0xa, 0x0, 0x20, 0xff, r1, r2}, {0x2, 0x80000001, 0x100000001, 0xffffffff, 0x101, 0x3, 0x9, 0x7ff}, {0x9, 0x9, 0x0, 0x7}, 0x8, 0x6e6bb4, 0x0, 0x1, 0x3, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in=@empty, 0x3504, 0x4, 0x0, 0x80000001, 0x100000001, 0x100, 0x11}}, 0xe8) 02:30:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:30:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\xfe\xff\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x23ba}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1604.148209] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1604.172209] binder: BINDER_SET_CONTEXT_MGR already set [ 1604.185680] binder: 5539:5542 ioctl 40046207 0 returned -16 02:30:04 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x24280, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000180)={0x6, 0x9}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x2020c2, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x1000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1604.405359] binder: BINDER_SET_CONTEXT_MGR already set [ 1604.430494] binder: 5561:5562 ioctl 40046207 0 returned -16 02:30:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x2000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:04 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x80040, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) 02:30:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:04 executing program 0: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0x2, 0x8, 0x8, 0x1}, 0x20) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) write$binfmt_misc(r3, &(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESDEC=r0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="7f24813296ff3e9240faa22f9561c393e374b1bc627460b99aef857c076f3d618a5c5631fe62d69b2e4a86193508052ae61c027a91b9ed942a9bafcf4d7d66d51c6aa1d13cf2a19fd6a3d80d3abd1696db3fec50835fdeaf46c9a35e448b9b6193fd3e496cc12499c7b265c2d28941dd1d826341980d00a98a0aa93f5849ec9fbb350c51c60c737813cbd8a469d6ff2e1a23caf73c58451a9473dd9ceb31fff1545b4597328253eccce6e83fc4a7b1110ac9319e6b315ba6b0709c42a6bd8af8cae15fb03fab704b7dacef6b337959e8b68f84f876d74f86b40628bb9800100d033e0b0172", @ANYRES16=r0, @ANYRES32=r3, @ANYRES16=r2, @ANYRES16=r3, @ANYRESHEX=r1], @ANYBLOB="0740a8b1f7846c7fbbec92d22c0039d7942dcd702387b2350d91521f6d1875888c35bf7a29c0b0376f5398cf226afcc8609fda11c1ea8648f1617b296d49bde02480bf44cfe0a41c0142f6db6a6bbb8d692a7e7ac27d6fce4f03ab04af01ce8eaa7bc9ff1d8e19aa2c7b6adea9a383c4f1b86e168acbac7e0e044f9b65c12db16c3f86447ed3a731f882877545571d84c388d18a6d6c3c775476b9addf142705f56ace8b4b09556bc71e8b2d499be542e3c382283165ad8ad1b53f55ae3da229b83237d104ccb1e177de660771127c2a6d11fcf3a10e2affa5a46afb1b6dd360db91", @ANYRESHEX=r1], @ANYPTR=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES32=r2, @ANYPTR64], @ANYRESOCT=r0, @ANYRES16=r2, @ANYRESHEX=r3, @ANYPTR64=&(0x7f0000000780)=ANY=[@ANYRES16=r3, @ANYRESOCT, @ANYRES32=r0, @ANYBLOB="c3709ba140bb34da2c62dd8eaa7d5516b5b44fbc13aaaf304355ae3a93822aa1960f1f7f3afef138e4e23b584437d12e1b99b80842eb5bc8bf3ce0f5fd30c4ff87a69e8a04787ff7a0c22e811022c028ffc8109ffc84dc75db1d21ed331f098a2f558ce86480e75a50cb83f548b580b4b5db636d9710bc33762c66f7bd44b175b9a4be8808d4b140b73f64702aca6b5fdd9daa42676ba96d1b3a04caea9561b5546740ba67d06515a228daa3810d0bfceea12d52943d158f1cd27e8d8e4e3e805ee214061da583bb1d58fcc521f748d1b4c6b832e6b5db0494dcda03cac814056ef07f1de52022a6a4f63f30b96fe0aa1d9e152ff559d71a00bcce892cb3", @ANYRES32=r1], @ANYRESOCT=r1, @ANYBLOB="abc5ae63ad6445ca46003121e4dba03f08ef59a3a443e735fb802c491fc9e91424db037018faa01b47fa01bbcfafd30ad2a05af4d5eb9a63e1056c42807983c35842ad6cebfd0d2f27bdfbd1ea96a35dc5769647d61f5316f9cfb9a56390d74a4a09d546ddc81e7fe01165c376f51a7b5c1a6bbf6fbc1af80b233f740c68ebc97cb00fcaaab0053ed04e8650d7c7147d2d3769b38cd6213346bf6e2d5d42a1f93bf0", @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRESDEC=r1], @ANYRES16=r3], @ANYPTR64], 0x40) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:30:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x40000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) accept4$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14, 0x800) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000580)) sendmsg(r3, &(0x7f00000004c0)={&(0x7f0000000380)=@can={0x1d, r4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000400)="6fbe6914d654c793d3fe5670b6b6d178f444fdd32cb36eb6d741362be164044db650e62317058c79736cd4163ee22f44c6cfa67eac2f540708ff3fa69232825395a9b12968522b91338c7018e7f6efb5a9eabc4c92103b11e55b9988882b328338ee929113a1afb938", 0x69}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0xc2f5150e34cd0681, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c}, 0xfe40}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000540)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000000)=""/176) fremovexattr(r5, &(0x7f0000000500)=@known='com.apple.system.Security\x00') ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1604.979183] net_ratelimit: 14 callbacks suppressed [ 1604.979190] protocol 88fb is buggy, dev hsr_slave_0 [ 1604.989269] protocol 88fb is buggy, dev hsr_slave_1 [ 1604.994407] protocol 88fb is buggy, dev hsr_slave_0 [ 1604.999530] protocol 88fb is buggy, dev hsr_slave_1 [ 1605.065335] binder: BINDER_SET_CONTEXT_MGR already set [ 1605.082994] binder: 5675:5676 ioctl 40046207 0 returned -16 02:30:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x03', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x3000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:05 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$PROG_LOAD(0x12, &(0x7f000000e000)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="b408000000000000bd0a0000000000009500000000000000af56cfed920a9e57ded60684663e190edae713f4ac95f064eb54eb20d66e8da62c7ae4b4de3824e9c4358a951a746d705de0fa294060f0699aa1eaf757f2dd01c36725248fc3401803758c2db219db121385d5d4b7a70e0fc9a507dc272b93d4bc573523ac69d0f36a2478f1149ae4dc083cd20f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000032c0)='/dev/dlm-control\x00', 0x90400, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000003340)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000003400)={&(0x7f0000003300), 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x1c, r3, 0x41b, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20000801) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0x4, @mcast1, 0xcacf}, {0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x5, [0xd4, 0x3, 0x10000, 0x1ff, 0x7, 0x100000000, 0xa1f, 0x400000]}, 0x5c) [ 1605.139150] protocol 88fb is buggy, dev hsr_slave_0 [ 1605.144272] protocol 88fb is buggy, dev hsr_slave_1 [ 1605.233277] binder: BINDER_SET_CONTEXT_MGR already set [ 1605.267108] binder: 5694:5700 ioctl 40046207 0 returned -16 02:30:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x1000000000, &(0x7f0000000140)=0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x20200, 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9, 0x1000, r0, &(0x7f0000000180)="24db79c55017260a448425af18996673430221164b26a14b1808da1a0670f89c3b37d95f4be30af63c84e5289e03fc1c7410de0a5e5d3a5b464945d1de8847b352ecacb4ea923052783cf66101fe9a59b9cded7ade8ddf3b386787c442bbdecdcac27f56d8fb064ddc3c0e181a551ba4238e51e9235bbe7ccde3fced0950c9a4ea2210f09087ce1e97f3ff5c1a73af4bc6bad7bd2ee52ed029c2cb48acb1c312e30f4b4cefe28381d4bec0437f326f57dd59a84760f6e8b02fd7c3aee1cc57ddf2982e82bc8fb4b6", 0xc8, 0xffffffff, 0x0, 0x0, r2}]) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x41aa00, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x7f, 0x3, 0x6, 0xf9ed]}) 02:30:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x04', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x4000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1605.379330] protocol 88fb is buggy, dev hsr_slave_0 [ 1605.384485] protocol 88fb is buggy, dev hsr_slave_1 [ 1605.473261] binder: BINDER_SET_CONTEXT_MGR already set [ 1605.486244] binder: 5738:5746 ioctl 40046207 0 returned -16 02:30:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000402, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000000c71614e00cf64d9e3f4b98ed900000000000000000000000000b3c8"]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) 02:30:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x5000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1605.645240] binder: BINDER_SET_CONTEXT_MGR already set [ 1605.669765] binder: 5777:5778 ioctl 40046207 0 returned -16 02:30:05 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fchmodat(r0, &(0x7f0000000100)='./file0\x00', 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0xdb, "2f9194e9c17dcac8fdb705c4c2053b5420139dedd40766b6e3635593d32cf9849c58717e5e2e9e5f4c64b5aedafcb6b55ea2909dd7b3b013662acfd52727aa72ae3f8eaa38acdc5b53fecfce68d7abae488b74b4d6e944e6bcf209d21dbe1a2823e261f18632b9cc45fcbda8ee7fea02e8ec49474c311afb2efb69150561929e6a0bad2cd54b47a4186b138b9fb1242447a152dfaa3df427fbf1bb8f42d09280d2d788e80a539b3fef9080bd037a6c55a1154ddbd41f89bf9432a9d6422d223c8aed9533c1b3e056abc1398e6639b7d6e2f6c38e80649e667c20b3"}, &(0x7f0000000000)=0xe3) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0xff, 0x10}, &(0x7f0000000300)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) getpriority(0x1, r5) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r3, 0x0, 0x200010005, 0x0) 02:30:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x0f', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:05 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x80000001, 0x100) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000180)={'ip6erspan0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x39, 0x3, [0x1, 0x5, 0x1]}}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) 02:30:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x6000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x101000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000040)={0x6, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1605.974233] binder: BINDER_SET_CONTEXT_MGR already set 02:30:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00?', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1606.008070] binder: 5842:5844 ioctl 40046207 0 returned -16 02:30:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x7000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:06 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3ff}, &(0x7f0000000140)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0)="c854d9045a49733f1d7f3d09b6e69ea7c7bb229ffae2d7dfabdb09b12341bac567545acfca3325633e53f6e1ba04fcb0ec5ee8475c094d9bc6bd2f9475c1e7c78148ea9e2a7e172e22cb21b7ba0a97b41935b2f70e0b61549b168febae01da50d4b11afcd9d258c4428e084d82cedc55f946b3892fbdf70d1ab2dfeb9409bd1879e47fa116a88d", 0x87, r0}, 0x68) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r1, 0x200, 0xd, "3b23bb0dad065a66bdd51384b5"}, 0x15) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) 02:30:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00@', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1606.237262] binder: BINDER_SET_CONTEXT_MGR already set [ 1606.294618] binder: 5873:5874 ioctl 40046207 0 returned -16 [ 1606.317450] validate_nla: 10 callbacks suppressed [ 1606.317461] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:06 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x3, @dev={[], 0xa}, 'lo\x00'}}, 0x19) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000200)={0x0, {0xffffffff, 0x5bec}}) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR64, @ANYBLOB="101aa41d35ada39261b5746c76c1de02e9d9ea3942093cbcdcc378b9f6a9aa4e1a568ebd", @ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="d9d5b0", @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYBLOB="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"], @ANYRESHEX=r0, @ANYRES64=r3], 0x24) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x80000000, 0x5, 0x7, 0x100, 0x40, 0x0, 0x8, {0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x3}}, 0x3, 0x1, 0x8502, 0x3, 0xd4d}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r4, 0x7, 0x30}, &(0x7f0000000180)=0xc) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:30:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$inet6(0xa, 0x802, 0x80000003) ioctl(0xffffffffffffffff, 0x8912, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000a00)="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", 0x481, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0xfe, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f00000000c0)={0xdfcb, [0x40, 0xaa, 0x4, 0x1, 0x0, 0x7, 0x319, 0x10001, 0x401, 0x952, 0xb8, 0x169d, 0x5, 0xc992, 0x80, 0x3c, 0x4, 0x3f, 0xfffffffffffffffa, 0x3, 0x300000000000000, 0x9, 0x20, 0x81, 0x4, 0x5, 0x80000000, 0x8001, 0xb2a4, 0xc1, 0x7, 0xffffffffffffffff, 0x80000000, 0x2, 0x9, 0x7fffffff8000000, 0x4800000000000000, 0x1f, 0x9, 0x5, 0x101, 0xfffffffffffff001, 0x7f, 0xffffffffffffffe0, 0x8001, 0x466, 0xb6, 0xd6ef], 0x2}) 02:30:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x20000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\xff\xff\xff\xc3', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 1606.861053] binder: BINDER_SET_CONTEXT_MGR already set [ 1606.879413] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1606.892789] binder: 5989:5990 ioctl 40046207 0 returned -16 02:30:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x3f000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\xff\xff\xfd\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1607.023736] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1607.059177] protocol 88fb is buggy, dev hsr_slave_0 [ 1607.064290] protocol 88fb is buggy, dev hsr_slave_1 [ 1607.074142] binder: BINDER_SET_CONTEXT_MGR already set 02:30:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="1200ff00000000000010120800ed41064b0000000200000000000000de0000000000000000000000"]}) 02:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1607.100466] binder: 6014:6015 ioctl 40046207 0 returned -16 02:30:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\xff\xff\xff\xfe', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1607.242270] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', @ifru_addrs=@nl=@kern={0x10, 0x0, 0x0, 0x80000}}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000040)) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x200010005, 0x0) 02:30:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x48000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\xff\xff\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:07 executing program 2: socketpair(0x3, 0x5, 0x80000001, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r1, 0x409, 0x8) r2 = socket$inet6(0xa, 0x4, 0x201) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000033c0)=ANY=[@ANYBLOB="12000000000000000010120800000000020000000000000000000000000000000000000055e7dd45633af5d9feb714c610ac42a384daced676cd2dd8f49946c800a9df7b78147528900e73f1c12b098293bca26c6b1f48176a347dd18864195048bd6e2fb677d95b0228c9ed025e44e41bce7c8d509104f335c8ed245ad0001e50b6d88969cc4c36faaaba7b2488580bf6ddbe36ff01000000000000e72b020b2888fcf1a46d51209a1a5a2eb0cc2d0ef9113767f3f98cd24c72956e665e15a2bc60e859f2cfda228e2b"]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000003100)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000003080)={0x7, 0x70, 0x440, 0x1a, 0x6, 0x9, 0x0, 0x80000001, 0x8040c, 0x0, 0xffffffff00000001, 0x6, 0x6, 0x0, 0xcb, 0x80000000, 0x2, 0x6, 0xf62, 0x0, 0x9, 0x80000000, 0xfff, 0x80f, 0x5, 0x80, 0x3, 0x3d6, 0xffffffffffff7fff, 0x0, 0x9, 0xff, 0x1, 0x3, 0x7, 0x9, 0x93b, 0x2000000000000, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000003040), 0x4}, 0xc0, 0x9, 0x0, 0xf, 0x4676, 0xffffffffffffff81, 0x4}, 0xffffffffffffffff, 0x7, r3, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002ec0)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000002f00)=ANY=[@ANYBLOB="060000000000002200000000000000000000000000ac00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001700)='/dev/cachefiles\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000031c0), &(0x7f0000003200)=0x4) mkdirat$cgroup(r5, &(0x7f00000009c0)='syz1\x00', 0x1ff) inotify_init1(0x80000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000002c80)={0x24c2, 0x0, 0x4, 0x13, "50f84373e8981bd01b27490c7c5e61a78a676a40ead0276720170bdd9064f249"}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=0x0) ptrace$getregs(0xe, r6, 0x4, &(0x7f00000032c0)=""/254) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000002dc0)=0x8001, 0x20, 0x1) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000003180)={0x6, 0x4, 0x6, 0x8, 0x80}) sendto(r3, &(0x7f0000000840)="1b024a86d4ac289979a79c95fe70812af3a2f1911e3e7b171d17f26c680f27b6714a972351bc8605ec7fd0bcf147fcaf227b348ed2f870077bc52ba2a01f7003ccb22cfad9c607b90c0d7ea684b5f6d29e6bcddaed0dd08452bfef2c5e2cbf9dd5e289193787ae1a52daaeba6f2cfe94f2f5d739405f1c5a0b01dc3790f97630a35833a3464423afb6d5f37260b7a7bd85ad717f2eb503b946ff597d854052e4428e4b59983096236ee5a2907fc90bfaab9752d4", 0xb4, 0x8000, &(0x7f0000000900)=@l2={0x1f, 0x3, {0x1f, 0x5, 0x34d, 0x9, 0x4, 0x100000001}, 0xff, 0x800}, 0x80) dup2(r2, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001540)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000001640)=0xe8) sendto$unix(r5, &(0x7f0000002cc0)="a689321408566eb7b52231682b96fcd69f14cf5aaa3b43107b37953aa8a59192db89cacaf50a583cf0ad1afb27c2f354c011b508651ce83d343f4dcb037f561efdb13d5cdadcc4863fa212bbf660fb0790454c452ec1475d1650f2fd9f2ca558c1", 0x61, 0x20000000, &(0x7f0000002d40)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, 0x0) sendmmsg(r1, &(0x7f0000002c00)=[{{&(0x7f00000000c0)=@sco={0x1f, {0xffffffffffffd69d, 0x0, 0x10001, 0x101, 0x0, 0x800}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)="5f81edebafeaed3d12f3bc744021f092fcf2c0f9e4a1db", 0x17}, {&(0x7f0000000180)="7d04b33e7ce563308d15f21be350ca984b1d40175c3c6d5604bc2e44ee6d81d76bb1ec1174eb67d3f10539f72e45e261b5d57064bdb71b73a2378f5df75071d79f8a7a2ef6f6fc9d039448374a4b484c6ebe7081ae23c656ba6ca725af5274d2c3b39389f2a6e149c3f1b749f69c8898ba5569c6ebfd4f8088e0a242fb0e4cb823039161866cde7c21030673fc755d83cedd268cad101be3eeeafb439b18c70eb74166daf30a253c86c1abb40103bd68", 0xb0}, {&(0x7f0000000240)="3840a6e16ef08e89a8151ed2fe92d67a8e1d641cacb614662200e68fbe8464b5dfe62642600275a27f5163286e19cbf864f05d8ddc6207cc918660f675b197866102bbd56abf872975734860c7939f5f71c369d1181730d81b77988c59349b12814deb2944993512c3a0b9a2fefef77e77e8a87b296b401693c78e57599e6576f16d1dfac961b124450cd21101646b0087b5fcd6b627df4855859c47ad3604020448b344f410e06fe21b44ef9ed1627bb20d2d47d8a8f5a9f165ccf8bf6a7a58b4bca034a72fc33e42275ba172aa36cbc4d81004c051b5437ef3ebe755ea675b5ce0", 0xe2}, {&(0x7f0000000340)="f8389697b1b22f02bf9d943b47a275ec7483ae9fb7938ba6f0263733e9e409d465c669c56ebd68198b09a6afcac921a85e539e03eb10295bac74bad0c40c369e9697fded434dc0e8317eb05ee65e7625", 0x50}, {&(0x7f00000003c0)="e4859cc1d2b39a6d43bba2e7a51416d0c29c926f8439958e4ab7da49a5efa8de3ef4a655177e9b7dbaae9f06cc40eaa812ba0b2a073e6ed24df330c754db6d55cef0ccb8cada72f3bcfa4628467212c5cd37aeaf391beacf8d08cd9fe8b4119b12821f", 0x63}, {&(0x7f0000000440)="a58df11ab2ef96af0b8124797f4cc5b2e9427ee9abe3d20903fb5232e6dd3abb1179d7ef7a834c94d63a985ee7a46471578ccc9f237325ac69ba6d870abd57481b9a887bf384a7f8e1133bcf65c286e064965253ddaa45e5406fe0e2f9fe9ec02f1f435f0ef82f591ba85df22b654f5a84af29daca", 0x75}, {&(0x7f00000004c0)="1c106062f755226ef4d091ad194aa98901959a1237c84c5e3dd6403da28958a19d0bfa63a1d18fc5580a5d6e0141640fdf5bfefd4dab78131975614ee0de6d66c0cad1c559fa66c91bcecef0994939347850f35dc6a5e8edf9299b1eca4cbce1a60ca9f849caae6bf44db8743691c9ca7eeca631193bd195d2d7e31a88238b4d3ea34c2d2d2461d0a14cd249de375e6fde860f5be3e6596ed516505becca07c78727f9bd06d98160c46b906913f07d081cc79c0cd5e4db323988627f6ba4ef8dab6a0226b641", 0xc6}, {&(0x7f00000005c0)="48faea99edd5d6d1aec73f990b21c349a2508551a9ab86403698d71613f88ae269de0697d1bb2555228b24d197cf013be22c71a6e7a025020d0e2aebebd0cab3386cc90e715d90055e37bc0369ff583ab8a9a2b2d99c5fcd808885f98db2b4ba9ab64d7ff382903834bcac93a3902c5a935200e3eeb6e8bd7f129189f49b9e4a4d5e4558b54334d085398f2d72857070cb98981241a78dd37c3b038721515ca8c9eda85568e353de9450f7b932fb2c1c523416ea5b75e12e627243f2ebee6c03169286012d37a21e013fde9db25df65feb03ac928327074d1c7ab5b0fb65f4eb90c5f062b80af1", 0xe7}, {&(0x7f00000006c0)="05e70e17ef32125fc13068ccea5eeab869c4a0bf4e26f683a9a8b116015278a2b0d6f05c2d997551c78981a1e672e331e6056781c7503bbd0274e859b60865b01824dbc5e2cd61538ae96adabf21a75571010c52e17b12d1a7f5f37b775f9a6cf6ce505c27567fd7903d341ec64b72e642795bb21bf3c3349c2659d17d72084fed477f6d174a0ced93f8c4d8c3001816b5ab3263c04c9ef261f81248d1911b713ef7d84f1f4e74272973257b604530e730e450e17a400278b1e2bccaa8226d8e73ccd3808f32e8069032ae0a805fd9f8f1c848f754377ac036584f6a543d2d60bf", 0xe1}], 0x9, &(0x7f00000034c0)=ANY=[@ANYBLOB="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"], 0x234}, 0x3}, {{&(0x7f0000000a80)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b00)="d5e23c27792f9c62b203a0d2513f40d9", 0x10}, {&(0x7f0000000b40)="fa101fa75ac05b1c188e0d08367abc9ce39f0e2bf583ccfb430d1d7e5547fe", 0x1f}, {&(0x7f0000000b80)="c51a0e1d6bc6477f17289388f89272499533cd19fb896c380eebd69f3e16d15a224272f5039127d5fd10cd0e03a8526f94f95270edb88c724654e8d0d490b81f78f218dbe49f66ff12bac717bb25", 0x4e}, {&(0x7f0000000c00)="2413391d8067e99a1a16a97e4f70367d3b2e636137f9ca8a67531c332cc68b44b16ceb0eebf3f9a86ecd26c7cc5f4beca0c98e76a90c14a6240c016447bde028edcc9d646faf9a80de9a7b11be16fb599ce2e1348a5ec997b31dabf197bd3a0075330beeb8bf688aa3b97d65060113fbb304ef9824c866814f7048ed090c9e94e89927c73f6f27eb31068f5d1c6611b0b51f17f04655edd7cbd5330aa707838ac3cc69f884f0684df6bdc08406f1234acb539e273078ea8c118ab4bbebf05014b4f8ab76f6e3dac3198a407d89bb", 0xce}, {&(0x7f0000000d00)="2cee8c74cfbb485a49a161d474435c94323bd0653e701d0ccd61113d510affa73256460a0e71ef89d71bfff5793637c9a63fca233c4e3701cafb6b7d0ce39fc786eba73cfb27f0a4de203eecec1c56780a75b5321838f202346a4898afb31280a0ced2e18a780c408160657b852163df94e887f47cb20e5e0adb64d37e3727e65b6c264ce713be8420609dea71eaaf568b22543f5f9ac6d6a7", 0x99}, {&(0x7f0000000dc0)="49325a0602f61c869e0afe9f51416c5f88305e761ebd8799186d25e795bc478ae974245f6df62356dfe7c12639752530637d8edeff7b8f2fa120be088ace4dcc98e36efd7a3949c1c935f803b9c069dcc36e8d68aef7a711c5ddc1f055778d6fdbae5fbc60a1f1f3ef8de1d4ef6d7da503ea1adc4c2f8e5ec60ffb22ef9ec15be494eab7548e57e8f44b7954868afef4dc6036f52afe528a182cef44d1d6c7f2", 0xa0}], 0x6, &(0x7f0000000ec0)=[{0xd8, 0x119, 0x3, "8ac38dddc6a2176de0827413750a13c6431c360f470f5fc96d0e07dd071648c01037129b0844ad65f08d865e54d0ccf51155f01e9afe147cbb7888eef48e6dd576c601a4e24c5c3b1f79ec8e36822dd52e9eb00e21ee25ddbaed594d0ae9021af2dbe9ce2c8de4c7f110e210804678cbc6190dcbaa74d12704956793aebe9132e9fa04046b1162f1fdd166d3f15fc65ba14a343c2bbd1970c03305edf939d3dcb47c650b079858a10968f2092a53d8b1801ec76af0bf229158461c7078462c313843819a0d6f97f9e428"}, {0xac, 0x3e658adafa4c56c3, 0x1, "39f33d76e44c9ddad155fa46c9df6f57b6204d134751414236140a90f018262b8a93522fcb75a43d79f98cc1b84357f349f05d08e9ec666e010b084c485c3f3c435b6df644cebd645d68a5f1ab52a3a391043e73454d25221622227464a608ecdfbc369895d0435aa410104a6a55d1c7babb859cc53c2b9038d0e1430e888114e226c7b6e8b626260bf66c8b9c2a776630536f1f7285fdec36843b7499823e"}, {0xfc, 0x3b, 0x522a299a, "0e5465108c8ae346bc1c9b0e4dcd823c92f7be5d231e4ee6b0e4e7bc3f35a526da14a59214736587c0107a99bc1cae3e619f5a9826ef901429f329f3ed7e4f9a4f35414fdfe034dd9e2ec2ee7fcd6a0e32cf04f0077ec048dc01f85d897dee6145929fb5826c18040ba6659fa3c7deac4e6dd1f0690edc7d4945fbf77de7545fa58fda823b64f4a8369493f187fb9d66a31453eae251f777cd3a5d6e88ae5033761c8873eacbbc53cae054fc2901d63f3d5af8205c276791c679a9a1211651c4dcfd17de0ec1b0c1bf882b7ad7028ea8a617aecbc2973e19b3f51bfb5ebf0ab19feef5649ada2bf2c9ec69282d"}, {0x7c, 0x11f, 0x8000, "97d67cdd2fa3fd121c22463d5582984f1d4a2f91018a0fde997a7e72b491926210f2afcf98cd17374ab255d0138512866c4d56934cb8ce92ec627d4f89da0356838b483c2228906b7a366fd78df4b94200b928c46c763ad7b6738ef36ed017bdf284387c7123ccd556db701f0f"}, {0x60, 0x11f, 0x2, "d7e85be105aece7704ef763ae273393055fbc61abee8d7138137e8209eacdc3ad568ccd77221090cfd9cf87bcb436cd236b69eabf96d6504d2b00fc5e9ce185a2e9b354f42f3e04597f47b4534a478a9d3"}], 0x35c}, 0x1000}, {{&(0x7f0000001240)=@generic={0x3, "81b73c8f46e59bf0080cd4ab84a488b4002348a61b4aede34a625bdea9e95727540e1ad8cf764e1b4612b1a09a4daae5e01fe2fc7c84ca0e5f34abb2f38998f992a89a879f0158bc46957a5eb6a902ec6274a61f7b31e37bf3deed32687bf61f7c7f110878cdfa7d0c3eb25ee87a3bbf5f3eca1c0d864aa7be545de7befc"}, 0x80, &(0x7f0000001500)=[{&(0x7f00000012c0)="93a73619d187c66199b94a100adf658a74c1cb742f80f0f4a4c12004f6f5e37836eb84c02049684520f62662528118fdb4ec30165f889d2a738762237feeb3980e832649c386c701d3897a6997564ca4dd303bdb018c00fa8b8c49d42f132728e7cfab967166913202d22401933bd81620a02fb369e4e5541021c2eecff40b9b8670d507cae8cdce02826dea932a08b3d9f5e9f9efdbeb5dcc2352dfe62389d298da92667656342e183273c9ac237e0ff0180cd1473ca339193161c65486023633c05982e1ed6ef65c74b312c37369ab28304618078808", 0xd7}, {&(0x7f00000013c0)="699f1de8c034b0d01b20d9e08eb9192532685f48a9fbe4b4020fcebb668adae6b738382df71546fa3d2a48badb77a425137ef7d73e2f0625a9c128b02040df0c6edca26def583a445a998c66caa24974d5a6177c6131ceca383c8eb335cac26f800165a805a346f00f59a7ca03d3994a1457dcc2ee6dc0d3", 0x78}, {&(0x7f0000001440)="9a3c3a8fc7f74b815448d1dd5aa15fa7d7e3db6aab9b817773a4ecd1934a61e94421019854a90c5c754187e597a41f29a3c7588d4077beb5e9b3f47399f10cf0eb8779aa3c58d5b76a9d2abce5f385f26aa62ec99f5a087d911cf7379cac43753c40024773610ffefb6572f035b0004c8c7047b2c3055e5407b81365abb1c0134bfa48", 0x83}], 0x3}}, {{&(0x7f0000001680)=@xdp={0x2c, 0x1, r7, 0x25}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001700)}, {&(0x7f0000001740)="55e16d062427919d19580ff392cbc44c8a7c668d6a2ebd0d11a071c5cf07", 0x1e}, {&(0x7f0000001780)="bd2a7ff7890e5b3e", 0x8}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="f5a2b804997b8c2c1421b2810978cd3896e9cedc996a478791104ef27f2696e9f72062100210ca61f586825133e9761c07e96ad37d00c06bc889b26ec5de384ec7be827757ab9573ddef4220010a7b9799c89d2fc84da30221fb12b08bfcbf108837186432ec23d0f1f61764bf0cebd6820d9728ca80351bbb2b15cb1b4ed4c72e04c7ab332808cbebfa255bd295f21cc51097e77bb73eaa9c836427266ffffa5c085e1e169619b7febd55fd1210433add47825c9fd7ba9ec6eb34b42d3931905d7586fcbbb81eb933c7e11989d1c504ccf8a1bc42494273f68edca75182dab11967a66764fa2778daa8b32002", 0xed}, {&(0x7f00000028c0)="773288886414c25dab54e5b385b5e88614caae89adc7fbbc97a5d5cc21a50baf76782832c9bd8a95719fe1d68eb5345a85c8b5702ec8cc6c4f281f78a7e8fc2264a0885b73c7b83b5e2860f2ca23cfdeb85ccd89699b41bfcc2033141536bb17ccca830b3a27cf712a37f8a3d085144959106ee47272524c96c74067af1ca84113a39c57114bbea8efd5f2b4d7b33ba778b7511e0719a77182dcaaefe1f97614e00537a729ca17ae16e418f50a690105c16d4097a4a1bf6a163232e5c9a5ca35e7c672014e3b5fd827184dca22b82bbe320d5017a52d6ca95071e9eb54b4a6a056b141625bd9264de0a054ae5466fb7117d0f8d9493b", 0xf6}, {&(0x7f00000029c0)="66f421d7a044c57ad3d26a70885df0f8c67c2d8ef5164120e29282097f75ac874de8dc185855ad536687ea73c9427d2ebbb5723c6426dfa7a667c7232a0084316b6cbea0b1e3abc3025afa98fab421caa44ff22859cee0cfe74a06", 0x5b}, {&(0x7f0000002a40)="ee5fdfb91452f866", 0x8}, {&(0x7f0000002a80)="0bce8d71afca5c0a8d6d11aa23b1ba84ce1c87c753e392ddb8011c9ebeab3327ec074fbafae45de5b9bf8e45059f6275b49f67dcacb42f7127269d4dcf4291e38bcf1fc78570fb344b70cd1a483ed3627c8e52bf3df49e58051aff86009acd5e9d08e548a4e16529e2bee188b6526d002aa5ee710c51cf3e7d0dd60d8fadcbc9361a97db4827d4663c043a297bd5a51d5c748b63a5114805fc26444683c181afb8749088e66cfabf8e1b90d79aa0ced9f2e9018a3f5cae4dc48f3dd2", 0xbc}], 0x9, &(0x7f0000002bc0)=ANY=[@ANYBLOB="2400000000000000ff7f000000000000000000d7a2928375450fd53f440168f3d7000000"], 0x24}, 0x6}], 0x4, 0x80) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000980)={0x1ff, 0x0, 0x80000001, 0x1f, 0x5}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003140)={'vcan0\x00', r7}) recvfrom$packet(r1, &(0x7f0000002f80)=""/92, 0x5c, 0x2, &(0x7f0000003000)={0x11, 0x11, r7, 0x1, 0x0, 0x6, @random="81974392ca75"}, 0x14) 02:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) dup(r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1607.785989] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1607.799193] binder: BINDER_SET_CONTEXT_MGR already set [ 1607.804508] binder: 6131:6132 ioctl 40046207 0 returned -16 02:30:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}) 02:30:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x4c000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x29fd) getsockopt$inet_dccp_int(r1, 0x21, 0x1f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'rose0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x2e, "7a4d7e6764ae4cc9964e58b2dbd45fbab6aa6a2daaa30675e8fb170b9c805f873125bf625abeb8ba77faeb0d893e"}}) [ 1608.030375] binder: BINDER_SET_CONTEXT_MGR already set [ 1608.035748] binder: 6155:6156 ioctl 40046207 0 returned -16 [ 1608.042581] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:08 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f00000000c0)={{0x0, @addr=0x53e000000000000}, "c8b0a0859a37bf7c9cec31ed09dfc487c282698e3e3941b1c6ebb5460b124697", 0x3}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x200010005, 0x0) 02:30:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x60000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9900}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000008900)='/dev/ubi_ctrl\x00', 0x2000, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001600)={0x0, 0x0}, &(0x7f0000001640)=0xc) r5 = getpid() r6 = getpgrp(0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002c80)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004080)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000004180)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000041c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000042c0)=0xe8) fcntl$getownex(r0, 0x10, &(0x7f00000058c0)={0x0, 0x0}) stat(&(0x7f0000005900)='./file0\x00', &(0x7f0000005940)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000008740)={0x0, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008700)='bridge0\x00', 0xffffffffffffffff}, 0x30) r13 = getpgid(0x0) r14 = geteuid() getgroups(0x3, &(0x7f0000008780)=[0xee00, 0x0, 0xee00]) r16 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$netlink(r1, &(0x7f0000008880)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f00000086c0)=[{&(0x7f0000000100)={0x14f8, 0x21, 0x820, 0x70bd28, 0x25dfdbff, "", [@nested={0x16c, 0x4b, [@typed={0x28, 0x6c, @str='cgroup\\vboxnet1vmnet1eth0-^vmnet0!\x00'}, @generic="aa4fad014de2ce26fec549923c3fd8d92aa94c28e0bc50eb6a2c49a492ecc9901a1752740c5797479fe024f924affbd46489ad91c939f37f04d294cfd48f3853051a91705cbb6d11a5aceb6e96399b133228761dc26d6c7c4c6142", @generic="edc1158146cffa8c3bceebc0a0496e7f75bc029bd14acb28977a224c756efe25b90686d6c4f0ac9bd87974162d7a5faeef1a45b84e91f5c661f6b675042217425ddc945d3264786bb49883463e99a176095dd1f1afd11807e39520d68afa8fdda140c029a5a5a78b0ddc1094cb8f0e9ca8e1265c1ae9b84eb7bdf5b98b8616adb65cef87b55c0e0a801ade9a91efad9cffcab38450255be0b4e0c4a857d2", @generic="a8b664aab3443cc67cbfdad02fa81dbd5908cc104662ba0ccfb8c77f38998bbedc28209656d25a8dbe1f9c84d4da6eb9e708d3e694ab", @typed={0x8, 0x47, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x96, @ipv4=@multicast1}]}, @nested={0x78, 0x30, [@generic="8c1953f0f18175aa84c5c8cf837ae242ce924f745da67fc2b6ce02c7e31f1f71cec4bcfedc20b0e79ae11a814955f7ac3024a98fe7b02adc39d9a8b3e415f476b5ac846d527403710909f0b16e80f474d31bba18415383bf87c5a84fbfe3186ef9b40648ffe93a6551542223aa3de6fbca"]}, @generic="9eedf49ac7466709ddb9e07cd46fa9d162e46c57892f1b9e69337d4a510b7c2fe8caec466da9b42b42e4a1fae4b953f8f037ba3afac8f6ace45a971f1dbd1b836cb1fa9e9d33d3c8ccd69fe45a8b6c9faf84742e09f8427a08eb05be6914d53f12196a51636d2961e99998724acf5d125dfdc26d2dd0f7c56e04ce1631132173601859e793b62c5f0c24bc384597ff212526c295c1c31b00b729ba5dadcbf22d1a9acd9d8b4115b439afc386d5ba5c", @typed={0x8, 0x6, @pid=r2}, @nested={0x124, 0xa, [@generic="5cfd9502429a38f546b9589001630cee4797a07aeb213376756cfdcfc2e0e371087c2ec39a53ba1401773b808462dd7829c24a9bbb853079ec9c46f6b355faef92b13674b1e546631fe07df4e75bdb825fc4161b32fe4d50911154df37a061936858c445fd50bfd85e4cae88233a9c5ac3b0cae2e68c5201ab8bcdbae491aefb5f5b4396569f462940afd960a12ff3f6334dc50c9f5de758b0ff6fc2778cd417ca322f9acfc65f6ded443f842b881fe7cf28c6e14ee7c80d84d88a165ca19e", @typed={0x8, 0x77, @pid=r3}, @generic="29f23609f87cd0ebb97fa8f3f6398ace553a312470e5ced4d4d6349760447343e8625a8da03c02b1d4b46411845747b5924ba8c1267aa718ec27a054ce463b34112a7622e713aeaa2923018d7c60df381815246fe6fb45f8e6"]}, @typed={0x14, 0x1, @ipv6=@loopback}, @typed={0x14, 0x84, @ipv6=@mcast2}, @nested={0x1100, 0x3a, [@generic="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", @generic="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"]}]}, 0x14f8}, {&(0x7f0000001680)={0x146c, 0x21, 0x700, 0x70bd29, 0x25dfdbfd, "", [@nested={0x118, 0x78, [@generic="969e681322de3683b8b777b349ff28784a495164f2facd4efd51e23326da3190ae9e27193fbe6dfe72def6f07f1efdad0228b75c188e7e7631cf2433dcf445fbf84d2cbd1038a9a95f291fcc8c6fff574b111f8fbc960bb943d560", @generic="68cf4a51656d446fa07308c8714f429b99249a2d2074baae3de5e39bbde7aa0aee08b91e883fa1bd074e4d08f9700c5d37d0f843cf7feff5da5cd635d979dc23161f44188069880306e4365038c104e0804180", @typed={0x8, 0x16, @ipv4=@local}, @generic="264ab81bc0e86399375f00318239a4eb25c46aecfb48246eb0d8a48b0e6dfc79d3590061d6a31619df4a5bc497d8ea482628c7d1cee26a44198272f875f4ab2007f96f309ed9c28d9978e9c705d62ba074", @generic="11c5cb36483f114a51f5f2"]}, @nested={0x118, 0x5d, [@generic="431dd5f47c8852f944742a7db2ade13943e664873735c0763d88b57d9391b61861840fc04a4cac0f49c044f3449e166346282e439c4a32981d11440d40391d9abb0bbd92ddbd2cdc1c1891b95dbb8b7d3c1601c6dbfc2a0e27cb470d5d26206170d87ad5410e0cc8547d32bee20df3dd970d738ea1c85a9cb57a06c79b2c6def32f8493e68a1fdaf0627645188ceeb2394a90a769644209d4e64ec8cebcfed3b6af4e3ea01a5aea94566366013bb9db117248c7d27deab959299eef7ed08", @typed={0x8, 0xffff, @uid=r4}, @generic="b4d418a36c7b318df9bd165a219d00d166f66741db59d69b16da1a8435c032943f158df79c3c1df49b00464d6cb204a1589a001f3bbb51c64c6dd8f6441ce49f30ea65e0013f62fc22aabd1196"]}, @typed={0x8, 0x2b, @fd=r0}, @generic="5eb260cfed7f44fdaabb5160636fa1788cedaf2592eb5f415f236d4374ed9b6b3104d66c9b8916039853ab0b9b3ac404ee9259439da54178dc815afd55b5d373236ecb1c00fe2691e802d97f4c9765be9fc1571633c034499cfcff1e429ac89390ce0f421fa69a6d19f91d2dbe2dcda5a3b7b9da4c8c4acf27a8b6974558fc9d0989e54f664cb583680c2baa0f4ef585c0f65d9b8a6cf6c52cc7822518d0f2c1bd3d6f4ed6ba", @generic="c73d7f14103a8dd2e13fbc56d1351e44df8da9254be360133d5de934ff2ec7420ddb0f4001ffdeef21bb7bb9aec5659c284b8af015d4a04dcd89a8b8727a4b7bff5229b1949400be16ebc6097404e753f9b556a843b1b681c69a4e0f1e7494d80a0e3e9b9681d4956ac425", @generic="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", @typed={0xc, 0x53, @str='bridge0\x00'}, @nested={0xfc, 0x74, [@generic="4e759c4ed0982d0ede0548b3970e9701f298b218cd058850273038fcc3502cb42bad47dfa17cd91fac0e202f53d4f7ec4f7e3616af4b776b5ff248c50645bc271558b31f6921b1ec18f32887f99a69391ecb52122b6fce8c98fe4d8811c5dbe309e65b65639c6040ff3ea9f24d8f4c3ad6d3cad2566ea83d66451b13d7f4bb6eecb0dca7b2c4683c98eee5aa6443cdfdf28e4007ce1912df93c333362e3469d6c3ceb35f4e2587fb733d516a1d0fb6406634d67bee", @typed={0x8, 0x3, @pid=r5}, @generic="be599b995a4e74e6c3cb38ca72914f9cb5da48bde74f6ea397bc82cff3a1e0c4cac6e4bbb2333fa210979ca724cc483c4f66ac76ccb786fe"]}, @typed={0x8, 0x48, @pid=r6}]}, 0x146c}, {&(0x7f0000002b00)={0x160, 0x38, 0x418, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x150, 0x85, [@typed={0x4, 0x3d}, @generic="9af825f0e9c5027e6490f1c966b83fe32952552f8d8e084799e780f4bcb1df6f0da6ded5dd25241e38c77a92606bf4e53f7185a9d5aa9e037b74", @generic="50d4fb8183ced43c9347621e45a9abb68bad281275c48112e69a66ce8efca2083da02df5158f7aededad9054a6bec7fabe7205f9f0ddac8e64ccd1", @generic="bc9643f4ca9d74df08d5f1f60d3e249ee5cda783a3980e5c324c0d2c429156309cf59b6ed8d706022cdd911f7f211f1560487c046893ef6687ff6dcf01c52d49059442a7484cec99340e918b1d7f4ab44282102c2593baf4f132155f7cef7f32471286ce7b6d4534252f90e9", @generic="5d4b427528643ea4e265a61741f297f28e670c0203a58b0efeaf19bb056dd2329669db0e264e664402eb39334a075479463f3e0307107c57613335", @generic, @typed={0x8, 0x24, @u32=0x1}, @generic="e76e657ba63fa74a9662189031b8f5daf2d77260820471668447f9ef2dc785584ea7"]}]}, 0x160}, {&(0x7f0000002cc0)={0x13bc, 0x1c, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x14, 0x95, [@typed={0x4, 0x91}, @typed={0xc, 0x63, @str='bridge0\x00'}]}, @nested={0x4c, 0x6d, [@typed={0x3c, 0x49, @binary="a33df2e9e696ef11c84db38af6d92ffcdb528e1aeadac550d8ed107b6eaf3a6bbe95bf99c20ed57ba553c8785e99ca1881c03e78f3b2"}, @typed={0xc, 0x71, @str='bridge0\x00'}]}, @typed={0x8, 0x2f, @ipv4=@multicast1}, @generic="08c5441c051e69ac2b8bd3f425d6949effa9aa2871d34a4e16c631d125583072e5cacfc3934cdfd1a8641f18b68c3863a08842faf398a4f6d9adeb8e98f1959cdcec00f69f0494502aa75ac7315f29ef71f2bcdf68635861bf61e0461a7370e77248ac007c6cead8f2ca04bdde98a4d377434dd46a9ff3f06b7c82077b822b84cc4dcb5d727b997f4c9e59ae85cfc2ea33a33b644627030587893ad28d93532c93645d97ce061aeed995522313aba6481743d161aa2c815edbbb98861f81025c60cb6398528164d3839ca11cf37252f098a102d5426bc7783f912158a47d3705f22e355c099fa297ffcc88e477675d2c414dbb19", @typed={0x8, 0x9, @fd=r0}, @typed={0x24, 0x59, @binary="f76ff07ffb28710c2dd70b6ca6681afb8d98216fdb29e1a6f1f7140b0858"}, @nested={0x140, 0x26, [@generic="873d11e707e00e97e9d44ae96f04af4027bdd487c2c718caf63dd71104503e9b81693b686c99f1b9bfc736f2749748ee6613721cc5ceb278b0dd4bf5999613457f57240c3cd1593725d8e2d77e53c92ccbd328c6ae1cd83763f4b8f396fa40f368829f956e86c814007602927e399d7dd659bbfb627b1244ee15589efae8", @generic="33e17332e3f9fe806aa9b2c15b1c250d08f599494f9abde79c70b8af97ff5cf4a9de0ef95bf74c7d3b0145bc76a42f7348b2b096ab822595c0c76608796ea2bbe5f087059a8ade0af3f3d5908323191a8fcb71780896a0641e2a9234bf16112da6d9d0436cabfae6582b244d5fbbf2f6466bb9f2e89e14901e15949f3cb190d619ded385f5ac297b7366ca03d12edc713a88df96c0ab72fddfe79539af116d2211bc4bd69331b3a9ea459d5620555d042e95c73c60bfc84d5ec6df9c9c"]}, @nested={0x10d0, 0x65, [@generic="5c295f2450ff882c5588e56f88796b19794661d1c2acd6b13cb4c9cd00d0a4f38d994488b9ac46ef36b7273df0e7f44f5ea101d538191cdba89685b5d588a04afb64107b9626ac78efc292a254e1edff96c5bc18fd74721c50ca1ce96b69be830d097bf573f57c68a7e0c70e676fa48120bccb3278d03beb68391579c2532bc49f4875bca9be86da29ad3684530a37a7f22d509a796b860afe2718a2c07ef6f6cd119875002a767260601d4dd7f0cc2722a227ba6f85fdda4a8d1b4c951144cafb4650336d", @typed={0x1004, 0x6c, @binary="861da0c986b1fafff0d7d1a672587069b861f62156e28cdb434583b1afd15c51cb2e2cc2036c489154d5822ea4773f6dd193b114249194cd1bfeb3cea65ba5d30729dab09c353706693aec71bab971e870c9b96d1ea54a6f9ec907ab07a512d5f532281baec42119e0e0ef77ee74e25c8c974c08154854deeb8e20476200cb22375d40e3689fa3637dd127e76b852b6040c8c2919041c4228ef5882e11a25fffb9c30072fd9508640230bce13d10faedde1f9d9325ee7432b7fdad272bd2604d13683006a89e1df169d4272ea12e05cc92c3173b599013b4d6a5bc0fb413782d8df62a0641540f23d16aacdd584f1cad42cb51156f6c1f1ba85d7022db13fc19be399e013524f51e44e74877077b7c4637aa36bb5952227207867735c49deba529ce7223c830b3d047ee406a0adaf6a9b1862022096f253a7af2e9124cba0cdfaa8224872e02651ac2c8282e420c26a9a536054ceb2515cdc715ade951a24eaa978136dc7fdbf12002cf7cb0954c4269f64b8f2c4a438b5d799fa93dd6b5537ff995b385be4080a275df99c86a2417917e61bc64346828cfb805b79670e4f145d9862993533d17755f43be552ee146528c5207892baadcf89aba58fad12505494b802073cb3e0a50da4d8262fdb473aa487879ac9ccf4a95e02b67ca82821c0462587f2f39cd022f05a0c2a67b1ed1fc3b9771207937d078cbb231bb45c7f49ecdff97848e40a80a84e173e9e52e3ec0b906ae5babf4aad047f11ecdca11b2233865fad135c4d92d712f9f1af64393e1733a67e824f2a62630a80b8e41fba61dcc53aedb918f6c0085070d35a85efed7dbf0d358f547acc1842fdcb0d6f7c0acc646ff8cfde52406a599bc1f42c10c070c8ea38dbf0cb7346686812b82f29e0d97220d939892d5df32fbcd4db415222413aaaad716520d9ca128ad3f230ff81eba591259996b6e9209a4777150e1cc610e93f448399dacb53f66eec6fa41b73b84b56eb64d4dc3bcd98a31476eb48191e0988836bb201cf6defa94e562c9d6aa07885ce14c3f32c8660813d250aee25ccd25e91071fdf091248eced348da1d8abf3c0a6eb5829bd3a987946fcb3fb4d2bd6b92bc720272600731099ebb457c5229ea0c57f9c8e514a46f20bffccfdd45e74fa054624879afd22e3f532d6f7121d89d40a83c34167890dd8564dd5ea8e9e91e681e48b1ab145df52ae848a578bc1079f1097ceb65f0a9cda7e32b523df757fd0259df1f582c8d1dcf81bc2d6735d67eb16cbd72dcff22a7f08b06799c4f94b7451603becd4fd21b0e1a07c0f5cca73731d8d97b6dd064ca57ef4c49b89e54c0a5fd7eaf3936a7b78dc8149f8c64e3457073242abeae85bb1784123caaad8614e1b8f9d9aa3c5c82c708fcc2337a27931d46763cc392d577c2fe097a5a550bc4ed9049740eeace1e9f83b642f3bce3f6b93c4d887350d4e3e3fdb58f2daaddc7c53618917a368d01826594d0890052ddde5efa7d524cad8a9307532ef0c5cba296a926445ec6400b3aa34218d4409d677fda2265787f5094d4ba72fe6bacb949bdbadf0dace22ac298ca2bd1fc76e880a2f75ef0bb2ff6d1df0f17876531c3bed49dfd27bbade2c89a71f5de76755c52cf371db84dca5c2c37c5c44f0fda703d66d65f63990da72e353286ac9768a34293d6a56fbe5256df51b6790697d0bd7b902720853df100417a2de70df67ee4544da2e2a3b5dfd063d6cf8a20a698f287d32f7fdb5e243407e79a76b14a41d094a87a4bcfb9dd372acf7b1e1fe64624d26b339983d864bb83b7e60d029815ae1d1d87fcb806188e458fef6582a4024fd83ff2daf93eb2b6c2aade3f6ccab25f4c7d1383db4e53c0bf49f01a15626998db149a7f177331464270f6d029d9f74e2783e3e9580dc5ce54de8a512575a1658677f0d712f69d0d1e681c9490892be8c3b8733c7be0556abe31640ae0a4bae17b3d14f9d051c360ff709a5493d98f1ccf16ce65e33c601c02879741d3245dc5fda6318097681ff89b8064353571e778b0e5a30a75db29eb2c9212912f9680860b60db8850841c4880c89a5bf1c3a849af840d128676e7bea725a68024044d7ce7ad2cc23acf42fc9fe493fdf1567d17a4f490a25cda81cb2592ee131200def915aaab38191e8bf94545d73c13ec8e7e56ab44af07533d2f1273042fc6a0edd6541a9c3636efaed01c0ea48ff2e68748bf4b641d99a8c46ece47bc1be91951c6410477ec2d18abd588c745b24e8f89fdb6228ad642a949a909417a702b7ee4bb3bb8cc57f843dbe36dd894cd45e158981fc3c4794b62cb81f11c1dacc13a66f2adf9d005b7b26e57ec24c63593e1f697c0da38924c1cff4ef306c3c94559a431b3793c13c3a97d6c56a6c9af1614c1c444d7c897f816b8b4cc55f263a1e12a31366bc5b0b75706eb83f7bde48da57e012802bfcb447f7bed2790df21c12386671e4c8234ce3359af59191a85f69a61a04b1ecbe40f042c6f3365a8e30ccbc6ba7d7a53f43b6a81af0158199baa7ba3208cec501bf66c746a4afcbeddd4e3a90a0e7dcbcaecf8537eaa405a112645854123f6fd3fec15bf11a6eb98c5368ad90f1befcb407bbdddcb5668bd6d652beae56fbb5046a50b4fd5a503e5659995b45b68e9bc0eaea664cd61ef4e7c09412c02d9c2b5855e11d121735d3d1771483030d8119ebeb7fe198e2bcf5b8976739ab26fc07cac540b722da0dc3edb97fd79d2ab5b594f067e6341bee9d7eca23ca7ccb5966295208978d14ae1f7ee25b77a483c35afdb8d9624d61ce9ea82ecccc9ede9a9a840900cc2c51de7029e884787fa3f3dfc8f1d07df7a5ec2e573fa503f567decb165712e505b36f05beea954605f477d9f624c2ffdc7ef979add54f44377a02185c8d06555ae4214e948312b01af816774a1a013b4f533e457b0a07d2d588e1b905141d4b7fba350c17f1674c16cef4fb9380f2f115ef63ae88a1bb3a17d03ac92281afd89035e447cd06e4325ff901bf369643104951b7c40f95128130a06ad99c362ebd57740651f151df617811d75f9ec740ce1ee3017ec2ffef991f07c3c2e37667c6ce8d5e7eb45a3c83adbb7e6adaac4ffe1faf5e68e8d6b21fa30f436319bf94f276c823959036a87f8e28581ed5ad8fc6ce5a9dfae3dcf7d50990c00aefa3e581715f33995abbd53be77e7baae5ff2ff64aee9e31c957f7fdf47d477d049ac1c56d381218c2acc9f82f2cfbaff750fee9ba70200a071026b19a4360f14977905e4ca1ce1fa3bbf7f2579e265d13c20d751d8a6fff877eeb02d2ab24033b8201b00dc85120519d327e44ba411505e859a831114bdd6b71a78140d8bba34c93c3b9e45c39f1df555e16e1ff756a1cd929cad8a5b78df274b1164b1ebe136ead6d99b4e92d95a15dcfb322288d27786bcb5697fb89b77455aa3383b781ab5e501331e88d9c8dc22bad708ade0487caaf54348c351925551718daea996082d53b614d586fedb4b28221f7c631ab044e0415d1c885bd1b56244978ad2a43b064c6baa1ddf42e6f6208600ae28ababbe66f857e743e54fc30c1f57052e376466036b652c048b28bfb493f9518ba22dc6d6c70f5d15bc590d2f67736c378832501ffe87bfe589faefc5297cb455dae6eba22e9ddc01b40664e708886d0e238ba66249e39c6ec0a89e81bf75aa6c68aed050c000965f9f6a860069137e62375676c18dd6f5ba026fac800c7ad75b8a2a1d81f93a028ddd5d7c72e999590e407d1f7232e74bef9f44c111524cc1e6196082d7fd8acfcf33ea89fb920a53c03d1824b85a74b10dd0791a8db91c0f278b3152c414139115c2c252f7d65c540c5a727097a87f47a607cd63c394968c3fc48a729284baaaf0033fd49d50352a8310b373a6cb17d55dee7be6d3595c19a7489d277b594d984df72f16f41917f12a64dae225e2653fbc2bd09467d55933bd15e50f2b024c6022eb1ab52ad58d2945c2d4c8c025ee7ce04e165d78b75f56f2b9768d281b6b6d69c43837be437916c05588e029fa46b3cf3b49b2223ac7ff54c9d2eb9961ad918652dd3e1d019fbd7fe338f77d6c17d418802b9553a0eb064d1c37cc86b0287df8baa3e0afeb251f0e6b9ec29787dd041f6fd8993bf10f133c7412b9404983c0f1ef98bcafc1807773274d19a3f2fe6755e239035d237755f8d18e77a952dd85c5cba7313505ce299be2c0fa8fffb35954b4e0b8a8d9447b4c63fb3f0234550aa21fe7f4aed5f9487820fb74486b20093cca5e54b1988257b3558839305c35978df865c04176919791c1fd8329ae78d57216d352d0cb22c5d172e185d8692a28914f802105f48403cac64238c53fd8d35efd3642d84a52f143f607b40a1e4277d8b10479a1104132fb2dc0c3f8d3394bb050bb58bebff1a1c16b14eed981e189981efe56d17940f537b92fd556fe8eb11caf1191d116522b60acaa0fbf8dca2c90728e5bfcc70c228f806c57cb0d700e06f2a9690a2ba07af9f45640f13563deb826d4bfa1c45e1e37c71b750223e6f280998d197b256becdf22f89dd9a4895d06bf68396c70a1d98d4f4850047f4897873577283dafdd2ab4c6ff41f3c9024036b23152a2423353bcc9826e72e97f44a9e7e0f847fa96e062d9a2d272d23bef3c265359e7bbec4295cb794093a40d43680713f37a5e86b922c214c1983c3f8d973569cb282c202e1f43e2792d58b0d1305eb244b69c81c3c85438d4bc7feac8d79ed1d4920d75d501f76aad8022f39f665398d7d2fd29e87a99543b1d456c8742df66af71d6b01c069b4e3ad13fc19eb469b3652c2badfe0a1dc85bd8a25eb09c36653c675f4098ed34756a35ae09aa7ba7cf07125b1dfedb060d9573367ad9d33e2a68ad834260d081d5803b37e8321902d8f6fa68c4b3e709b2b4d6afb46c445ed7ab1a1ae2ebd0181a750af078a1dd3254bcda5876eef6c41bce002cfd40512b16261363ceeb96538896c9d1ce21b00e4c6d44b1566fc8ce83c3b7f6a9713341a38fbac8720a07aff245c5703a90d1762ab17c5e11e414244223937029d30e103848f94888219be2bda4c14b96944278ee12a56da86d911a83e5ad826253f01853601ab0e4fae4c4c98040dd89279235f3836c1465282b89309a0ab6ba8197cb13da4d6495bbaa771c7de9951bdf9d1631377b939b828fe82127a3fc6752ed358ab95ab02f77c44d558d9bb076bdaed3783d87b950848ef4e980897725e15b7f207018538e182b9bc90669ac812a298e96e8289e2503cce570af011dc080511859aa703a5efc6c17df08b26561d11c56f0a9c26d4642977b27d902d41d08136c8d5083e67b056f621be6dc713a0433fb942052b4ddc7dfed9379cb2cb0864784ceee31a3cf8d37e34385e69ee82a0bc05b1fb426b4512cff4ccbe94ece40503aaf97211e379f335d7447a3dc08b108853876f7d6733ce89b24b16ec38ccc4773cb9054d8c064371489f6ce2dc60c3ad1119b5bb19046d386973b537bccc54de68fda3f5957fbf4a5cac43e18f92388aabf8e38d41eb87dbf38b4ba2923b31507e15a639cc2bac672614e7f54ce98b09f794155dc73f8ccfc22120d85784d5b80a70b4afd8f517bf9a269a27c168b34f456f36e413c08b180d7e64bd534c30a903e08bed9bb2b9f1b1f42eec2bc74ea047e85d61d3869193572b7ab1116fe0881935708020633770de65d870b7e98b0e273a0aca1e5570b7cf88e1d574a0d425d6341a39414ae49b56dcfb0b45eca89207ac857f656b797ea971a359b0a2d88e36b763a971185"}]}, @typed={0x8, 0x48, @pid=r7}, @typed={0xc, 0x4f, @str='bridge0\x00'}]}, 0x13bc}, {&(0x7f0000004300)={0x154c, 0x37, 0x200, 0x70bd29, 0x25dfdbfe, "", [@nested={0x4, 0x25}, @generic="0c9d3b77970c38513d6c1f37c85e3468eb0733c1f3b8d7c0f6b99a3b63f9ff50bd652b031987c70b0a54d54a570fd0e2a7bfb1040093f13ad657bc967c62ef96ac0b824e03141fb026badbab93ac205dfeae5748cea45704fce77fcefdc07c67b5d1da3cc7b99c595b4b14c042c23e5614a9a974bdd9350695fcb66ec20d6721cec4d181be1a1058869427608d", @typed={0x8, 0x17, @fd=r0}, @nested={0x2f4, 0x89, [@generic="458ce0c898e193b9646eed7135b0e2e2cbea02b5f2c3ce76f34a80976d2684788c2de380daa9009220772bda6a031801f67a706b9e7c90803608e6aea45055713eff00b78da2f623eafd1933c32dc0a98212b31238806c7740bfded5a2aabaa9fe15f2181fe8974291b6aa7ace5cd8eb0fb82a70f071c9937e6b3a3d19f48d6c38eb8f4afcde54bfecd1bd8b1c05d8f6946e5f887041695e40263c96eee190c29f5b448181a9de53d1d0debc5cfaf11128426d77ab1b5fa66fd1c41980875917d6067976bc7aa6b882b8e99f1acad9bb962b565e1422bd750e", @typed={0x8, 0x36, @uid=r8}, @generic="caca2feceb3921ce6fc3c2cd30436c91cabcce376f638c05dae204659cf438fcb2fc5230a9e61fb46167a1083b1e0bf8412e9e5b969575a817cf9430e9b452b6e7efa883aa731ae68ba1a31c55c2aaf8890f536031bbe7adb9b3e2941565d75763f39bb178fd4c4d3b72d9080ac9cf6a0492765ae9032a8d261f39ad039d892f0d994d189a264101ce75fe51379d", @typed={0x8, 0xf, @fd=r0}, @generic="b151538c4f86ad6f0da2c8f898b906d619", @generic="fc419f2d9edb903cc0f18e0328001a776eabb07d5eea5a9872881e6193abe3cb522804a439b021b4494ccfadc66f3057b609b28208a60545cef2425d3760b2e96c1585dfa3bdcc9fc949b7a74d8b01bbf8763c71673febf179478eacb93e5a85ad2177ea8cea99916a9c141bc7ca17c33a8f8a3835ed413dc8cc937e5dc0e709f93e743ba945539093723a9da89d38d57abb4e96c0295a67f66632e0edb67edbb34356c4", @typed={0x8, 0x82, @uid=r9}, @generic="d2e00de629df2e1926758eface98465d4e120dc81088a3195302b987ac9e1c4f84c528839e3e42f748e66aefb32ed5f7feefa0b1a8ed685139b9c93ff34aaf3a83c7a2d0cf89a21acbbae851287e1b3d007e0340854ae5be07801b48e9b1baff615bf82c473284814148d1841dad5ed1943ee153a4af2081375ff8c34e8416a3db6f0e25acdd3c6261a2e5a7a11b48ac3bc176929f5c6269a4fc29cf34e00fc9461a2dc43add03a28afc236559ba2b1cf33c040d71f2a840a38d91"]}, @generic="7bbd4774d84fb81bf85ff7eadc72e3a57f08008b48970a9cb34985ef47a70031aefb8ce1772f549fe183704a8097b80ca67d7242af8e9252fbaefde5c52143f8803c4922ba566fab32a3f7aa30a065f3aa8d0e038af305dd4196bb2eb0ad05c6d974fba9a8a33db89f72ae84ec6dd962850cf8086f9b9e85cae49a653c2c9aacb7e44b5f215c9855a61b33cdcf2e164baea2d6343fa01c1dc414f4d3c4b2219282adb45b68076b127104f7b484b9d218be534d7af51e6e4900fa80927f6f", @generic="68c3a196794ab7e9d993e9b14c4f9d0bc312e912d71d449642387a4bf64b9e5ce8dad99c06ce604ef06ccdfc4346a38bbf47a405875cad6521031ea70730ace330c12dec26c1bb3f78ee6afdc1dafbc82e40501bdd95860d3bbc2e4a8f5c4fba04e7a4491437d3e56bf0d37b4962f8a7ea6cf3216220cde66f2f2a89db1d652e1d68ff2d481ffdef0fcac4afdde47e880b747e10fc933878c621546b18a95e321fc8b748dd8399507b3463cce8828082280bbcd3030b341fd2539b3a6a498da5dcd04d79f32789bfe279783ba3e31a27a22f3e41c7b45949ecb0dffac527a7078183e31b687f4b36ea8982ce924a68efd1c0c223788f0e2cc407b13c3057ee68431976fe945db14049e0ea82339dafd6a25764523f66b20823935c28a496ffd78e8ab5b9e260c05f62fd21cc747567dc5d66de192151b31f55718715e5f400a3ed1a40d14db9e12fa769d4a2c4b48f7e776ea38090d5e23c76d7e62d4b46f19ea39e4f75c7bbd1e96fdea1d6ecaba4fcf5c55d36e9719a3d8a6719a2af2972c2ee059ab75c40246f716b538fe396498221596c0d9f3bc83d929d5b47f49b603ccf7f4dcec8178b976fb0fec74ebd286732aa104f537a37e2d56b7b0acc1a317b0e0a82eb27a2ecb78f1dd433f377ef0a181f7fdc0c462338bdc73f9a7f9c635670c5ea94b173e6fd4097e07f5fb9d13415840ed62046c1e2f1193a2fd45923ddeb7b686561312f81da49f31f1693ddfa604c88129c192895dbae1d171cdf5594220179c0ea950dce3cf1628b3ef045a1aec3ca55d60024d45336c1d3ee06f71490b8cee58434c2b8170af540e7feb354f168105f3f96badbaf3ae9447ca358f74218051ccb48bfbccf5f88327de851b5b18cb026930b511422e92a98228a088cd6ce62640449c08ba957645ce953b53109920b211409a645728f135ac0907979434e4592cf5a7a402cfd9a1d22ef638e7c1f9a2a634e25c7549efa8d239e772c4fd7f425872760a3d3a9e6c46dc4c21be8022be50bf5895ce7baa6b05158a50d73184cc8fb0936320381761c7efd246fcbefd5e627eaebad1e9502f828beebf1fccdcdec5aba973c1655e523b254db4ce8a74e6c70955101d476835d69a339b9cbaec57c3926d90b0e54eac1fa3706f8c46042417544def97e1beb28b2e6f7c62591df33d522360f5ed605541d56f6c9d552db4775926087bfc8462698d566f76d6766a5bdf0d704bc9abd1ce12b79fa4fa66a45837e50e24f2c882dc97cc0e03f67469386536bb41143b69e0e896765f3b5e884b5b86815fc316c4a51e9f6a34c4a6358dbf5384daf4732d80f4f0ef0e8e6cfd668b197f117122be564148e072ccc9561e5353894a6f675e639c79a6cf2ad0edd972164ea0aec4b96eedf86b02182b988252f64fac83a498a469bdac766e025ec03c347c9cf5ec96bb8df39f3ef18bd9efeb3815b5d1d5c51b550261e9c0d1d2066929c6ca8915fb13ee3d0e9566a92760e5d4de11ea9aa77d558ae52d84a8ad2c35d5f96d24dee6a5d5e8d76beaef5f4b45b421e905f9a4be1841a0d4b3368ff7a970428289906d9ad4133e2443db83c78a4133bd0b2e85cb975d0c744f67903bee586b2b3dab1d9fc37bf9cfbc86755da904d8dd3b2b7c71e0e1e6ea40abd1d93ab28bfead316a4a5059ef71dc19a6db87870801ff2725348053ee80b5ca9a3ee96d1e888998cae7b68475009ee039b1e276e6751a045a8ceb5c93f94ddf2296d374a5a7ed08e97714154703b5411122657ad0d416f4934e9a31090432ca4ce91cb75d78adb950a1abf151d16ac73f5467d0473c6697cec5b1c6db613894221ed237bd5fa58ab7ff02d7d75f59033a447c6356f168e56cc7500feb9ec824f9e6b97b9359bc559fbcf7a65216b251286dbf98f6217496a6d6781ce586694951ddea00960b39358c30acd7517db181fc3b911d31a7e0ebcb82e898d1c8993aa29d2caa5e8b154105100f32f9b750a72b32998f195079e9bac10022f83fd3e0adc9ab889cca8bfda6aad15d44400833e923fcabb8796ef2834fb9bcf734af908100019ff2f4866180a29affdab4f72016694c59b8d8245b66ed9f56296f7743386196f0abe93d9ce0e258f9609a6da70797dd9eb5b9d356e9c20d8a7472523d8c6cb8f6da93fadb99a1ee0475ddaa78480c3ca19251fbcb3a55928b0fe04e682dba7dd6e1c85f14fe000e9239a82a9eb275725b821cb6f3fe4478a996f22036dcac6acb0405c622544acfcb0203ba50a75ced092816fe44f9f97a941cc019111154922c35fc1e1b4224ca175bd70233293d15ffc667e0fe50e1430eb1124f8398555567e7cacdebffa9bff73e4861c0ab88620abc4915bcbe5aaae4508e6ffdc3610892ec3e2f508f80b9e79ed32f232be38dcd6192b430bbceec7231f776883b82944f2e4209cc9d5762f7e13b1023581b41454cfe231c3d280fa7741a2c875c04c1a784e67341fb2a598925d5f5eca0d1666fcde704ba0ec1c44fe3b1363f80324a699d62fb4da14a2bed0c409c090913e3b0f8d9bb10102a05cc853b9834a731795b3a1beab6b2f0da179b9ec0781a1031544bfbcca9a1d96c929b87775d2595fa18036f25a06b0269bfbd4c33316942273baf1afa6970fe8bd8df34ce0749c4043a71d5d05ee6a5eacc75778748658934e9689c93dcd103eba588847b3451fb74c35f6be298ed53b91a6e1a2589d804c8ac6940b03ab35fa9ab85f66d6ba75504055468aeb579a5f10d0b02df985b82fa0eb460d4d637079d9f6df82c710105f413d8aac8307158963defe38962b3dcafd5f71f2dd54f85f044b07a75b2c084b5afc0624f282c3c6b096ec4b147c9f593daf7fec02e130b4d51c8f9c693a64c69f33a59d4bb54d02f188febf52f638cddf2d2fc657e9d5af72321abd11d090ab3e6b58f3b4bc2bb29d0818c5bbe9de39b22336e7741944256f38702e208d9b110dd3d8988bd9c0ad2dd2d093e8ee4f334afd1e6b61f72689cde321f89cfae2248f1df99f6840b5f0301a679ad16138665a68c7da10aa48930faacb3dfb502d36016a1b7b181ecdfa6254db3232da9d456f6e0165fd0ed55fd400c8e40f22642dfccb23f630475732abbaf305704b8946e3c1c52bda8aee44a1dcd2413e0fcfdbf3ffad28c16faf11ef966703b45be1705ba7bb9991921b46747503f6711c8194487a0b4fb2d8eff7d2e8d224b113b328f61f8e61efd72c720bb87cec274b8c2888009275f5fbecce2dc34e82ce2872419db85ee9a807a4152511ff66420b207cc0c44ecb902d5f052e86e31df39385a4ff0e4d8ab7863d2529deaae13a7c35f9b1008a6a0626bfddb7cd97cef82ea3020deb44243977f504ab68e6348beb13f5cc212cd245759ae55a91ece2882e391d341db9aaa16be112b983d4ebe54578cd1afc27734540b7ea0cc897d3bf9c53427bc126e61536b496231acb50048c393fc5a6605c6bae34715aa9c4fcfba445d7e7ee7ac98e3f3014bf9e06d4790c8ccded001eca1a44e99a0cf95446c897a21d717dc8ebf5d2ae696977dd1a49d4132ea65166e52866cdacec55175b94f2690c5add850efae8d389af314ea8df2764f37e3da979b98a373c42bce67572df7b2c14cf0ddfd96574c6c50d451692df87b37e2765e2f0bd9007f42349969280d51edc31b62b20888c6451352d3e49fcdedfa10632400c7b4cedbb1629bf5ddad572a931ed8d4c36db95f9466a01095df54335b3888fda8779e78ca927382bc3b9f323fce784bc1b250c17744ffeb218d978898d116d66cc1d7e1bd1488fd4c37e2af050e39b8d8a6627227df7b7605aad6016535ab2bfd6e3e169f3adb33f54bf843ce311c153923801547ba161f7ddc9d5f5e08ee20a4330602e2639d835b173e736b5db2f7463d7f845d8364f97f5cda3878df8e109c3cc10be45aa10f5e619829ca7b664f3fec6a2adb43a277ef81f65d77ed4b656511a7e44a337bff4686d47b543688303a7cfd91914fe258441bb6e2cc1f7cf4f8976645d2c10f9717450e35b3ac1f7740b03057df71abbb313141e99e7816904107f5e4c235ade52fd25d5fe2f68221739ed58a63802510aea035d733ba7e2893905085847c9382a7c9e92fc949d31967e9c9ff98c106a434b407ab771c778b11c205392fb92439138bdd986d717c8f4a4f2465dc5b2830c0abd302b7bbbe9c14c671df4ba4bf0e6045cbb4b5a779329b5da8e4a4f27399f524a8ba569b65737ee789293405e2a8f31fbfdf2ae8a304deb56e9e302121e1dae7f8de35d2820702b4de4c1dcabf6ecea374864ae730e17be59ef2b8a95ae9c2f25de28fd042212286f204b71b136ccc3d00654514762f68766d91d4a77b0cb80355b48d40e82c8ec42dcd26d5bc6bc275f2cebf5aceca1fdf3e0db3a4759ce85a2f635c220e95d42b7f05a9453afad1c1f6ffc1ef67b51d79a2e909bcc3906b7f0a312a8a921ad4f7530158cad75318616172c811b8047feffca169d5d5b18b22f1db961768def268690c34323a3ea196a1cac6d9de8003d807289c03adc3f6f185edfb81723434192ad5c87850f5de17d6661180907209ce160645ebc554ddb47916fd4e9511aa39d6738728853fd58456d888ded72735cfb8f07e33e104269a9848b031cf1fc6b6a71ba2c92e6e29bd86fdec7f8b5aad6537061b8940c509a4b4d9bbf6033e4fba0c2e3d83dd4035cb362c23abf58b44b2ac49cedd2a8139598c5e7e33451a626e894005623ad623f676b10230482e59fe587b409bdf3bc89cae7b9e4d6b6af6d0eb125864b3c40e7073f9eeb2613e723e465a495bcd2a7cd82f6edd0d44dcd6b56ded2c85ac0a173fea6e77a2bacc97c288e4414b132b7ecf443d923506a09be625cf72697cfd068958b587a58eb99f32c0388defed7b6ff3803042dd6a1f8809ccd95e39f8dd96445178d47da2f5c309a38e55fd890f9613ff0a208fa924025a53aa82e97e6d1ec6e43250c057fd0b74396f449dccc9e3dd3fcdf50059f8f94af8e8b9927d049ff422f5ba2cb1196efb1c7376daf9ef19fcc03eb99b0b90211f4472bada87a10ac5697a813528ae8bf8aea120b11dd264de759cb7892f6462cddbe04fa1762d90f938b747213823dfc0fcc971274405be2cd4bc9394374ae3383a6645fffaaddf3d12f962df3ee74095d393bbb34e76b65c6303da20e393c564430d655cb889678d4d7483433cad43345732949782641d7cf477af5fdf4990b58fbfca0db6e591619e0388610f267fc9f3e973e806554735fca4d7864b62d51e38798dc8dacf4d66e3422fba9277992af2d68621ca544ca0857bf3668877ed261afc593d50a1610786c72bd89429040f0bbd80689b098010928a59c9af5a6564806d918ecc7e5095a7f6a7d3806dc0f06384ec6766640615e22e873c60e52289c0e4ebd7c0d806f062e1cf4a1d156e37259a6e702f656583ec66c91656d2e8526c35c9a5e0e366bbb70e7b9eb055241bce4a1430b5acc82941e8e916410eda76ecaf829f957dc3451ab12c1eeee4b01a3e55ef86c504529416deef660d7ea15cc4111799038431fc8886bfcfac384661ae11da9fedf1d2e3ebbba7c86daf1bdc846ca4cf7db66a943e06a7f77e3947f930d04ba9397f724fdd2c40f3cc06076adc4c4e27bc04d5cb3feb6738c4bda12b6871c54af357a77cc5b05f7487793cf7081f5c322be194370efd2ebe33204a761a5c476c58cf60b545190c2279200f29ce7e270d65a192e8c62a3fe8834e8d359d1e5d7efa2c61e0d5fac411f308679dc9b1ced53", @nested={0x8, 0x2f, [@typed={0x4, 0x5d}]}, @generic="f7fc1d1b873ecdd4e2c49c64d372113525721c1b0c3966fd4c09689bc0ec587a9902cf487ec913555a0eb2f0c159a2faff9f6fa537a8c8ebf6a8383c45c37bf0004049ce9207737cfd9bc1ea804181499774ffde4c2356b6852b789300fdf241f061241fdb350cd8eeb1b9b32dcefec3d700895f593f8d52bd33f40c19aef326161825f76d0464718bc85494ffb7feb1cabeafe980f9cae626138df0a1c5adc8a21e428ddde8dc45ad4e4e149039c11cabd94299cb6ee96496e88aebe4cfdf7d3e5da35d469fe51fa20feb8dd8a1b58f8e9f30342662d52bcd78f9dada07b4b686", @typed={0x8, 0x5c, @ipv4=@multicast2}]}, 0x154c}, {&(0x7f0000005880)={0x18, 0x3d, 0xb00, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x33, @str='\x00'}]}, 0x18}, {&(0x7f00000059c0)={0x408, 0x2f, 0x1, 0x70bd25, 0x25dfdbfd, "", [@generic="b8319a638868f5229caebd63b4b6495afcd75431e694d2d47399f0b694fdcad53b612d7be6afb0cfbe375c78aa328d22419b5f4dec034482ad46c663e78fd85a82d0484491deec6b45cb8289529669860fdf06ce079c3f27bafd84f0d954aa9acd36428a608fe8c696ffc16210310d05ee9cf8ec9b88312fbdff6036dcc7fa73eb0a09911613b3d9731f0ce6c24a4f0ddac8f46a5cb373fcd16aa818d937dc43a0e2af9c146115053c64f516a12223878076af4e6653", @nested={0x184, 0x72, [@typed={0xbc, 0x5f, @binary="9c0820f7adda8bc2af2306044fc95746609cdbcf286fdb39bc958d525a0abecf9a66f86c0794614e8f4089a24f8be53f5ecd239bc76a14063513372879ae663b560c6145fbd92fa49b5d05aba8e1831e1ce5b12b2409baa40d6bb8c88bcef28e212e8468df8f719f349f8d1bd422ebd94396dfa87e968bdc5b4ca5669d4652f5c490763ce9e70d7291a2e78cde8bdaeb022a513e8c12bf4c24ca49f89d7f71898f8b635651455bb7b7840ca9265dc6754be4b9c7b7397e"}, @typed={0x4, 0x23}, @generic="ab2d9e37d790daebb363d3784b7315078302e6e1a25e82c98b22c9d7ac7d4ac2a59734e2679ac62cd3b525e5eee087483615711774fb2ef6ad0bca305e22a2564caa5a2092e9bf78d5aacd820bf2848d956576a77f038443ad6cb58cff81fb72385b68115d4a1de0fa3af3f5fc3c2339808d3c2897f43f281ae5d7edd1510714fbbd44618b7ccfebaf56ac398f9ff95fceb667c76da826a1497da934601615b20c368c0acdc5cfea7386e8b0331dea3ecb7cb3a0a206", @typed={0x8, 0x6, @str='\x00'}]}, @generic, @nested={0x114, 0x67, [@generic="18a7d51a0adcae7a39984eb6e09b9889e9137d0b5e1bcc1019613f24882e2b8da789339d33bd79e49423eef61646eaf9d5dece89f9235f25d81a40c3251b0f387c75e3c9b67c46307ee55ccbe1dc9c166308b5e93f9daa8489a6b9b10127e590dbdabf42f6838cc2d27687f51fee8d36d20e5db3fd2c5db3ad6c000d261d164257b3ec36a59c99ecf4b6b344554292675e59e104327681141714cd66365e3f131a0a", @typed={0x8, 0x75, @pid=r10}, @generic="656d5c1d4b7a4f63", @generic="6b035879371f66f2b45a864cd4eb91668bce72f8eff9", @generic="10303f858e45f322971f20d9a942204ea99f257fa01a0cf32a4555d18d81f9ae30d75e96c32c54712c7cb9895779d87c65ffbba32246b305dbc5b3bd3198567dffe205a4532e"]}, @nested={0x10, 0x2e, [@typed={0x4, 0x72}, @typed={0x8, 0x94, @uid=r11}, @generic]}, @generic, @nested={0x24, 0x2b, [@generic="1c810fae096eef5b6387d3fee1dc1d1b0d18311d07526c4148925fccec1de053"]}, @typed={0x74, 0x25, @binary="043c9075bfb191890143c1dcc944e18f8a7c119150fcc06d0226595cc5944e40fc3f86fc02a4deefc04ab1f903d748fd72a0eceb33d842441eea1d6896c02b0fb285bde030132f9ebb40edd09c0db4aca855c3d14ee1ece8fea7df14e2396239e68e53b5a55cae1dddc80ba377e1f7"}]}, 0x408}, {&(0x7f0000005e00)={0x28b8, 0x41, 0x111, 0x70bd26, 0x25dfdbff, "", [@generic="6868df03b2681c5e5f895a8a0d21ad0267fd3bdbcdb694159411dbe038c54504bd5e6fa74f6eaeaecb343950cd7e2e0660497b45ca1550f94dbbfdd3cb846a4ee0d4ec221e576a82f3b11ac3802822a7040e41b96b38f049a2f7d96ee093321aaeec367d4d3dba4b33df13ca7b3092896502757626147187a8d0fdea87f8fe60f09b97ccd24c275ed01545bac45840f857c1cee21d38e403f673289d042a3bdd31808b4a97a0c271968adfb10840682478ae064eca3a3ed8ab9e68cf89c2afb21b94de7f30abe15d0413f4c0a0e34ef15cbe4398a02d53e9717c4193433d1905d5cabd707b8314264ab692ebfc7c11ccd81d7944a5cd3ce978939d4b", @generic="6b71d3dd1382ba454f9b46e669749138663388cfd2b80dee68334a1bc015dc94a6f2608d1921dde7d49b2356ce02d0e565de66a090f6f80ed42e6c4e4544f8c384d8eecb75f3fbedae8f11e85144f70123d8374dc49f8457262616f7cec85cedd66536a697376a1af6eef625d0ee15661d046d8b710d11ca2208d00ceff33ce99a69cac04e2ff4b207641da62e14", @nested={0x12d4, 0x90, [@generic="c053d28faed40078de50f1cb4253f251d6b070030b18fa4c8da47cb5a814ded8d27211d42c8604cce625a90bf71500b757d8d3c5532571cd266781746cbe2648f4834b1df4df41597eb09ac687b0ae06cb818f83c3150879a8ac31c6340e2a21ff905d9d68fd00b160be628feba48039bfacfdec8f6f9c85037bcec2a816eca9fb9211c9540ab51574b8d05fed034b6cac54a7a32f494c4e0eabf6e9e88a4c7c1aac1f6f85e680f202d8ac80c5e77a3c4890e82c6131f48f523a40f333d908e31a763232f46a8cb73b002cbbe3b6af80a005ef765e55d3a011734dcc80ae07c9d65e95331a237b7415dbe0bb", @typed={0xc, 0x1f, @u64=0x8000}, @generic="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", @generic="e7ccb3dfc1c4e912e81f3a2a3cbd223aa7b5b218974b59ca8a298a0835a2b0e6355f5f31c511c07713ad873fc6092f7ca43ad8b4e977f84f9707dd24", @generic="d24ffd0ae75de438c4edadaf51d356c084b2f45406cd29208db0ee233ad4b07e45579966b1620464a32f9e25c3e7415ed14d6eb03ab54f4ea7f495ec51a83f1b0db2b4c87c32653b0eafcf8f2fe344fdc716455fdb277710d8d709c506f9a579e753bfdb278a5a6b24f13058b1db1703fcf9b4e119a30d0db2", @typed={0x8, 0x89, @ipv4=@multicast1}, @generic="6724b2484c5e53546d615ee80cc9d2e3ed64e834fb3b94c7a8da91d8c159612e905e2fa73f5aeb5f3d37", @typed={0x8, 0x6a, @ipv4=@multicast2}, @generic="8d8778ae706fbe6963d381d47ef345bc39080b4f330e5da54f6561ee2a9a288ad733fcef87acdf2ddbf21358124f8344f3084583aaeeacb63000444953dca95944ff0542032b6cc47c89611bb91149e8346199d96a8792dbcbd1c6360b77195da98e6d30d0e418a3e28b32d936e26a96f3638cf7c03c331687702772abfbf3279f7285b4b014b68b6c64861995b6c3520d6675f04b4c9baa59e698aef6a574a0013971220ae38de6e438c68c9fe886fa7d83e990925976700a66a344f55414738b376e09f690575ccd8bee78ff8f562eddc58c785f0e25ef006787f5512cd068a7577f97727a7acc48"]}, @generic="2fd74a0339968a60e7d9e7d24f65aee83e389b8d7b04a568cfe8da5a13900c4a511b86526a6d6aaeeea77c17199d55cc1e3420f5e43c20dd611b7721bb4ae79ce842755b3d64f28270778b120d1a539bf37088ddb81baf633eed11d49c238b69c0a7f25119bef428f00743ea7a734dc4043b4d7d78e59e80a61e6754a0b4e4af5546a2551acbc815e682fcafef3c55bc02c1eaa038a349c2", @nested={0x4, 0x83}, @nested={0x104, 0x50, [@generic="65b3", @typed={0x8, 0x1, @str='+\x00'}, @generic="48f7c1be24165fe95b0f04c5767ac2235aabfcc84129f80bd9746e09d2e31a18fcb4ea08bb78a7ca0dab1b32e30eebe0ff6ef8d23f2d288a57553c7537c4e15cb3ada51f96ddd155a14459cd9fa2f5dd44a9b37edd20c300722cbb8a9f1897e976a57e019e1cb0027e672142e7d99b5e1a276d53de0e12d1e43ccbe5a12a71898e5742242ca633ff6486a37fe3d87d0a1e36cf3cb3dbd1a61c703cc293f6ded0c614985b8ab86f932a155334fe065f917fd9916c6497ae70a7bdfb47cbb749f887858434d28f03c3b6ba01a30e497dd07a8917bb50c1c5afd7a10294670c8605dea87e26f4b003d69efa6c913c17c88c7fb93610f255"]}, @nested={0x11b8, 0xa, [@generic="755a61a34c8131ffcb56c8b6fd7503", @typed={0x14, 0x18, @ipv6=@loopback}, @generic="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", @generic="1efd9fcb1e", @typed={0x14, 0x69, @ipv6=@dev={0xfe, 0x80, [], 0x29}}, @generic="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", @generic="1b8b84fc1e7c1f16f0523e3c9ef5d7884d8cc79a2c1c386ea5b47ccc8825a0c95b1661b07dafce4ccdf31995300779e4da051640a6420b9d9eb4c2b897b6381c03f508014c672536d5b2ce6ff06a2a306f88b3d8fc9e6131a32033f3a9bc27903d2c8545fd107b3807bda0e3680f5a47b91bb31bc86b3d2fb9bb0cbd"]}, @generic="5c8ca9dbe9b0a25af870381f8fdf55fb3c38e26d09e7972ef11fdac8eb4ffbbd86f90738f5a1d95e4b2f5cc52d8937e578fccb2eede558c98f40cbb5954802cc849f8cacd42e9ce733fa964e84619a60b8a87a024fc355a52456f07c84366be66693b3cd1109c6dd9a00a1ba6dcc1d0679bc6a0df7b03290a1c2638c39bf7cc4d40e81191fefc693732877ad1b0f37869bc56a3b6318f3b61ecbc0c13c5f8c102d2e59f2252ef171c6ce3d80952fac66a3982e464bd5b1e13015146270c3e56b966c0ef94cdfd16045f1d29b9c08f7b44b612964b2cc880c1f587ba2f218ed03334f4379844108fcef5dcc613b01d42633da"]}, 0x28b8}], 0x8, &(0x7f00000087c0)=[@rights={0x14, 0x1, 0x1, [r0, r12]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r13, r14, r15}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r16, r0, r0, r0, r0]}, @rights={0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}], 0xb0, 0x10}, 0x4008004) 02:30:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000100)=""/2, 0x2}], 0x2, &(0x7f0000000380)=""/172, 0xac}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f00000005c0)=""/144, 0x90}, {&(0x7f0000000680)=""/111, 0x6f}], 0x5}, 0x101}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/251, 0xfb}], 0x1, &(0x7f0000000880)=""/144, 0x90}, 0x2}, {{&(0x7f0000000940)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/204, 0xcc}, {&(0x7f0000000ac0)=""/201, 0xc9}, {&(0x7f0000000bc0)=""/220, 0xdc}, {&(0x7f0000000cc0)=""/17, 0x11}, {&(0x7f0000000d00)=""/68, 0x44}], 0x5, &(0x7f0000000dc0)=""/233, 0xe9}, 0xffffffffffff0001}], 0x4, 0x2000, &(0x7f0000000f40)={0x77359400}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffd, 0x44980) ioctl$CAPI_SET_FLAGS(r4, 0x80044324, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1608.686583] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1608.700986] binder: BINDER_SET_CONTEXT_MGR already set [ 1608.706659] binder: 6270:6271 ioctl 40046207 0 returned -16 02:30:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:08 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0xfffffffffffffffc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000340)) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000300)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xc6, "07741e018f2e8c163c73cfd7e526832feb9ffc7197b840e7f07551c016dda5a17a76a1a3d998ea60a29e824a3bfd74fd3de0ad22facd88d9231fe7e8a449cccc578ea3e1f30a78f96b01a02dc3158fe8440c126f61a19357c266aae42dcfbd564ea1c28a639292f09292de3048bb203578755a2c71240806b3798e8c3971f5ac1bf6b618a79e7154d9fc046fb4732470fbcdb02972988acce7bdc561fead342d6ee0b96821503076872a2dada25e132a1adef7cae1ce2efec17b2bde7bdbc5c3a6961bb0239c"}, &(0x7f00000001c0)=0xce) ioctl$KDMKTONE(r2, 0x4b30, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x90800, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000280)="2f41d6ba98121330afce7e6efe4968f44dc501e1ffc286b6d13fbfa7e3f0085854bd65855ba1b0dbb9bc6fc0095a") getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r3, 0x5, 0x8ada}, &(0x7f0000000240)=0xc) 02:30:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xba23}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x68000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:08 executing program 2: r0 = socket$inet6(0xa, 0x804, 0x0) ioctl$void(r0, 0x5450) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x3, 0x3f}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0xffffffffffff525c, 0x5, 0x8, 0x2, 0x8, 0xee, 0x40}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}) [ 1608.898329] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1608.936565] binder: BINDER_SET_CONTEXT_MGR already set [ 1608.960899] binder: 6296:6297 ioctl 40046207 0 returned -16 02:30:09 executing program 0: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000900)=ANY=[]) getpid() r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000640)={0x8001, 0x100}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) socket$xdp(0x2c, 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000580)) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x4e22, @multicast1}, 0x200, 0x7, 0x3, 0x0, 0x0, &(0x7f00000000c0)='bridge_slave_1\x00', 0x2, 0x7, 0xceb}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ubi_ctrl\x00', 0x482, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x7) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000340)=""/60) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 02:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x6c000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9, 0x3, 0x0, 0xffffffffffffff81, 0x4], 0x5, 0x2, 0x8, 0x1, 0x2604, 0x8, {0x1, 0x5, 0x9, 0x5, 0x4, 0x80, 0xfffffffffffffffe, 0xbe, 0x100, 0x0, 0x7, 0xf5e, 0x2, 0x5, "db9f85179da56026449f4f137d4a5c153220e4ce89a4117b1b6b3b642ab5f370"}}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1609.588255] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1609.608850] binder: BINDER_SET_CONTEXT_MGR already set 02:30:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1609.637141] binder: 6422:6424 ioctl 40046207 0 returned -16 02:30:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="80000000f21f0001000000ffffffff000000"]}) 02:30:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x74000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1609.796125] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x5, 0xfff}, 'port0\x00', 0x10, 0x80000, 0x8, 0x8, 0x401, 0x800000000000000, 0xffffffff, 0x0, 0x6, 0x1}) [ 1609.864869] binder: BINDER_SET_CONTEXT_MGR already set [ 1609.877205] binder: 6445:6447 ioctl 40046207 0 returned -16 02:30:09 executing program 0: 02:30:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x7a000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1200000000000000001012080000000002000000000000b9000000000000000000000000"]}) 02:30:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x01\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1610.163955] binder: BINDER_SET_CONTEXT_MGR already set [ 1610.185230] binder: 6488:6490 ioctl 40046207 0 returned -16 02:30:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000002c0)="195dd13129cdebef50c5a898acc8c137cfe3fb33fe3ac1cf37fa588e400c476523c4b5bdf438bf545d60f491644fcfe388d386a727e688721855f59fe06dc4daf2651b161c264fa07aec0ec76644b12a9b67bc2f4d91592552daf7ff846e0b87e41a9f90daa9d02a946ee341586359c1c20ba710329df08c116eac2158d03a7cdb763270b69d492762a6553ecf82d6a7fc456dece41f1362029d827540415e022d539b39b97d827d75bc09009b42b5bde7eddfb3b0f80ff26c2e1a7e634470c18c352bf687aae3680e36fd36e6eea962115b3cfdc2e0a206c411a369c93b5aa1221dafb550a2b658e028a47086983f89cada4579f03f1aef3956cbd6580fe8b68f12d4523ec2de88caaff8de8a19bf6c723cd0ae487c48fc00533fac404c5620503558f8d7cee653780c730542a49122220475325b13748067163e128e025e5ddb751a064f4fe35c623c4823148b2c7fd6e3c6a564db3d6c1144f0b99b9301805ea6260f585db8149a3c314970009aa3348ed7b5b2ef2dc85141f090f75e70bfec3fa4c6208155b6cb89ede9a14a942e619155cd744331a8cd851c13d13b73853a72171d69e307e1a51f34c5e0bebe15782e04f9c64b9cb72c3c68d5421bf5c14285c4e09e093746f7bf03769f1b1c0a412c9e0d22b17de992b0a02239fe02940f2e06d1a35c3c3276573ab94d7d115efe2a943f21c112634169c50984d5b9a6b6bee041d70b95aae3e6df9dc796a294ffe62c8e260af7ab1b577888006719f97d212e15d8ec9431868bd1925684b352eb3feca5382cdfd328ef90d3230a760efd0f6a1065faf7e1a5f8b1edecbb0418025bc0d33f084d2a3b575e9868483a45dda815ef734fca8e31b9dc9d815dcbd16459d924491a2cef0ff3cb7155b865bd67ea4bcbed72448b2845d255e0c642f89272e7ccada9f46d0cc128cd56652487947da871f4c4e3ac95db4c835882660fecf6a165afc2085abc9d1fb934ec45a23018bedea396753026107dc0389bdcb7cce995f77e8e9648b5a3e05b46da98f881749d54aa6cd8df90e8ee6fa410a6feda7c1bebf1b7bf3ed0f8cd7afbab803fb19a644dbca33f87204b6a614c3992a09495719139e7fe01d9fe6543e137582fc92bddb339097306e1198e5e77a9ca2b55b91ef0f57af3594329f59bcdb026d6709af43d47ef84bffbcd5f166b639441e843885a4f7fe9313771cf09fdd471932bd7aeff951e9017d93335e8b228b4ad82ae565d6cbc4bcbe171651de9d87e1c07bc52b1f32f6da4fc82f80d16e7da87c1dd1da7df61f2aba2675861573e241d6dac79371b900556aa55e43d5982e5fb6a5a230c4c3230f4f18595e8175a03c4b51205f9c268d6a396ede690b9ce907a3007cd70cdd15ec77216a1741ea95ac9f770b0b678d44562d2a28c82a6db08f98ad6411297dc14a665adfbc0ab1895e070f19984cef998645d04beae39b9c1f86db5942b98585b6bc38820ac7c41fad42658760f9a712df5c1dc74055ffe42995b6839ff64b6f205b6813bc75d793dd9595c8bc14c31ac69b17de34318df0e250104d916ff5a52c629c1d7e3eb240a4affc9846066e42acc17170e96a0a069717a5765d4098dc9ac6f52bc3550cb2131ceb0c32e4a00eed257b303bba29d2b695cf4628addd20395938c551c178cf5d7962ced82a1d64298a35355441c5b5726792e7fb93f69bb40ad08ee4c8594c8c3a4804a975c17c062adcd221745e22c671e8e374f14ee57e696615f3c481e8cf7657cd2bbe3115c870d456b813b61a1ec3cde3d5d5f6c415223fa70e3e8cb629c77324736d67b89a981b2305443112782d611564846d75355017dbdf29b7f5cf1102c9337c10e89827c4148594759f9c7bebc50f59e30bae298a238bbdff7f7c30df8bce46b3d9683eea5f1dfd70378175575477d780c707c627ef8deee981ebfbf655296b93ee172119322231d7ec59ee0705abe4764e603ca7c5af0cdf8cf339d570b9fdd7c93aac5fdb033df1af676ebeca1b9a83e5a31fc4c4ed16cc8749b035031aa796292fe63f3a2c07faccdde1a1e873d018a077a09735d52198eef82fe272d15d7d0819574e3f1a0753a414b71fadeb653a8e2a1d413eb0cefc3ff3424703f2a7f819354688e6f752322a64ed58224b21dd5bcfeef65a6c3c05f7e0f99b51558ee64c2eca70837ca66cdc6cdf79b3f946807707a2f169a47ae46d5dd95dc0b19b01d7ae943e70d77c12bf98cf8de9d610820d6fb991db66702a222f0386e72c8c9e4928c852524de96e7f181994f0a54c180e3fc30ea659cf86de4e809eff916761170ce81202d3198af918c755390eaee15a9a5fa313f9f641753ecf75780f52f7559a7df3f81baef10922a9bd6577055d082492c00c40ead1cf350d277aeeeeb55a80caee08f66b17bed75a0dc663104cb28bcbf3ad68ee58af7cca79f7eed212b571f911709fdf282ff6ad963fc37a2a07cf0e73018426b966b10fb342929b7417a3954d8ce8daa1b2c5b2886fa1dfd821727e0bdab870218fa3c7ac304c588606d605144aac31e1786f73e196e55c2a9a56ff59555bc5e2e906b4d41329bab286a1d48512ee02adbadf46ccc2c1f080803114ba32355964e235f09cb99807264a8e340049ff1c8a48e5fce75ccd1340b36b686f6080ca9f98469b4e186e1cf4a2965ae613ea8ad1fefbbfa603840eec967714b3f13c8b0f4a1a2b8088b52f9789726e7438a87f95edf11a8474c1e26ea58f24918fa61b1e6d3a02358bac3adec5371ee1ee09c12253449c51af427fa5bd20a8aa7be7effcf3baddbf272206fe53e3950e25df30dab28d73d025dc652072f229cec08d7f6c2b69cc1e403d9b4354b41ee9764f85c620d57fd9dedd16711727786a3a93b561eb72fab5a3073808f817a1a837e2b33cff6155b0200065090da76d4af97c4520e99841f6b2f4625443e1a52e736caf79f7a02652cf786438dca3e31335e1ea3290fd264abf7aca19b5c6ca0ba1847783c9cf8e12d7eb7562f639849e7c85f5146b42814e4ceba36f7f7debebec06fd970c67c04f375efe940c4587c49a8edee83fd84970579e95e68b3ab5958b6d5f4aa819a8056699373cf7430449daa8c291c4e17801a101503b976dd176df69149a2676cf02dac7c4391e8845b53bad809f60e3d38bf306a396a29532bb8d9572e915cb0016bdd6135188b396b8f81c20b60971f2fbef78d3bacaf0e611ea6f7e788ec5173195558a9377f7842b3a612144fb3e0ceab8bd8270f1d215716095ab64493570c128b343fa94c41b4f11164b52b9c9eb4daef2231a8b06c8eddac8947527872e81ba3d1e6a134254a6b29a26062af76368e55afc7bec71f1600c10939cf8438585fc9f42fb9c23d2a4b421a60727917bbe5f30717c390b5dcf3abe776d83ef24183399064dc66ed74147b1e9e6adb14bd378e2017535e0caaaa29d3c89c786950c42581f26279fe4e7dae4d2317098b661ad6dcf81cb3b535e38f7231b87b1d8d4cec4520396ffdd42079a08ace0c1b4d760f7cc66df696e599fc68f8f8b1089d70ff1e34a1dc75933f818a4bd03315b88cbed6dacd3f727cf5177b20eb723f677bdd1d78939ef8275b7f57deba2810a92edc0245fda86d96224fb837489879fac2d38534f91aa8c81694092af1f16e4a7f32fa1a7ee39c2412e41f0fdd03daa012a0422960ca4c5897b4a24cfdee3a57ebf5570732e323bdae6385046ebaad132460bcc03a364dc2c03b1727f1ff309389d24a84b034dcc0a87675ea5788d419bcec4497f23a646473b8fdf50f5c5e5e70c95ed4a3f6b9d4aade72be186c4140b5bdd2aee2928f4009c8ccfcd86fdc154770c71d4ece1ab966c4268ac010ebb8e4d22c0b5cb4fc9cfd42e0b8e5e08f015b07233c18172ebb948f5311504a100fc365f8bc8ac573e08e86ebecf57d490e17595e87e74c36cd4a147534cd6ab46b212032a64efd8310268240976e02f35a7790e0d6ee71b6651decc8fa4526193d56aa20942d8203c151fb58ae4686d1382b2d0df05d4d4561a26dc39a86a1f2da27e16813a6b74e2ca6d4f07fa6fd329898a0dceed96f2b6afe8e9b2a384e6253ac449f8e86aa25d664c178d5b84e88589efd87ccde5b8d63cc1bf15bbb480c431fbd12f3d0f2e8ced20c2ba087f53dae09de1dec485ec94110fdff4f6d8245790142b00009c94125fd4c3fd56e8ea3cf956484917602a98f0112019c8110c73bde3c9f80e08cf865fb81259903d8ccd1acebe9f09c1191f048e4b9b9f7d822133beb6bffa3058c4336b32ebeed6407479ee47d4b1a97701d09614f87645ecd0e33984bc001e69bb37c97388c3e58d0cf41fd194e590332669f98b4f9128c8f4046bcb11946ec46d7dfbe7696066174904cd2708d8bc4689dbdb9f351604e2442384a61afccd3e084e22cb993ce9b5a7f99febb35531834444321f4dbf2e665ad76b5186f8dd19787ea566c555349f8902faf899d37f44147251cf9c16e31494b2c233181e68724a4f8d646e34d2a938c7619d890d76c16fab3f11c09a36296504f4c087eb794b660f6b349fc3ea8d9316f594ae2e32c86f0898351ae8f1ba1c8305225bfc7c4c46aca183af29cb2a3500e29c050b4bd4ca1db716c7c22d8f288bdf083db2a017605a846d9c815553693dc9ac00ef65cd93621a872462a2ea5bd04719360deaad779e5d65e27f64173157efab69a8f1ba00278a221f89d2911b5a16e09750356a030a9805199d9a18dea476af9c93175a8db6732cfc7e0177038f6448ffb53fea4f623a8a6e9ceaa5c3b9b96d149fc03a02a98576186fe82077ca0cba40933d6295ac784b863dee640dd3e568c07e14337b474b251b27c6d864e3a5044b71f3ab592427ecb3f473f6a74793a138fcf2be9c612bc71cd853f05bb6ede2d7e482598bccfa370c206d5fa2ef02b3ae1eee3ffb5ee91de824ba0fb86750ee8d08d0802ebb1015909fc18743fc5b81e041b55279186bc74f53ba9f5c20e201d91429d8b1ead0712f3725f87fc66dbddcb3af4438603a796474b5bcf38d68c9ac9d73781d783617de1d4cefe3a21890209628839d88ce772e037be7c52521e7b962787819b849d3c25d169fbbda08b5ea6879546e81462394871fcb4c9d6b3699ccebdb8de8e95f0bd2ce85e0f1c7390aa93c31cad5873300a489cb890d4e757d33097b61dc2d1e49fdfce524879b91afe0d653dc8f37b7dcaef6e268799ef70d3f3271b1673eb495714f1fdd321aaddcf7b87d7724c36d02c8d6c81a2bfdbe9e062afafcbf3cb4f3f69dfbf9eb92a1480977c6adcddc47f63a86c8371e4099bc7b2856ae90b5be732cb43312b35ffab1fc4cf502807aac2c73a4663a163f739048c3ffa2068cc9fc120cf366cdce7b1f4fd59983e0fc910b55508afd6486e599460f054393a4da4d5ef258c3e91206f7ef65e270a5bd40f0dfd75962e8c4748cacd27f204f1c6da0f92db0f8b7c136f2f5373285d0df01a5efec3f1b8ae246789a7fd9aef2eee2b4f9ea88f916396c260f8a8f4da8701db1bebd1a66380afd46f546a3d0284b79a274cbbb2378b8a82e6efd09a2fbfe4c981c9f084f3b6832f1d54ad96e7484415576c7d596ef193b8a1489b02824843b22a6f8529f318b1a631ce1f7efb1af21f9ed6eaa71d399124e6e403da482254524dc2705b606a5e334757c0d6316095285e49e849c1c770107c0be93adf9c5c0e639f52926b7b79b6ca5a7a6193a7d3e90a07a4bbdcdc7786082f75060cdcd99a2501258aa44a0a66f91a961567e1808c178b5036", 0x1000, 0xfffffffffffffffb) r2 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000012c0)="f949d80cb4dd0c2572b55ce6aa4b6320f5b878c066bc16b8889e1eac99a4b1ccde92d6641fe48cbe85c057938cefa17deb849d97c53676aa6de0651dfe6099977a80773b05e3b0eae90cc7ec82b936f78e43c9e9f797d2e5c90e04550620a96e706c1ecdfc099beac4ae247f152ab6b39b95aa4a828d8753204630225b2f875f007a91183900", 0x86, 0xfffffffffffffffe) keyctl$negate(0xd, r1, 0x4, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000001380)) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:30:10 executing program 0: 02:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000000101208002fec000200300000000000000000000000000000000000"]}) 02:30:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0xfdfdffff, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1610.409196] binder: BINDER_SET_CONTEXT_MGR already set [ 1610.434106] binder: 6577:6579 ioctl 40046207 0 returned -16 02:30:10 executing program 0: 02:30:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8121000, 0x0, 0x2}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x10001, 0x4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x5, 0x90, 0x6, 0x5, 0x1, 0x7, 0x3, 0xd126, 0xfff, 0x200, 0x100000001, 0xfffffffffffeffff, 0x8e, 0x40, 0x400, 0x1, 0x7, 0x2, 0x1f, 0x1, 0x8, 0x0, 0x2, 0x2, 0x2, 0x4, 0xff89, 0x5, 0x8abc, 0x0, 0xfffffffffffffe01, 0x0, @perf_config_ext={0x7ff, 0x100000000}, 0x10, 0xff, 0x7, 0x0, 0x0, 0x200, 0x3}, r1, 0x8, r2, 0x8) 02:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1610.479185] binder: 6577:6581 Acquire 1 refcount change on invalid ref 0 ret -22 02:30:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1610.519464] binder: 6577:6581 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:30:10 executing program 0: 02:30:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bbidge0\x00\x06\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000065000000e5dfea9ec05480989be2c524947f7022b534b21836f0a886b3741807b14324cff5612a0d63b894d92f8b3ec90c4443d5c4c6589626bfc6e4c605e04f29e50a4a7a523bef72b46c36a0c3dd806a099894e9a00d1b372ad5bc88a9561f61731d78c342"]}) 02:30:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40186417, &(0x7f0000000100)={0x9, 0xdeca, 0x7, 0x0, 0x9, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = dup3(r2, r1, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f00000002c0)={0x6, 0x275, 0x100000000, 0x397, [], [], [], 0x1, 0x1, 0x0, 0x1, "08c6ec214f92d124beea3b9a269b37ab"}) personality(0x400000f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20101, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000040)=0x5, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) 02:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0xfffffdfd, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:10 executing program 0: 02:30:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="35000000000000001000000092f641971a2ba427aed84d73c7a29f91b3bc1a798d1d8e9e256569437c7930f8f3ada85c2ad807e4716571d139ab8de1e55af1b2709af34e83aba8e8678e1fcb6da66ceaf8815e29ac1e0101000003ff00000ffbff01e9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000460d0100050000000000000069b5000000000000ffff7fff00000000"]}) [ 1610.965022] binder: BINDER_SET_CONTEXT_MGR already set [ 1610.981705] binder: 6708:6709 ioctl 40046207 0 returned -16 02:30:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12101208000000000200000000000000000000000000000000000000"]}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101400, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) 02:30:10 executing program 0: 02:30:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x100000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1611.168949] binder: BINDER_SET_CONTEXT_MGR already set [ 1611.180959] binder: 6723:6730 ioctl 40046207 0 returned -16 [ 1611.219191] net_ratelimit: 14 callbacks suppressed [ 1611.219200] protocol 88fb is buggy, dev hsr_slave_0 [ 1611.229274] protocol 88fb is buggy, dev hsr_slave_1 [ 1611.234439] protocol 88fb is buggy, dev hsr_slave_0 [ 1611.239545] protocol 88fb is buggy, dev hsr_slave_1 [ 1611.379272] protocol 88fb is buggy, dev hsr_slave_0 [ 1611.384411] protocol 88fb is buggy, dev hsr_slave_1 02:30:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000040)=0x8005) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x100) ioctl$RTC_AIE_ON(r3, 0x7001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x7, [{0x0, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:30:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:11 executing program 0: 02:30:11 executing program 2: 02:30:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x200000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:11 executing program 0: 02:30:11 executing program 2: [ 1611.539023] binder: BINDER_SET_CONTEXT_MGR already set [ 1611.550090] validate_nla: 7 callbacks suppressed [ 1611.550102] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1611.573113] binder: 6841:6847 ioctl 40046207 0 returned -16 02:30:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1030000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1611.605657] binder: 6841:6850 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1611.619175] protocol 88fb is buggy, dev hsr_slave_0 [ 1611.624275] protocol 88fb is buggy, dev hsr_slave_1 02:30:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:11 executing program 2: [ 1611.659561] binder: 6841:6850 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1611.690634] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:11 executing program 0: 02:30:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x300000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:12 executing program 2: 02:30:12 executing program 0: 02:30:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)={0xdb0, 0x1, {0x0, 0x1, 0x9, 0x2, 0x3f}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1000000000080, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001b, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:30:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\xff\xff\xff\xc3\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\xff\xff\xfd\xfd\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1612.202800] binder: BINDER_SET_CONTEXT_MGR already set 02:30:12 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) 02:30:12 executing program 0: unshare(0x6c060000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00\x06\x00\x00\x00\x01\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, &(0x7f0000000140)=0x54) write$input_event(0xffffffffffffffff, 0x0, 0x0) [ 1612.234971] binder: 6976:6977 ioctl 40046207 0 returned -16 [ 1612.261708] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x400000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:12 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) [ 1612.529989] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1612.551897] binder: BINDER_SET_CONTEXT_MGR already set [ 1612.557429] binder: 7001:7008 ioctl 40046207 0 returned -16 [ 1612.578145] IPVS: ftp: loaded support on port[0] = 21 02:30:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\xff\xff\xff\xfe\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x500000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:12 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) [ 1612.742915] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1612.776538] binder: BINDER_SET_CONTEXT_MGR already set [ 1612.808611] binder: 7052:7053 ioctl 40046207 0 returned -16 02:30:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x1b) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200840, 0x0) sendto$rxrpc(r4, &(0x7f00000002c0)="1b38c181f15c23f13dc4f7e7c0f57f031fa79c529f515165db9aac1170312ad70d30416a425d97ef2c353bb2ff435478481663b1e86b8d9e8eaf81c0cfbfbe7eecb68dcac3d06b86147928eaa4eb16251cdc334024e2500c04881db6e7c4e2be8ea4ff1f12e28aeac5b3629e106acd2cab13f860066210704ce6b8fbd719037cf8e9b3a221565eb727283cf1", 0x8c, 0x4000, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @rand_addr="195eb25e81666f500ea76d2c0886e928", 0xff5e}}, 0x24) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x2) 02:30:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\xfd\xfd\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:12 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) 02:30:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x600000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:13 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) [ 1613.099307] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1613.102465] binder: BINDER_SET_CONTEXT_MGR already set [ 1613.128790] dlm: non-version read from control device 0 [ 1613.140733] binder: 7119:7121 ioctl 40046207 0 returned -16 02:30:13 executing program 2: clock_getres(0x0, 0x0) 02:30:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\xc3\xff\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x700000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:13 executing program 0: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000800)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000007c0)={0x4, 0x80000001, 0x1}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20040000, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) wait4(r2, &(0x7f00000002c0), 0x0, 0x0) ioprio_get$pid(0x0, 0x0) setpriority(0x0, r2, 0x10000) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100), 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000005c0)={'L+', 0x10001}, 0x28, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x2) setxattr$security_capability(0x0, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000780)=@v2={0x2000000, [{}, {0x2}]}, 0x14, 0x1) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 02:30:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1613.299191] protocol 88fb is buggy, dev hsr_slave_0 [ 1613.304318] protocol 88fb is buggy, dev hsr_slave_1 [ 1613.371689] binder: BINDER_SET_CONTEXT_MGR already set 02:30:13 executing program 2: clock_getres(0x0, 0x0) [ 1613.394376] binder: 7145:7148 ioctl 40046207 0 returned -16 [ 1613.403076] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x109400, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:30:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\xfe\xff\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x2000000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:13 executing program 2: clock_getres(0x0, 0x0) 02:30:13 executing program 0: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000800)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000007c0)={0x4, 0x80000001, 0x1}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20040000, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) wait4(r2, &(0x7f00000002c0), 0x0, 0x0) ioprio_get$pid(0x0, 0x0) setpriority(0x0, r2, 0x10000) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100), 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000005c0)={'L+', 0x10001}, 0x28, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x2) setxattr$security_capability(0x0, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000780)=@v2={0x2000000, [{}, {0x2}]}, 0x14, 0x1) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 02:30:13 executing program 2: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/ip_vs\x00') ioctl$BLKPG(r1, 0x1269, &(0x7f0000000840)={0x5, 0x7, 0xd, &(0x7f0000000800)="6a973c8d0f32b279b9b8eab5b3"}) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) munmap(&(0x7f0000552000/0x4000)=nil, 0x4000) fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, 0x0) ioprio_get$uid(0x3, r3) lgetxattr(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12639baca7b076ec654d25150fa5f5a4eea6dc7445166a2d0701a52e388b43d0c40e5065650a96d5d0a7"], 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r4, &(0x7f0000000080), 0xfffffe5e) read(r2, 0x0, 0x0) fdatasync(r4) ioctl$UI_DEV_CREATE(r4, 0x5501) 02:30:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1613.805571] binder: BINDER_SET_CONTEXT_MGR already set [ 1613.813913] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1613.839332] binder: 7270:7271 ioctl 40046207 0 returned -16 02:30:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x3f00000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1614.058745] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1614.077958] binder: BINDER_SET_CONTEXT_MGR already set 02:30:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1614.114409] binder: 7289:7291 ioctl 40046207 0 returned -16 [ 1614.258345] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = getpgid(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/tcp6\x00') mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000040)={0x1, "e1a13589c45642a2eeb125f3ff7f37f79c8e8454b13298f41a2526e6b401b47d", 0x3, 0x1}) 02:30:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x4800000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r2, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) getuid() lstat(0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000000010120800000000020000000000000000000000000000000000000019fde84685b4ecc0c2cab506b767967335e49ace94eba35a68f0213d4caffcceb6d11ea10e041b3fd9278700000000000000b5aa55610185bf94d293c813de6e33bc3a4dd2df3e668036cfca0c23863d9e307ded7c92aa1c94c768b67e9e622c7d2201f162f14c8e250e727dbcad78bbf8784dddd874f9"]}) 02:30:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:14 executing program 2 (fault-call:0 fault-nth:0): clock_getres(0xf380ebf78eaf5710, 0x0) 02:30:14 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) 02:30:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1614.780835] binder: BINDER_SET_CONTEXT_MGR already set [ 1614.786234] binder: 7415:7416 ioctl 40046207 0 returned -16 02:30:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x4c00000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:14 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x4, 0x103, 0x7, {0x8, 0x6, 0xc8}}) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x8, "cfe3a5a410263987f74d7c696f172db7c71db7b3d6d3a40d0c26c86771cfc199", 0x0, 0x322, 0x0, 0x6, 0x0, 0x1, 0x2, 0xa5d}) clock_getres(0xf380ebf78eaf5710, 0x0) [ 1615.090674] binder: BINDER_SET_CONTEXT_MGR already set [ 1615.096018] binder: 7434:7437 ioctl 40046207 0 returned -16 02:30:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:30:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r2, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) getuid() lstat(0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000000010120800000000020000000000000000000000000000000000000019fde84685b4ecc0c2cab506b767967335e49ace94eba35a68f0213d4caffcceb6d11ea10e041b3fd9278700000000000000b5aa55610185bf94d293c813de6e33bc3a4dd2df3e668036cfca0c23863d9e307ded7c92aa1c94c768b67e9e622c7d2201f162f14c8e250e727dbcad78bbf8784dddd874f9"]}) 02:30:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x6000000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:15 executing program 2: clock_getres(0x4, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000040)='/\x00', 0x2, 0x1) 02:30:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1615.921349] binder: BINDER_SET_CONTEXT_MGR already set 02:30:15 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x400, 0x400000) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000005c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000640)={{0xa, 0x7, 0xfffffffffffffff9, 0x7ff, 'syz0\x00', 0x4}, 0x1, 0x33, 0x100000001, r1, 0x5, 0x0, 'syz1\x00', &(0x7f0000000600)=['*\xfd%nodev\x9cwlan1\'E[&securitykeyring\x00', 'syz1\x00', 'syz1\x00', 'syz1\x00', '-:^^}}selfbdev\x00'], 0x40, [], [0xfffffffffffffffa, 0x4, 0xec9e, 0x3]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc2c45512, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffc0, 0x3, 'syz1\x00', 0x80}, 0x1, [0xffffffff, 0x2, 0x7, 0x7, 0xfffffffffffffffc, 0x5, 0x5, 0x4, 0x79, 0x6, 0xff, 0x80000000, 0x3f, 0x20d, 0x2, 0x7fff, 0x2, 0x0, 0x4, 0x69, 0x67f6, 0x4, 0x80, 0x2, 0x4, 0xfffffffffffffff9, 0x100, 0xbd, 0x1000, 0x3ff, 0x8, 0x5, 0x6, 0x6, 0x4, 0x4, 0x0, 0x3, 0x8, 0x2, 0x2, 0x5, 0x153b, 0x7, 0x2, 0x80000000, 0x0, 0xa8, 0x7, 0x40, 0x5, 0x6, 0xa59beb1, 0x8, 0x74f, 0x5, 0x400, 0x7, 0x9, 0x1, 0x9, 0x20, 0x1, 0x2, 0x45, 0x41, 0x6, 0x6, 0x7fff, 0x1c, 0x1, 0x400, 0x5, 0x4, 0x401, 0x1, 0x2, 0x29, 0x8, 0x2, 0x40, 0x6, 0x8, 0x7, 0xffffffffffffffff, 0x3b, 0x1, 0xb140, 0x4, 0x0, 0x8000, 0x800, 0x7, 0x4, 0x401, 0x4, 0x2, 0x80000000, 0x8, 0xfffffffffffffeff, 0x7, 0xfffffffffffffffe, 0x80000001, 0x400, 0xe0, 0x2, 0x6, 0xffe0000000000000, 0x5, 0xffff, 0x0, 0x1a, 0xc0d, 0x7, 0x9, 0xff, 0x3, 0x3d, 0xffffffffffffff00, 0xdef, 0x80, 0x6, 0x4, 0x401, 0x9, 0x10000, 0x0, 0x78e1], {0x77359400}}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f00000003c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x10) clock_getres(0xf380ebf78eaf5710, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80785659, &(0x7f0000000340)={0x0, @src_change}) 02:30:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\xff\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1615.966642] binder: 7568:7570 ioctl 40046207 0 returned -16 02:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x6800000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x40010000) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)=0x0) r5 = gettid() kcmp(r4, r5, 0x4, r2, r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x3, 0x0, 0x8000, 0x100000001, 0x7}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000380)={r6, 0x58, "43eefeebc2a337f2501ffd840f1746f63e11ed8efad25828a26088b66f2e4563ca6fd15a7d25425915b2c95d41e969a50faf81adc7ba5b801cfca73248edc8676f87e8793aca3ba467824ffd7f211185a9feb687ba6fc170"}, &(0x7f0000000200)=0x60) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 02:30:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:16 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40a000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@loopback, @empty, 0x0}, &(0x7f00000001c0)=0xc) connect$packet(r0, &(0x7f0000000200)={0x11, 0x7, r1, 0x1, 0x9}, 0x14) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) 02:30:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r2, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) getuid() lstat(0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000000000010120800000000020000000000000000000000000000000000000019fde84685b4ecc0c2cab506b767967335e49ace94eba35a68f0213d4caffcceb6d11ea10e041b3fd9278700000000000000b5aa55610185bf94d293c813de6e33bc3a4dd2df3e668036cfca0c23863d9e307ded7c92aa1c94c768b67e9e622c7d2201f162f14c8e250e727dbcad78bbf8784dddd874f9"]}) 02:30:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x6c00000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:16 executing program 2: clock_getres(0xf380ebf78eaf5714, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 02:30:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\xff\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1617.030697] binder: BINDER_SET_CONTEXT_MGR already set 02:30:17 executing program 2: clock_getres(0x200b, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x100000001, @loopback, 0x8}, r1}}, 0x30) [ 1617.054774] binder: 7757:7758 ioctl 40046207 0 returned -16 [ 1617.062405] validate_nla: 6 callbacks suppressed [ 1617.062417] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\xff\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x7400000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 1617.277179] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1617.316676] binder: BINDER_SET_CONTEXT_MGR already set [ 1617.353615] binder: 7798:7799 ioctl 40046207 0 returned -16 [ 1617.459170] net_ratelimit: 14 callbacks suppressed [ 1617.459178] protocol 88fb is buggy, dev hsr_slave_0 [ 1617.469310] protocol 88fb is buggy, dev hsr_slave_1 [ 1617.474459] protocol 88fb is buggy, dev hsr_slave_0 [ 1617.479561] protocol 88fb is buggy, dev hsr_slave_1 [ 1617.619162] protocol 88fb is buggy, dev hsr_slave_0 [ 1617.624355] protocol 88fb is buggy, dev hsr_slave_1 02:30:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000002c0)=""/209) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000480)={0x3, 0x1, @raw_data=[0xfffffffffffffeff, 0x2, 0x101, 0x4a, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0xffffffffffffff47, 0x7, 0xe, 0x0, 0xb27, 0xc18c, 0x2]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl(r2, 0x1, &(0x7f00000003c0)="5a9df2a428e1cb9c7a60777bdd688c9c0341440d6bd02b900e8aada5446ac4d8f0e3a4855cef838742b52acd789e443e03b94c428b2b3621303bb574efe8e8eb2ef82a2ff1743c01414dc11b288464130f99ce0c8c1e28da431d04d97d0336bea99b7ac79424d9aa5e4ffa6a1164fbd609257e0c22ce0f2cf3e46458f64eb156a40986cc53c4dadb985d72df409824d5a01f") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) 02:30:17 executing program 2: r0 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)=')-\x00', 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$negate(0xd, r0, 0x2, r1) clock_getres(0xf380ebf78eaf5710, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101001, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x2, 0xffffffffffffffe1}) 02:30:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1617.755699] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1617.859244] protocol 88fb is buggy, dev hsr_slave_0 [ 1617.864443] protocol 88fb is buggy, dev hsr_slave_1 [ 1619.539237] protocol 88fb is buggy, dev hsr_slave_0 [ 1619.544393] protocol 88fb is buggy, dev hsr_slave_1 02:30:20 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) getuid() lstat(0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x7a00000000000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:20 executing program 2: clock_getres(0xf380ebf78eaf5713, 0x0) 02:30:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:30:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:20 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x2b) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x4, 0x401, 0x7ff, 0x100}]}, 0x8) [ 1620.193942] binder: BINDER_SET_CONTEXT_MGR already set [ 1620.207270] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1620.226990] binder: 7993:7995 ioctl 40046207 0 returned -16 02:30:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0xfdfdffff00000000, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) 02:30:20 executing program 2: clock_getres(0x400000000000089, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4080, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x60) [ 1620.409536] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1620.447396] binder: BINDER_SET_CONTEXT_MGR already set 02:30:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1620.477069] binder: 8012:8013 ioctl 40046207 0 returned -16 02:30:23 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) getuid() lstat(0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x630b}], 0x0, 0x0, 0x0}) 02:30:23 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000000000)=']-:\x00', 0xffffffffffffffff}, 0x30) r2 = open(&(0x7f0000000100)='./file0\x00', 0x100, 0x180) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x8, 0x8, 0x9, 0x2, 0x81, 0x6b308479, 0x2, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000280)={r3, 0x1000}, 0x8) connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @rand_addr="60bfc2515a2dff9e20dc9d9fa97a0bd2", 0x7fff}}, 0x24) sched_setparam(r0, &(0x7f0000000080)=0xdeb) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) 02:30:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2000) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x2b, "bf58b93242600d34152dfb2d0cb5e87c20e468d1c0447c064757b8841d39661ddb555e9f0e88c84f8c136a"}, &(0x7f0000000080)=0x4f) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:30:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:23 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0xfc1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2d, r1}) [ 1623.307226] binder: 8034:8036 ERROR: BC_REGISTER_LOOPER called without request [ 1623.314973] binder: 8034:8036 unknown command 0 [ 1623.322498] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1623.337759] binder: 8034:8036 ioctl c0306201 20008fd0 returned -22 [ 1623.376487] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1623.420797] binder: BINDER_SET_CONTEXT_MGR already set [ 1623.426114] binder: 8034:8036 ioctl 40046207 0 returned -16 02:30:23 executing program 2: clock_getres(0xff7fffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cg\x80our.stat\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x8, @time={0x77359400}, 0x800, {0x8000}, 0x9, 0x3, 0x200}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x600200, 0x0) 02:30:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1623.516528] binder: 8034:8057 ERROR: BC_REGISTER_LOOPER called without request [ 1623.589762] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1623.617340] binder: 8034:8057 unknown command 0 02:30:23 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) clock_gettime(0x5, &(0x7f0000000000)) [ 1623.645372] binder: 8034:8057 ioctl c0306201 20008fd0 returned -22 [ 1623.699202] net_ratelimit: 14 callbacks suppressed [ 1623.699211] protocol 88fb is buggy, dev hsr_slave_0 [ 1623.709728] protocol 88fb is buggy, dev hsr_slave_1 [ 1623.714884] protocol 88fb is buggy, dev hsr_slave_0 [ 1623.720022] protocol 88fb is buggy, dev hsr_slave_1 [ 1623.859191] protocol 88fb is buggy, dev hsr_slave_0 [ 1623.864340] protocol 88fb is buggy, dev hsr_slave_1 [ 1624.099214] protocol 88fb is buggy, dev hsr_slave_0 [ 1624.104337] protocol 88fb is buggy, dev hsr_slave_1 [ 1625.779192] protocol 88fb is buggy, dev hsr_slave_0 [ 1625.784292] protocol 88fb is buggy, dev hsr_slave_1 02:30:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x630c}], 0x0, 0x0, 0x0}) 02:30:26 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) 02:30:26 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) getuid() lstat(0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000001, 0x3fb]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8001, 0xa8081) r4 = getgid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x101, 0x2001) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f00000002c0)={{0x8, 0x5, 0xf3cc, 0x401, 'syz1\x00', 0x2}, 0x5, 0x20, 0x8001, r6, 0x0, 0x6, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x1f, 0x1159, 0xfce]}) [ 1626.415085] binder: 8172:8173 unknown command 0 [ 1626.432119] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1626.436165] binder: 8172:8173 ioctl c0306201 20008fd0 returned -22 02:30:26 executing program 2: clock_getres(0x5, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$TUNDETACHFILTER(r0, 0x400854d6, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000040)={0x9, @sliced={0x1f, [0x3, 0x1, 0x7, 0x4, 0x5, 0x7, 0x5b, 0xff, 0x6, 0x7c6, 0x1, 0x6ea7, 0x400, 0x4, 0x1ff, 0x8, 0x0, 0x9987, 0x3, 0x0, 0x40, 0x2, 0x3, 0x3, 0x7, 0xb, 0x3ff, 0x8000, 0x100, 0xf1e, 0xad4, 0xfffffffffffffeff, 0x7f, 0x0, 0x4, 0x1, 0x1, 0x100000000, 0x10000, 0xffffffffffffffff, 0x8, 0x2, 0x0, 0x5, 0x7, 0x0, 0x100000001, 0x6], 0xe3}}) [ 1626.464596] binder: BINDER_SET_CONTEXT_MGR already set 02:30:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1626.503739] binder: 8172:8173 ioctl 40046207 0 returned -16 02:30:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1626.550234] binder: 8172:8173 unknown command 0 [ 1626.554998] binder: 8172:8173 ioctl c0306201 20008fd0 returned -22 02:30:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x630d}], 0x0, 0x0, 0x0}) 02:30:26 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x10000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000100)={'broute\x00', 0x0, 0x4, 0x72, [], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=""/114}, &(0x7f0000000180)=0x50) clock_getres(0xf380ebf78eab5710, 0x0) 02:30:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x01\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1626.701568] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1626.724204] binder: 8198:8199 unknown command 0 [ 1626.758443] binder: 8198:8199 ioctl c0306201 20008fd0 returned -22 [ 1626.817817] binder: BINDER_SET_CONTEXT_MGR already set 02:30:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1626.861552] binder: 8198:8199 ioctl 40046207 0 returned -16 02:30:26 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') bind$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0xfffffecd) 02:30:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40046302}], 0x0, 0x0, 0x0}) [ 1627.086501] binder: BC_ACQUIRE_RESULT not supported [ 1627.102539] binder: 8247:8249 ioctl c0306201 20008fd0 returned -22 [ 1627.122117] binder: BINDER_SET_CONTEXT_MGR already set [ 1627.127441] binder: 8247:8249 ioctl 40046207 0 returned -16 [ 1627.152787] binder: BC_ACQUIRE_RESULT not supported [ 1627.170387] binder: 8247:8258 ioctl c0306201 20008fd0 returned -22 02:30:27 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) getuid() lstat(0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:27 executing program 2: clock_getres(0x4, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000180)=0x1, 0x4) connect$rds(r0, &(0x7f0000000100)={0x2, 0x4000000004e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 02:30:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1005000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="6800a51084aee194099fe1bf84c2690000039ef6b477eb1eeeb74944d2f8679d0bd6cb6cf68ff5d013b1c052e88cc55abe1bdfb7801df0a3967576954880b8835bc8f791", @ANYRES16=r4, @ANYBLOB="000726bd7000ffdbdf25010000000000000009410000004c0018000009bd6962000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x25}, 0x1, 0x0, 0x0, 0x8005}, 0xc040) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x9, 0x0, 0x100, 0x2}, &(0x7f00000003c0)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000400)={r5, 0x10000, 0x30}, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0185648, &(0x7f00000004c0)={0xa30000, 0x200, 0x6, [], &(0x7f0000000480)={0x9b091d, 0x101, [], @string=&(0x7f0000000440)=0xfffffffffffffff9}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40046304}], 0x0, 0x0, 0x0}) 02:30:27 executing program 2: clock_getres(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1) [ 1627.396735] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1627.410646] binder: BINDER_SET_CONTEXT_MGR already set [ 1627.424637] binder: 8330:8332 ioctl 40046207 0 returned -16 02:30:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40046307}], 0x0, 0x0, 0x0}) 02:30:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:27 executing program 2: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000140)) waitid(0x2, r0, &(0x7f0000000040), 0x41000000, &(0x7f0000000540)) clock_getres(0x40000000001, 0x0) 02:30:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1627.689462] binder: 8352 invalid dec weak, ref 823 desc 0 s 1 w 0 [ 1627.703003] binder: BINDER_SET_CONTEXT_MGR already set [ 1627.710485] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1627.753980] binder: 8352:8357 ioctl 40046207 0 returned -16 [ 1627.756050] Unknown ioctl -1072146872 02:30:28 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) getuid() lstat(0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:28 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x11, 0xffffffffffffff00, 0x8}) clock_getres(0xf380ebf78eaf5710, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000200)={&(0x7f0000003000/0x4000)=nil, 0x4, 0x1, 0xa3, &(0x7f0000005000/0x3000)=nil, 0x8}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast2, @in=@local}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x802, 0x0) 02:30:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x99000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40086303}], 0x0, 0x0, 0x0}) 02:30:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x100000000009]}) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e22, 0x0, 0x4e20, 0x9, 0x2, 0x80, 0xa0, 0x2e, 0x0, r4}, {0x5, 0x3, 0xffff, 0x5, 0x6, 0x9, 0x4, 0x80}, {0x7fff, 0x3b, 0xca7f, 0x9}, 0x0, 0x6e6bc0, 0x0, 0x1, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x6c}, 0xa, @in=@broadcast, 0x3503, 0x0, 0x1, 0x7f, 0x5, 0x5e, 0x2780}}, 0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1628.243992] binder: 8473:8474 BC_FREE_BUFFER u0000000000000000 no match [ 1628.257490] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:28 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) tgkill(r0, r1, 0x15) [ 1628.303259] binder: BINDER_SET_CONTEXT_MGR already set [ 1628.308626] binder: 8473:8474 ioctl 40046207 0 returned -16 02:30:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x4008630a}], 0x0, 0x0, 0x0}) 02:30:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\xff\xff\xff\xc3\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1628.472594] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xba230000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1628.572435] binder: BC_ATTEMPT_ACQUIRE not supported [ 1628.624696] binder: 8507:8508 ioctl c0306201 20008fd0 returned -22 [ 1628.661934] binder: BINDER_SET_CONTEXT_MGR already set [ 1628.667299] binder: 8507:8508 ioctl 40046207 0 returned -16 [ 1628.678164] binder: BC_ATTEMPT_ACQUIRE not supported [ 1628.685571] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1628.724072] binder: 8507:8526 ioctl c0306201 20008fd0 returned -22 02:30:29 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) getuid() ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\xff\xff\xfd\xfd\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40086310}], 0x0, 0x0, 0x0}) 02:30:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000000)={0x0, 0xfff, 0x2}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1629.139548] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1629.150555] binder: 8611:8612 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1629.177361] binder: BINDER_SET_CONTEXT_MGR already set 02:30:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\xff\xff\xff\xfe\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff0000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1629.195637] binder: 8611:8612 ioctl 40046207 0 returned -16 [ 1629.219684] binder: 8611:8615 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1629.340201] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1629.939263] net_ratelimit: 14 callbacks suppressed [ 1629.939273] protocol 88fb is buggy, dev hsr_slave_0 [ 1629.949403] protocol 88fb is buggy, dev hsr_slave_1 [ 1629.954519] protocol 88fb is buggy, dev hsr_slave_0 [ 1629.959626] protocol 88fb is buggy, dev hsr_slave_1 [ 1630.099177] protocol 88fb is buggy, dev hsr_slave_0 [ 1630.104361] protocol 88fb is buggy, dev hsr_slave_1 [ 1630.339234] protocol 88fb is buggy, dev hsr_slave_0 [ 1630.344432] protocol 88fb is buggy, dev hsr_slave_1 02:30:31 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc000) 02:30:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) 02:30:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\xfd\xfd\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:31 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1631.416093] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1631.426972] binder: BINDER_SET_CONTEXT_MGR already set [ 1631.441854] binder: 8733:8734 ioctl 40046207 0 returned -16 [ 1631.462666] binder_release_work: 2 callbacks suppressed [ 1631.462674] binder: undelivered death notification, 0000000000000000 [ 1631.518361] FAULT_INJECTION: forcing a failure. [ 1631.518361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1631.544320] CPU: 0 PID: 8730 Comm: syz-executor.4 Not tainted 5.0.0+ #14 [ 1631.551218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1631.560579] Call Trace: [ 1631.563188] dump_stack+0x172/0x1f0 [ 1631.566845] should_fail.cold+0xa/0x15 [ 1631.570756] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1631.575864] ? ___might_sleep+0x163/0x280 [ 1631.580029] should_fail_alloc_page+0x50/0x60 [ 1631.584535] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1631.589214] ? lock_downgrade+0x880/0x880 [ 1631.593551] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1631.598582] ? kasan_check_read+0x11/0x20 [ 1631.598609] ? debug_smp_processor_id+0x3c/0x280 [ 1631.598629] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1631.613034] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1631.613061] alloc_pages_vma+0xdd/0x540 [ 1631.622578] wp_page_copy+0x21c/0x1740 [ 1631.626478] ? find_held_lock+0x35/0x130 [ 1631.630567] ? pmd_pfn+0x1d0/0x1d0 [ 1631.634121] ? lock_downgrade+0x880/0x880 [ 1631.638273] ? swp_swapcount+0x540/0x540 [ 1631.642350] ? kasan_check_read+0x11/0x20 [ 1631.646508] ? do_raw_spin_unlock+0x57/0x270 [ 1631.650945] do_wp_page+0x5d8/0x16c0 [ 1631.654684] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1631.659387] __handle_mm_fault+0x22e8/0x3ec0 [ 1631.663910] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1631.668772] ? find_held_lock+0x35/0x130 [ 1631.674671] ? handle_mm_fault+0x322/0xb30 [ 1631.678944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1631.684508] ? kasan_check_read+0x11/0x20 [ 1631.688677] handle_mm_fault+0x43f/0xb30 [ 1631.692765] __do_page_fault+0x5ef/0xda0 [ 1631.696859] do_page_fault+0x71/0x581 [ 1631.700689] page_fault+0x1e/0x30 [ 1631.704613] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1631.710235] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1631.729147] RSP: 0018:ffff888059177970 EFLAGS: 00010206 [ 1631.734508] RAX: ffffed100b22ef46 RBX: 0000000000000030 RCX: 0000000000000006 [ 1631.741772] RDX: 0000000000000000 RSI: ffff888059177a00 RDI: 0000000008121000 [ 1631.749041] RBP: ffff8880591779a8 R08: 0caaaaaaaaaa0080 R09: ffffed100b22ef46 [ 1631.756352] R10: ffffed100b22ef45 R11: ffff888059177a2f R12: 0000000008121000 [ 1631.763618] R13: ffff888059177a00 R14: 0000000008121030 R15: 00007ffffffff000 [ 1631.770917] ? _copy_to_user+0xf7/0x120 [ 1631.774891] old_dev_ioctl.isra.0+0x9cf/0x1640 [ 1631.779486] ? add_del_if+0x150/0x150 [ 1631.783294] ? lock_acquire+0x16f/0x3f0 [ 1631.787275] ? __mutex_lock+0x3cd/0x1310 [ 1631.791326] ? rtnl_lock+0x17/0x20 [ 1631.794860] ? mutex_trylock+0x1e0/0x1e0 [ 1631.798915] ? find_held_lock+0x35/0x130 [ 1631.802982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1631.808520] ? full_name_hash+0xc0/0x100 [ 1631.812572] ? br_ioctl_deviceless_stub+0x7b0/0x7b0 [ 1631.817575] br_dev_ioctl+0x71/0x110 [ 1631.821299] dev_ifsioc+0x257/0x990 [ 1631.824940] ? register_gifconf+0x70/0x70 [ 1631.829111] dev_ioctl+0x286/0xc90 [ 1631.832665] compat_ifr_data_ioctl+0xfb/0x160 [ 1631.837152] ? sock_alloc_file+0x170/0x170 [ 1631.841408] compat_sock_ioctl+0x36b/0x1d50 [ 1631.845748] ? sock_unregister+0xa0/0xa0 [ 1631.849811] ? ksys_dup3+0x3e0/0x3e0 [ 1631.853512] ? fput_many+0x12c/0x1a0 [ 1631.857237] ? tomoyo_file_ioctl+0x23/0x30 [ 1631.861486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1631.867035] ? security_file_ioctl+0x93/0xc0 [ 1631.871442] ? sock_unregister+0xa0/0xa0 [ 1631.875494] __ia32_compat_sys_ioctl+0x197/0x620 [ 1631.880261] do_fast_syscall_32+0x281/0xc98 [ 1631.884598] entry_SYSENTER_compat+0x70/0x7f [ 1631.889004] RIP: 0023:0xf7fd9869 [ 1631.892359] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1631.911246] RSP: 002b:00000000f5dd50cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1631.918942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f0 [ 1631.926203] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1631.933462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1631.940728] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1631.947995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1632.029212] protocol 88fb is buggy, dev hsr_slave_0 [ 1632.034371] protocol 88fb is buggy, dev hsr_slave_1 02:30:32 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\xc3\xff\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:32 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) lsetxattr$security_capability(&(0x7f0000000000)='\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0xd8d0fff, 0xf68}, {0x400, 0x2}], r0}, 0x18, 0x3) 02:30:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c6312}], 0x0, 0x0, 0x0}) 02:30:32 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\xfe\xff\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1632.239262] binder: 8749:8751 unknown command 1074553618 [ 1632.252675] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1632.278844] binder: 8749:8751 ioctl c0306201 20008fd0 returned -22 02:30:32 executing program 2: clock_getres(0x7, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x800100a, 0x56ee28b2, 0x3}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0186404, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x8010000, 0x0, 0x40, &(0x7f0000fff000/0x1000)=nil, 0x7}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0xbe2e, 0x101, {0x3, 0x4cc}, 0x1}) [ 1632.322137] binder: 8749:8759 unknown command 1074553618 [ 1632.327656] binder: 8749:8759 ioctl c0306201 20008fd0 returned -22 02:30:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c635e}], 0x0, 0x0, 0x0}) [ 1632.516686] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1632.582879] binder: 8775:8776 unknown command 1074553694 [ 1632.624117] binder: 8775:8776 ioctl c0306201 20008fd0 returned -22 [ 1632.658997] binder: BINDER_SET_CONTEXT_MGR already set [ 1632.681585] binder: 8775:8776 ioctl 40046207 0 returned -16 [ 1632.718676] binder: 8775:8778 unknown command 1074553694 [ 1632.741456] binder: 8775:8778 ioctl c0306201 20008fd0 returned -22 02:30:35 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:35 executing program 2: clock_getres(0x3, 0x0) r0 = dup(0xffffffffffffff9c) connect(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x2, {0xa, 0x4e22, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xf6}}}, 0x80) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x7) 02:30:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x2, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40106308}], 0x0, 0x0, 0x0}) 02:30:35 executing program 2: clock_getres(0x7, 0x0) [ 1635.376312] binder: 8783:8788 BC_INCREFS_DONE node 843 has no pending increfs request [ 1635.391396] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1635.394134] binder: BINDER_SET_CONTEXT_MGR already set [ 1635.405357] binder: 8783:8788 ioctl 40046207 0 returned -16 [ 1635.411916] binder: 8783:8795 BC_INCREFS_DONE u0000000000000000 no match 02:30:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40106309}], 0x0, 0x0, 0x0}) 02:30:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1635.555085] binder: 8802:8803 BC_ACQUIRE_DONE node 846 has no pending acquire request 02:30:35 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@remote, @multicast1}, &(0x7f0000000080)=0xc) clock_getres(0x5, 0x0) [ 1635.626262] binder: BINDER_SET_CONTEXT_MGR already set 02:30:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x541b, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1635.669222] binder: 8802:8803 ioctl 40046207 0 returned -16 [ 1635.680380] binder: 8802:8807 BC_ACQUIRE_DONE u0000000000000000 no match [ 1635.703479] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1636.179202] net_ratelimit: 14 callbacks suppressed [ 1636.179210] protocol 88fb is buggy, dev hsr_slave_0 [ 1636.189299] protocol 88fb is buggy, dev hsr_slave_1 [ 1636.194403] protocol 88fb is buggy, dev hsr_slave_0 [ 1636.199502] protocol 88fb is buggy, dev hsr_slave_1 [ 1636.339349] protocol 88fb is buggy, dev hsr_slave_0 [ 1636.344540] protocol 88fb is buggy, dev hsr_slave_1 [ 1636.579210] protocol 88fb is buggy, dev hsr_slave_0 [ 1636.584347] protocol 88fb is buggy, dev hsr_slave_1 [ 1638.259175] protocol 88fb is buggy, dev hsr_slave_0 [ 1638.264270] protocol 88fb is buggy, dev hsr_slave_1 02:30:38 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:38 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc00c6419, &(0x7f0000001680)={0xa, &(0x7f0000000040)=""/130, &(0x7f00000015c0)=[{0xffffffffffffff81, 0x1000, 0x0, &(0x7f0000000100)=""/4096}, {0x1, 0x5, 0x0, &(0x7f0000001100)=""/5}, {0xffffffff, 0xba, 0x96, &(0x7f0000001140)=""/186}, {0x100000001, 0xd3, 0x4, &(0x7f0000001200)=""/211}, {0x6, 0x3f, 0x1d, &(0x7f0000001300)=""/63}, {0x10001, 0x8, 0x6, &(0x7f0000001340)=""/8}, {0x8064, 0x64, 0x3ff, &(0x7f0000001380)=""/100}, {0x9, 0x28, 0x100, &(0x7f0000001400)=""/40}, {0x6, 0xa2, 0x9, &(0x7f0000001440)=""/162}, {0xffffffffffffff00, 0x91, 0xdf, &(0x7f0000001500)=""/145}]}) 02:30:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40406300}], 0x0, 0x0, 0x0}) 02:30:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5421, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:38 executing program 2: clock_getres(0xf380cbf78eaf570e, 0x0) [ 1638.450977] binder: 8828:8830 got transaction to context manager from process owning it [ 1638.461290] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1638.476284] binder: 8828:8830 transaction failed 29201/-22, size 0-0 line 2985 02:30:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5450, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1638.518186] binder: BINDER_SET_CONTEXT_MGR already set [ 1638.552633] binder: 8828:8830 ioctl 40046207 0 returned -16 [ 1638.586753] binder: undelivered TRANSACTION_ERROR: 29201 [ 1638.594894] binder: 8828:8837 transaction failed 29189/-22, size 0-0 line 2994 02:30:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1638.641541] binder: undelivered TRANSACTION_ERROR: 29189 02:30:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5452, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1638.815250] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:41 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40406301}], 0x0, 0x0, 0x0}) 02:30:41 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$TUNATTACHFILTER(r0, 0x400854d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x8, 0x3, 0x9, 0x1000}]}) 02:30:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5460, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1641.485802] binder: 8861:8862 got reply transaction with no transaction stack [ 1641.502710] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1641.510758] binder: 8861:8862 transaction failed 29201/-71, size 0-0 line 2899 02:30:41 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000040)={0x8000, "add6ac71029f426f0bee6d250e327557023460a0553cf300271d312c16bda976", 0x3, 0x1}) 02:30:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1641.540163] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1641.541592] binder: BINDER_SET_CONTEXT_MGR already set 02:30:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1641.600715] binder: 8861:8862 ioctl 40046207 0 returned -16 [ 1641.659320] binder: undelivered TRANSACTION_ERROR: 29201 02:30:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40486311}], 0x0, 0x0, 0x0}) 02:30:41 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x24000, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc00c6419, &(0x7f0000001440)={0x6, &(0x7f0000000040)=""/117, &(0x7f00000013c0)=[{0x9, 0x1000, 0x1, &(0x7f00000000c0)=""/4096}, {0x5, 0x40, 0x400, &(0x7f00000010c0)=""/64}, {0x3, 0xb7, 0x7, &(0x7f0000001100)=""/183}, {0x8, 0xb1, 0xd5, &(0x7f00000011c0)=""/177}, {0x9, 0x12, 0x200, &(0x7f0000001280)=""/18}, {0x9, 0xed, 0x10001, &(0x7f00000012c0)=""/237}]}) clock_getres(0xf380ebf78eaf5710, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) [ 1641.709940] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1641.854420] binder: 8890:8891 got transaction to context manager from process owning it [ 1641.905548] binder: 8890:8891 transaction failed 29201/-22, size 0-0 line 2985 [ 1641.928564] binder: BINDER_SET_CONTEXT_MGR already set [ 1641.965069] binder: 8890:8891 ioctl 40046207 0 returned -16 [ 1641.976170] binder: undelivered TRANSACTION_ERROR: 29201 [ 1641.984594] binder: 8890:8897 transaction failed 29189/-22, size 0-0 line 2994 [ 1642.003812] binder: undelivered TRANSACTION_ERROR: 29189 [ 1642.419294] net_ratelimit: 14 callbacks suppressed [ 1642.419304] protocol 88fb is buggy, dev hsr_slave_0 [ 1642.429390] protocol 88fb is buggy, dev hsr_slave_1 [ 1642.434502] protocol 88fb is buggy, dev hsr_slave_0 [ 1642.439604] protocol 88fb is buggy, dev hsr_slave_1 [ 1642.579234] protocol 88fb is buggy, dev hsr_slave_0 [ 1642.584381] protocol 88fb is buggy, dev hsr_slave_1 [ 1642.819202] protocol 88fb is buggy, dev hsr_slave_0 [ 1642.824294] protocol 88fb is buggy, dev hsr_slave_1 02:30:44 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8910, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:44 executing program 2: clock_getres(0x7, 0x0) 02:30:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40486312}], 0x0, 0x0, 0x0}) [ 1644.499263] protocol 88fb is buggy, dev hsr_slave_0 [ 1644.504406] protocol 88fb is buggy, dev hsr_slave_1 [ 1644.555959] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1644.570466] binder: 8906:8907 got reply transaction with no transaction stack [ 1644.587874] binder: 8906:8907 transaction failed 29201/-71, size 0-0 line 2899 02:30:44 executing program 2: clock_getres(0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x106002, &(0x7f0000000040), 0x0, r1, 0x4}) 02:30:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1644.623262] binder: BINDER_SET_CONTEXT_MGR already set 02:30:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x103000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1644.664381] binder: 8906:8907 ioctl 40046207 0 returned -16 02:30:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8911, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1644.711780] binder: undelivered TRANSACTION_ERROR: 29201 [ 1644.748927] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) 02:30:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1644.890896] binder: 8928:8929 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 1644.973107] binder: BINDER_SET_CONTEXT_MGR already set [ 1644.978485] binder: 8928:8929 ioctl 40046207 0 returned -16 02:30:47 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:47 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040)=0x80000001, 0x8) 02:30:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 02:30:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8913, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1647.625192] binder: 8943:8944 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 1647.643596] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1647.649167] binder: BINDER_SET_CONTEXT_MGR already set [ 1647.657214] binder: 8943:8944 ioctl 40046207 0 returned -16 02:30:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x4}], 0x0, 0x0, 0x0}) [ 1647.670371] binder: 8943:8951 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 02:30:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:47 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x20200, 0x0) write$P9_RSTAT(r0, &(0x7f00000000c0)={0x50, 0x7d, 0x2, {0x0, 0x49, 0x9, 0x57, {0x1}, 0x52000000, 0x9, 0x8, 0x1, 0x5, '9eth1', 0x9, '((trusted', 0x0, '', 0x8, 'wlan1-\xac+'}}, 0x50) clock_getres(0x6, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00') 02:30:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1647.812966] binder: 8958:8959 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 02:30:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1647.873605] binder: BINDER_SET_CONTEXT_MGR already set 02:30:47 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "8181bfad5e2b5591e104124db18fc311375af8a0fc8f08b9f5e40f0422ef62650d022168e4504d3e7cc46b3d2d067a026d12221e6237c1e1b4cf57aa1099b2db4188dbbdf7f24fa4a151e4aa8e28954b286432846e9b5cb9272109fb8acd0cb71dbffb3fad84b401861b489e5aa2fe9b7d72af23df7e18619a3aa81921b850458a69dbe091d7"}, 0x96) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc04c561a, &(0x7f0000000040)={0x1, "351d86180265a5f43a2c3d4b9cb0979b1d47316768f74df9b14474f3628130cc", 0x0, 0x7, 0x5, 0x764805, 0x10, 0x2}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc04c561a, &(0x7f0000000180)={0x2, "f84492cb6f23459cba451621f237c0d5c98753c24805e043123217598ec1de3a", 0x1, 0x80000001, 0x2, 0x1b001, 0x1000004, 0xa}) userfaultfd(0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x220000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000200)={0x7, 0xff, 0x80000000, 'queue0\x00', 0x3}) [ 1647.920789] binder: 8958:8959 ioctl 40046207 0 returned -16 [ 1647.939707] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1647.970734] binder: 8958:8966 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 1648.055166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.061724] bridge0: port 1(bridge_slave_0) entered disabled state 02:30:48 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x5}], 0x0, 0x0, 0x0}) 02:30:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891d, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:48 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000080)=0x1) [ 1648.480081] binder: 8980:8981 BC_REQUEST_DEATH_NOTIFICATION invalid ref 5 [ 1648.498816] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1648.525208] binder: BINDER_SET_CONTEXT_MGR already set 02:30:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:48 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) accept4$inet(r0, 0x0, &(0x7f0000000080), 0x80000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) [ 1648.553378] binder: 8980:8981 ioctl 40046207 0 returned -16 [ 1648.560595] binder: 8980:8990 BC_REQUEST_DEATH_NOTIFICATION invalid ref 5 02:30:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1648.659173] net_ratelimit: 14 callbacks suppressed [ 1648.659183] protocol 88fb is buggy, dev hsr_slave_0 [ 1648.669335] protocol 88fb is buggy, dev hsr_slave_1 [ 1648.674492] protocol 88fb is buggy, dev hsr_slave_0 [ 1648.679616] protocol 88fb is buggy, dev hsr_slave_1 02:30:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x6}], 0x0, 0x0, 0x0}) 02:30:48 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x503, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x6a567244a1b548c4}}, 0xfffffffffffffefe) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r1, 0xcd, "9da08e", "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"}}, 0x110) clock_getres(0x5, 0x0) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x7, 0xc200) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) [ 1648.759677] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1648.819182] protocol 88fb is buggy, dev hsr_slave_0 [ 1648.824313] protocol 88fb is buggy, dev hsr_slave_1 [ 1649.069716] protocol 88fb is buggy, dev hsr_slave_0 [ 1649.075225] protocol 88fb is buggy, dev hsr_slave_1 02:30:49 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891e, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/112, &(0x7f0000000080)=0x70) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xef5, 0x20100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bcsh0\x00', 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000240)={@ll={0x11, 0x0, r2, 0x1, 0x8e, 0x6, @local}, {&(0x7f0000000180)=""/85, 0x55}, &(0x7f0000000200), 0x5}, 0x9c) clock_getres(0xf380ebf78eaf5710, 0x0) 02:30:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x7}], 0x0, 0x0, 0x0}) [ 1649.368731] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1649.395864] binder: 9025:9028 BC_REQUEST_DEATH_NOTIFICATION invalid ref 7 02:30:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1649.432796] binder: BINDER_SET_CONTEXT_MGR already set [ 1649.454572] binder: 9025:9028 ioctl 40046207 0 returned -16 02:30:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:49 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) accept4$unix(r0, &(0x7f0000000380), &(0x7f0000000400)=0x6e, 0x800) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x8e02) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000040)={{0x3, 0x6, 0x2, 0x501c, '\x00', 0x9}, 0x0, [0x0, 0x8, 0x8001, 0x3, 0x7ab, 0x1, 0x401, 0x8001, 0x9, 0x2, 0x487a, 0xfffffffffffffffb, 0xd9f, 0x6, 0x4, 0xda, 0x8001, 0x2, 0x4, 0x8000, 0x5, 0x9, 0x7ff, 0x1, 0x8, 0x3, 0x3, 0x8, 0x7f, 0xfffffffffffffc00, 0x101, 0xe27, 0x7fff, 0x5, 0x7fff, 0xffffffff, 0x8, 0x0, 0x6, 0x2, 0x75f, 0x5, 0x6, 0x9, 0x5, 0x3f, 0x9, 0x1, 0x5, 0x8, 0x3c0d, 0x7, 0x1000, 0xffffffff, 0x9, 0x5, 0x8, 0x9, 0x81, 0x8000, 0x200, 0x3, 0x2, 0x3, 0x9c, 0x7, 0xff, 0xffffffff, 0xfffffffffffffffe, 0x1, 0xf6, 0x1, 0x7, 0x8c5e, 0x4ad7, 0xffffffffffffff7f, 0x7, 0xb8, 0xa2d, 0xfffffffffffff3bb, 0x0, 0x3, 0x0, 0xf0, 0x100, 0x1, 0x8001, 0x9, 0x0, 0x4, 0x4, 0x9, 0x61, 0x8, 0x5e65, 0x800, 0x4, 0x80000000, 0x3ff, 0xa76, 0x9, 0x0, 0x7, 0x1ff, 0x3ff, 0x7ff, 0x5, 0x99b, 0x3, 0x1, 0x4, 0x401, 0x7, 0x2000000000, 0x7, 0x1, 0x6, 0x3, 0x2, 0x7, 0x5091, 0x4f, 0x100000000, 0x5, 0x6, 0x8, 0x6, 0x3], {0x77359400}}) 02:30:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x891f, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1649.498579] binder: 9025:9032 BC_REQUEST_DEATH_NOTIFICATION invalid ref 7 [ 1649.571543] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x48}], 0x0, 0x0, 0x0}) 02:30:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8920, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1649.744377] binder: 9084:9088 BC_REQUEST_DEATH_NOTIFICATION invalid ref 72 [ 1649.819280] binder: BINDER_SET_CONTEXT_MGR already set [ 1649.853954] binder: 9084:9088 ioctl 40046207 0 returned -16 02:30:50 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:50 executing program 2: recvmsg(0xffffffffffffff9c, &(0x7f0000001480)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/252, 0xfc}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/6, 0x6}, {&(0x7f0000001200)=""/201, 0xc9}, {&(0x7f0000001300)=""/162, 0xa2}], 0x6, &(0x7f0000001400)=""/77, 0x4d}, 0x2) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000014c0), &(0x7f0000001500)=0x8) clock_getres(0xf380ebf78eaf5710, 0x0) 02:30:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x4c}], 0x0, 0x0, 0x0}) 02:30:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8921, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x01\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:50 executing program 2: clock_getres(0xf180ebf78eaf5710, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x40000) setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000040)="2f3ed94471f7f216b97fe963b980a5f718f46b543a168d48222038879f8e96b888747cc457aa068eb940", 0x2a) [ 1650.270517] binder_thread_write: 1 callbacks suppressed [ 1650.270531] binder: 9160:9161 BC_REQUEST_DEATH_NOTIFICATION invalid ref 76 [ 1650.304475] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1650.313897] binder: BINDER_SET_CONTEXT_MGR already set 02:30:50 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1650.332787] binder: 9160:9161 ioctl 40046207 0 returned -16 [ 1650.357191] binder: 9160:9171 BC_REQUEST_DEATH_NOTIFICATION invalid ref 76 02:30:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:50 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20040, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000080)={0x7fff, 0x7, 0x10001, "4059999c463df5baba2ea5ae3dce5bb3fc5663f358294483056e8a876ec7c884eac039d86216c01f8d0eb44a665da47cf5a09f0c4efdb314974f004f", 0x21, "7b7f37d113deda3099224363526ac0361b3b150b52ea8fff0350c2fdc9c10ff3a0eef0345b86c6b00d8cb9412ffd822d3c8ca64ae56e0701b25e2090", 0x20}) clock_getres(0xf380ebf78eaf5710, 0x0) 02:30:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x60}], 0x0, 0x0, 0x0}) 02:30:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:50 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1650.559788] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1650.576689] binder: 9191:9192 BC_REQUEST_DEATH_NOTIFICATION invalid ref 96 02:30:50 executing program 2: clock_getres(0x8000000000007, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) [ 1650.621423] binder: BINDER_SET_CONTEXT_MGR already set [ 1650.626776] binder: 9191:9192 ioctl 40046207 0 returned -16 02:30:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1650.688706] bridge0: mtu greater than device maximum 02:30:50 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 1650.739188] protocol 88fb is buggy, dev hsr_slave_0 02:30:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:50 executing program 2: clock_getres(0x7, 0x0) [ 1650.770310] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8923, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x68}], 0x0, 0x0, 0x0}) 02:30:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:50 executing program 2: clock_getres(0x2000000000000005, 0x0) 02:30:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1650.995610] binder: 9222:9224 BC_REQUEST_DEATH_NOTIFICATION invalid ref 104 [ 1651.015997] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1651.036664] binder: BINDER_SET_CONTEXT_MGR already set 02:30:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x6c}], 0x0, 0x0, 0x0}) 02:30:51 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) clock_getres(0x7, &(0x7f0000000040)) [ 1651.046615] binder: 9222:9224 ioctl 40046207 0 returned -16 02:30:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8924, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1651.225618] binder: 9239:9240 BC_REQUEST_DEATH_NOTIFICATION invalid ref 108 [ 1651.264207] binder: BINDER_SET_CONTEXT_MGR already set [ 1651.294046] binder: 9239:9240 ioctl 40046207 0 returned -16 [ 1651.324502] binder: 9239:9243 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1651.333415] binder: 9239:9243 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:30:53 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:53 executing program 2: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) clock_getres(0xf380ebf78eaf5710, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x80000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x2, 0x0, [], {0x0, @bt={0x2, 0xffff, 0x1, 0x3, 0x1, 0x3f, 0x6, 0x0, 0x8, 0x1, 0x3, 0x6, 0x6, 0x8, 0x4, 0x19}}}) 02:30:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8927, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x74}], 0x0, 0x0, 0x0}) [ 1653.859273] binder: 9253:9256 BC_REQUEST_DEATH_NOTIFICATION invalid ref 116 [ 1653.867644] binder: BINDER_SET_CONTEXT_MGR already set [ 1653.880208] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1653.896761] binder: 9253:9256 ioctl 40046207 0 returned -16 02:30:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\xff\xff\xff\xc3\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:53 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x1) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/47) [ 1653.918085] binder: 9253:9261 BC_REQUEST_DEATH_NOTIFICATION invalid ref 116 [ 1653.921163] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:30:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x7a}], 0x0, 0x0, 0x0}) 02:30:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8929, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\xff\xff\xfd\xfd\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1654.069151] binder: 9272:9273 BC_REQUEST_DEATH_NOTIFICATION invalid ref 122 [ 1654.093822] binder: BINDER_SET_CONTEXT_MGR already set [ 1654.099839] binder: 9272:9273 ioctl 40046207 0 returned -16 [ 1654.128072] binder: 9272:9274 BC_REQUEST_DEATH_NOTIFICATION invalid ref 122 [ 1654.222173] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1654.899231] net_ratelimit: 15 callbacks suppressed [ 1654.899241] protocol 88fb is buggy, dev hsr_slave_0 [ 1654.909324] protocol 88fb is buggy, dev hsr_slave_1 [ 1654.914433] protocol 88fb is buggy, dev hsr_slave_0 [ 1654.919496] protocol 88fb is buggy, dev hsr_slave_1 [ 1655.059176] protocol 88fb is buggy, dev hsr_slave_0 [ 1655.064302] protocol 88fb is buggy, dev hsr_slave_1 [ 1655.299199] protocol 88fb is buggy, dev hsr_slave_0 [ 1655.304294] protocol 88fb is buggy, dev hsr_slave_1 02:30:56 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:56 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x1, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) 02:30:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x300}], 0x0, 0x0, 0x0}) 02:30:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\xff\xff\xff\xfe\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8930, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1656.898117] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1656.903894] binder: 9288:9289 BC_REQUEST_DEATH_NOTIFICATION invalid ref 768 02:30:56 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x501000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000040)={0x8000, 0x9, 0x727}) clock_getres(0xf3c0ebf78faf5715, 0x0) accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x80000) 02:30:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\xfd\xfd\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1656.956326] binder: BINDER_SET_CONTEXT_MGR already set [ 1656.973282] binder: 9288:9301 BC_REQUEST_DEATH_NOTIFICATION invalid ref 768 [ 1656.979216] protocol 88fb is buggy, dev hsr_slave_0 [ 1656.985481] protocol 88fb is buggy, dev hsr_slave_1 [ 1656.986931] binder: 9288:9289 ioctl 40046207 0 returned -16 02:30:57 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 02:30:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x500}], 0x0, 0x0, 0x0}) 02:30:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1657.125844] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1657.227227] binder: 9317:9318 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1280 [ 1657.279212] binder: BINDER_SET_CONTEXT_MGR already set [ 1657.303638] binder: 9317:9318 ioctl 40046207 0 returned -16 02:30:59 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:30:59 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9, 0x9, 0x0, 0x9, 0x3, 0x12, 0x2, 0x29}, &(0x7f0000000040)={0x7ff, 0x3507, 0x100, 0x6, 0x6c2c, 0x6, 0x2, 0x1}, &(0x7f0000000080)={0x81, 0x3, 0x6, 0x5, 0x40, 0x8001, 0x6, 0x1f}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={0x3ff}, 0x8}) 02:30:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:30:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\xc3\xff\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:30:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:30:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x600}], 0x0, 0x0, 0x0}) 02:30:59 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x10001, 0x0) write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x2, {0xff}}, 0x18) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1e10}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x4}, &(0x7f0000000100)=0x8) [ 1659.988098] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1660.000102] binder: 9332:9333 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1536 02:30:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\xfe\xff\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1660.040676] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1660.048931] binder: BINDER_SET_CONTEXT_MGR already set [ 1660.070165] binder: 9332:9333 ioctl 40046207 0 returned -16 02:31:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x700}], 0x0, 0x0, 0x0}) 02:31:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1660.273062] binder: 9350:9351 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1792 [ 1660.353469] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1660.368966] binder: BINDER_SET_CONTEXT_MGR already set [ 1660.393329] binder: 9350:9351 ioctl 40046207 0 returned -16 [ 1661.139281] net_ratelimit: 14 callbacks suppressed [ 1661.144362] protocol 88fb is buggy, dev hsr_slave_0 [ 1661.149522] protocol 88fb is buggy, dev hsr_slave_1 [ 1661.154693] protocol 88fb is buggy, dev hsr_slave_0 [ 1661.159783] protocol 88fb is buggy, dev hsr_slave_1 [ 1661.299174] protocol 88fb is buggy, dev hsr_slave_0 [ 1661.304309] protocol 88fb is buggy, dev hsr_slave_1 [ 1661.539167] protocol 88fb is buggy, dev hsr_slave_0 [ 1661.544256] protocol 88fb is buggy, dev hsr_slave_1 02:31:02 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:02 executing program 2: clock_getres(0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 02:31:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8937, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x2000}], 0x0, 0x0, 0x0}) [ 1663.062747] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1663.070763] binder: 9370:9372 BC_REQUEST_DEATH_NOTIFICATION invalid ref 8192 02:31:03 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x38, 0x1, {"c1f0156aa95f61699605ce5eb99da9db9378e95b5dc0257653d7955ecc0f95"}}, {0x0, "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"}}, &(0x7f0000000140)=""/187, 0x138, 0xbb, 0x1}, 0x20) 02:31:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1663.104018] binder: BINDER_SET_CONTEXT_MGR already set [ 1663.117863] binder: 9370:9372 ioctl 40046207 0 returned -16 [ 1663.135671] binder: 9370:9377 BC_REQUEST_DEATH_NOTIFICATION invalid ref 8192 02:31:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8942, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1663.219251] protocol 88fb is buggy, dev hsr_slave_0 [ 1663.224389] protocol 88fb is buggy, dev hsr_slave_1 02:31:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x3f00}], 0x0, 0x0, 0x0}) 02:31:03 executing program 2: clock_getres(0x1, 0x0) [ 1663.360866] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1663.368057] binder: 9389:9390 BC_REQUEST_DEATH_NOTIFICATION invalid ref 16128 [ 1663.426501] binder: BINDER_SET_CONTEXT_MGR already set [ 1663.470307] binder: 9389:9390 ioctl 40046207 0 returned -16 02:31:06 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x5, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000100)=""/106) getsockopt$inet6_int(r0, 0x29, 0x3f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 02:31:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6558000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x4800}], 0x0, 0x0, 0x0}) 02:31:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1666.122496] binder: 9402:9409 BC_REQUEST_DEATH_NOTIFICATION invalid ref 18432 [ 1666.150776] binder: BINDER_SET_CONTEXT_MGR already set [ 1666.157543] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:31:06 executing program 2: socketpair(0xd, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ifb0\x00', 0x10) clock_getres(0xf380ebf78eaf5710, 0x0) [ 1666.170228] binder: 9402:9409 ioctl 40046207 0 returned -16 [ 1666.194212] binder: 9402:9412 BC_REQUEST_DEATH_NOTIFICATION invalid ref 18432 02:31:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x4c00}], 0x0, 0x0, 0x0}) 02:31:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:06 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x22983, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x3) clock_getres(0xf380ebf78eaf5710, 0x0) socket$pptp(0x18, 0x1, 0x2) [ 1666.414314] binder: 9428:9431 BC_REQUEST_DEATH_NOTIFICATION invalid ref 19456 [ 1666.462279] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1666.477854] binder: BINDER_SET_CONTEXT_MGR already set 02:31:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1666.503390] binder: 9428:9431 ioctl 40046207 0 returned -16 [ 1666.513170] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1666.533284] binder: 9428:9438 BC_REQUEST_DEATH_NOTIFICATION invalid ref 19456 02:31:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:06 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000040)=0x9, 0x4) [ 1666.716128] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1667.379310] net_ratelimit: 14 callbacks suppressed [ 1667.384347] protocol 88fb is buggy, dev hsr_slave_0 [ 1667.389466] protocol 88fb is buggy, dev hsr_slave_1 [ 1667.394678] protocol 88fb is buggy, dev hsr_slave_0 [ 1667.399788] protocol 88fb is buggy, dev hsr_slave_1 [ 1667.539185] protocol 88fb is buggy, dev hsr_slave_0 [ 1667.544378] protocol 88fb is buggy, dev hsr_slave_1 [ 1667.779199] protocol 88fb is buggy, dev hsr_slave_0 [ 1667.784291] protocol 88fb is buggy, dev hsr_slave_1 02:31:09 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8947, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x6000}], 0x0, 0x0, 0x0}) 02:31:09 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000000)={[{0x3, 0xb17, 0x8, 0x9, 0x6, 0x4, 0x2, 0xff, 0x7f, 0x202, 0xfffffffffffffff9, 0x0, 0x8}, {0x3, 0x80000000, 0x257, 0x40, 0xc115, 0x341a6f54, 0xd4, 0x1ff, 0x3, 0x4, 0x5, 0xff, 0x6}, {0x0, 0x2, 0x8, 0x5, 0x6b7e, 0x4, 0x95, 0x6bf, 0x4, 0x6, 0xfffffffffffffffc, 0x1, 0xea}], 0x80000000}) clock_getres(0xf380ebf78eaf5710, 0x0) 02:31:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1669.199400] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1669.209304] binder: 9461:9467 BC_REQUEST_DEATH_NOTIFICATION invalid ref 24576 [ 1669.225045] binder: BINDER_SET_CONTEXT_MGR already set 02:31:09 executing program 2: prctl$PR_SET_DUMPABLE(0x4, 0x1) clock_getres(0x0, 0x0) r0 = signalfd(0xffffffffffffff9c, &(0x7f0000000100)={0x100}, 0x8) syncfs(r0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8014}, 0x4) [ 1669.248087] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1669.248622] binder: 9461:9467 ioctl 40046207 0 returned -16 02:31:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x6800}], 0x0, 0x0, 0x0}) 02:31:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1669.406853] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1669.437326] binder: 9483:9484 BC_REQUEST_DEATH_NOTIFICATION invalid ref 26624 02:31:09 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x101000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r0, 0xf, 0x3}, 0x14) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x2, r1}) [ 1669.459200] protocol 88fb is buggy, dev hsr_slave_0 [ 1669.464371] protocol 88fb is buggy, dev hsr_slave_1 [ 1669.465750] binder: BINDER_SET_CONTEXT_MGR already set [ 1669.482775] binder: 9483:9484 ioctl 40046207 0 returned -16 [ 1669.493678] binder: 9483:9486 BC_REQUEST_DEATH_NOTIFICATION invalid ref 26624 02:31:12 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x6c00}], 0x0, 0x0, 0x0}) 02:31:12 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 02:31:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8949, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1672.282386] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1672.292669] binder: 9502:9503 BC_REQUEST_DEATH_NOTIFICATION invalid ref 27648 02:31:12 executing program 2: clock_getres(0x8002, 0x0) [ 1672.326784] binder: BINDER_SET_CONTEXT_MGR already set [ 1672.342903] binder: 9502:9503 ioctl 40046207 0 returned -16 02:31:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1672.382959] binder: 9502:9511 BC_REQUEST_DEATH_NOTIFICATION invalid ref 27648 02:31:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x7400}], 0x0, 0x0, 0x0}) 02:31:12 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x141000, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000080)={0x2, 0xfffffffffffffffa, 0x5}) clock_getres(0xf380ebf78eaf5710, 0x0) chdir(&(0x7f0000000000)='./file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) [ 1672.503980] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1672.567174] binder: 9523:9525 BC_REQUEST_DEATH_NOTIFICATION invalid ref 29696 [ 1672.612814] binder: BINDER_SET_CONTEXT_MGR already set [ 1672.628518] binder: 9523:9525 ioctl 40046207 0 returned -16 [ 1673.619222] net_ratelimit: 14 callbacks suppressed [ 1673.624203] protocol 88fb is buggy, dev hsr_slave_0 [ 1673.629249] protocol 88fb is buggy, dev hsr_slave_1 [ 1673.634347] protocol 88fb is buggy, dev hsr_slave_0 [ 1673.639384] protocol 88fb is buggy, dev hsr_slave_1 [ 1673.779192] protocol 88fb is buggy, dev hsr_slave_0 [ 1673.784298] protocol 88fb is buggy, dev hsr_slave_1 [ 1674.019164] protocol 88fb is buggy, dev hsr_slave_0 [ 1674.024260] protocol 88fb is buggy, dev hsr_slave_1 02:31:15 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8970, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9900000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:15 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = dup(0xffffffffffffffff) ioctl$RTC_EPOCH_READ(r0, 0x8004700d, &(0x7f0000000000)) 02:31:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x7a00}], 0x0, 0x0, 0x0}) [ 1675.348685] binder: 9540:9542 BC_REQUEST_DEATH_NOTIFICATION invalid ref 31232 [ 1675.377312] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1675.378012] binder: BINDER_SET_CONTEXT_MGR already set 02:31:15 executing program 2: nanosleep(&(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000040)) clock_getres(0xf380ebf78eaf5710, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8000, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000100)={0xf, @pix={0x9, 0xfffffffffffffff8, 0x0, 0x0, 0x1000, 0x1, 0xb, 0x5, 0x1, 0x8, 0x0, 0x5}}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000200)="614a7ce7f7d3d7ecad18173618074a88b098c58c32d810148c04f163588761b6aeb1cb8e4cb3acd5f71cfb3f8a4bcd29dc002f1ff1e482219c5b3e6398d5141c26869a19cbb0e9f2557641e178eb31271a20a2b57ffb31de3b23a035ac1e11cf8fea87fc71cc81080f796592999e5e73675b") r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0xc142) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x100000001) 02:31:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1675.405746] binder: 9540:9542 ioctl 40046207 0 returned -16 [ 1675.415237] binder: 9540:9550 BC_REQUEST_DEATH_NOTIFICATION invalid ref 31232 02:31:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8971, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:15 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x301800, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000040)=0x9) clock_getres(0xf380ebf78eaf5710, 0x0) 02:31:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x1000000}], 0x0, 0x0, 0x0}) [ 1675.627550] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1675.668065] binder: 9563:9569 BC_REQUEST_DEATH_NOTIFICATION invalid ref 16777216 [ 1675.699179] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.704690] protocol 88fb is buggy, dev hsr_slave_1 [ 1675.734962] binder: BINDER_SET_CONTEXT_MGR already set [ 1675.742440] binder: 9563:9569 ioctl 40046207 0 returned -16 [ 1675.748719] binder: 9563:9574 BC_REQUEST_DEATH_NOTIFICATION invalid ref 16777216 02:31:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xba23000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:18 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) 02:31:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8990, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x2000000}], 0x0, 0x0, 0x0}) 02:31:18 executing program 2: clock_getres(0x2, 0x0) [ 1678.459693] binder: 9582:9587 BC_REQUEST_DEATH_NOTIFICATION invalid ref 33554432 [ 1678.467478] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1678.481616] binder: BINDER_SET_CONTEXT_MGR already set [ 1678.501447] binder: 9582:9587 ioctl 40046207 0 returned -16 02:31:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1678.532313] binder: 9582:9591 BC_REQUEST_DEATH_NOTIFICATION invalid ref 33554432 02:31:18 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x240) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) clock_getres(0x80000000000007, 0x0) gettid() timer_create(0x4, &(0x7f0000000000)={0x0, 0x3c}, &(0x7f0000000040)=0x0) timer_gettime(r1, &(0x7f0000000080)) 02:31:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x3000000}], 0x0, 0x0, 0x0}) [ 1678.651284] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:31:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8992, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1678.740596] binder: 9605:9606 BC_REQUEST_DEATH_NOTIFICATION invalid ref 50331648 [ 1678.772945] binder: BINDER_SET_CONTEXT_MGR already set [ 1678.778615] binder: 9605:9606 ioctl 40046207 0 returned -16 [ 1678.785402] binder: 9605:9607 BC_REQUEST_DEATH_NOTIFICATION invalid ref 50331648 [ 1679.859175] net_ratelimit: 14 callbacks suppressed [ 1679.859182] protocol 88fb is buggy, dev hsr_slave_0 [ 1679.869238] protocol 88fb is buggy, dev hsr_slave_1 [ 1679.874357] protocol 88fb is buggy, dev hsr_slave_0 [ 1679.879419] protocol 88fb is buggy, dev hsr_slave_1 [ 1680.019176] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.024260] protocol 88fb is buggy, dev hsr_slave_1 [ 1680.259200] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.264291] protocol 88fb is buggy, dev hsr_slave_1 02:31:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:21 executing program 2: clock_getres(0xf380ebf70eaf5710, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x141801, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) 02:31:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x4000000}], 0x0, 0x0, 0x0}) 02:31:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1681.473294] binder: 9620:9621 BC_REQUEST_DEATH_NOTIFICATION invalid ref 67108864 [ 1681.491278] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:31:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1681.531078] binder: BINDER_SET_CONTEXT_MGR already set [ 1681.536416] binder: 9620:9621 ioctl 40046207 0 returned -16 02:31:21 executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) clock_getres(0xf380ebf78eaf5710, 0x0) 02:31:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8994, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:21 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') clock_getres(0xf380ebf78eaf5710, 0x0) 02:31:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x5000000}], 0x0, 0x0, 0x0}) 02:31:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1681.787697] binder: 9648:9649 BC_REQUEST_DEATH_NOTIFICATION invalid ref 83886080 02:31:21 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) clock_getres(0xf380ebf78eaf5710, 0x0) 02:31:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1681.845885] binder: BINDER_SET_CONTEXT_MGR already set [ 1681.864307] binder: 9648:9649 ioctl 40046207 0 returned -16 [ 1681.906118] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1681.914922] binder: 9648:9652 BC_REQUEST_DEATH_NOTIFICATION invalid ref 83886080 [ 1681.939199] protocol 88fb is buggy, dev hsr_slave_0 [ 1681.944321] protocol 88fb is buggy, dev hsr_slave_1 02:31:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8995, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x6000000}], 0x0, 0x0, 0x0}) 02:31:24 executing program 2: clock_getres(0xf380ebf78eaf5712, 0x0) 02:31:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:24 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00') r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x808040) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='+^\x00') [ 1684.569696] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1684.577485] binder: 9668:9675 BC_REQUEST_DEATH_NOTIFICATION invalid ref 100663296 02:31:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1684.614279] binder: BINDER_SET_CONTEXT_MGR already set [ 1684.631062] binder: 9668:9675 ioctl 40046207 0 returned -16 02:31:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89a2, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1684.665128] binder: 9668:9675 BC_REQUEST_DEATH_NOTIFICATION invalid ref 100663296 02:31:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x7000000}], 0x0, 0x0, 0x0}) [ 1684.745248] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:31:24 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$KDDISABIO(r0, 0x4b37) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000040)={0x80000001, 0x1f001}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x50, &(0x7f0000000080)}, 0x10) 02:31:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x03', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1684.864552] binder: 9695:9696 BC_REQUEST_DEATH_NOTIFICATION invalid ref 117440512 02:31:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x04', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1684.911319] binder: BINDER_SET_CONTEXT_MGR already set [ 1684.924467] binder: 9695:9696 ioctl 40046207 0 returned -16 [ 1684.947455] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 02:31:24 executing program 2: clock_getres(0x0, &(0x7f0000000000)) clock_getres(0xf380ebf78eaf5710, 0x0) socket$l2tp(0x18, 0x1, 0x1) [ 1684.976483] binder: 9695:9704 BC_REQUEST_DEATH_NOTIFICATION invalid ref 117440512 [ 1686.109181] net_ratelimit: 14 callbacks suppressed [ 1686.109189] protocol 88fb is buggy, dev hsr_slave_0 [ 1686.119377] protocol 88fb is buggy, dev hsr_slave_1 [ 1686.124498] protocol 88fb is buggy, dev hsr_slave_0 [ 1686.129578] protocol 88fb is buggy, dev hsr_slave_1 [ 1686.259201] protocol 88fb is buggy, dev hsr_slave_0 [ 1686.264290] protocol 88fb is buggy, dev hsr_slave_1 [ 1686.499207] protocol 88fb is buggy, dev hsr_slave_0 [ 1686.504343] protocol 88fb is buggy, dev hsr_slave_1 02:31:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89a3, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x20000000}], 0x0, 0x0, 0x0}) 02:31:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x0f', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:27 executing program 2: setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x101202, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000180)={0x0, 0xfff, 0x8, 0x400, 0xff, 0x1f8000000}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x4, 0x0, 0x2, 0x7ff, r1}, 0x10) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2b, 0x3}) clock_getres(0xf380ebf78eaf5710, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8004700d, &(0x7f0000000200)) [ 1687.647527] binder: 9722:9724 BC_REQUEST_DEATH_NOTIFICATION invalid ref 536870912 [ 1687.666033] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1687.680523] binder: BINDER_SET_CONTEXT_MGR already set 02:31:27 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/zero\x00', 0x4000c0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002540)='TIPCv2\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@local, 0xa, r2}) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000002800)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002580)={0x218, r1, 0x500, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5aae}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc46}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7c7489c4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) clock_getres(0xf380ebf78eaf5710, 0x0) [ 1687.696266] binder: 9722:9724 ioctl 40046207 0 returned -16 02:31:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00?', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x39, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x3f000000}], 0x0, 0x0, 0x0}) 02:31:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:27 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x12, 0x20000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x1f, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x4, 0x2000000000000, 0x200, 0x1}, 0xb) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x8, "3eb109297aae6a4d5f4d8726d1abadd92ef990cc56af1eabbf04450f8c4072e7", 0x0, 0x1800, 0x8, 0x0, 0x4, 0x3, 0x3ff, 0xffffffff}) [ 1687.859795] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1687.911641] binder: 9746:9747 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1056964608 [ 1687.934480] binder: BINDER_SET_CONTEXT_MGR already set [ 1687.949534] binder: 9746:9747 ioctl 40046207 0 returned -16 [ 1687.980166] binder: 9746:9751 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1056964608 [ 1688.179222] protocol 88fb is buggy, dev hsr_slave_0 [ 1688.184416] protocol 88fb is buggy, dev hsr_slave_1 02:31:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00@', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:30 executing program 2: clock_getres(0x7, 0x0) 02:31:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x53, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x48000000}], 0x0, 0x0, 0x0}) 02:31:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b1, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:30 executing program 2: clock_getres(0x6, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0x9}, &(0x7f0000000040), &(0x7f00000000c0), 0x8) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x101300, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0x10001, 0x8000, 0x0, 0x1000}, 0x10) [ 1690.711364] binder: 9761:9767 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1207959552 [ 1690.735279] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1690.758991] binder: BINDER_SET_CONTEXT_MGR already set 02:31:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\xff\xff\xff\xc3', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1690.786660] binder: 9761:9767 ioctl 40046207 0 returned -16 02:31:30 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) 02:31:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x4c000000}], 0x0, 0x0, 0x0}) 02:31:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2000001c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x40049409, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1691.073515] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1691.089235] binder: 9785:9788 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1275068416 [ 1691.103663] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1691.148133] binder: BINDER_SET_CONTEXT_MGR already set [ 1691.193687] binder: 9785:9788 ioctl 40046207 0 returned -16 [ 1691.216104] binder: 9785:9792 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1275068416 [ 1692.339208] net_ratelimit: 14 callbacks suppressed [ 1692.339217] protocol 88fb is buggy, dev hsr_slave_0 [ 1692.349378] protocol 88fb is buggy, dev hsr_slave_1 [ 1692.354504] protocol 88fb is buggy, dev hsr_slave_0 [ 1692.359614] protocol 88fb is buggy, dev hsr_slave_1 [ 1692.499159] protocol 88fb is buggy, dev hsr_slave_0 [ 1692.504247] protocol 88fb is buggy, dev hsr_slave_1 [ 1692.739240] protocol 88fb is buggy, dev hsr_slave_0 [ 1692.744345] protocol 88fb is buggy, dev hsr_slave_1 02:31:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\xff\xff\xfd\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:33 executing program 2: clock_getres(0xf380ebb78eaf5717, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) 02:31:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x14, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x4020940d, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x60000000}], 0x0, 0x0, 0x0}) 02:31:33 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x80, 0x4) clock_getres(0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00'}, &(0x7f00000001c0)=0x54) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x2d2000, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x6, 0x4) [ 1693.780367] binder: 9804:9805 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1610612736 [ 1693.804885] binder: BINDER_SET_CONTEXT_MGR already set [ 1693.825225] binder: 9804:9805 ioctl 40046207 0 returned -16 02:31:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\xff\xff\xff\xfe', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x33, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x402c5828, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1693.862051] binder: 9804:9809 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1610612736 02:31:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x34, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:33 executing program 2: clock_getres(0x4000000000000007, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 1693.954901] netlink: 'syz-executor.5': attribute type 51 has an invalid length. 02:31:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x68000000}], 0x0, 0x0, 0x0}) 02:31:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\xfd\xfd\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x402c582a, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x39, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1694.117840] binder: 9831:9832 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1744830464 [ 1694.188725] binder: BINDER_SET_CONTEXT_MGR already set [ 1694.232985] binder: 9831:9832 ioctl 40046207 0 returned -16 [ 1694.272899] binder: 9831:9832 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1744830464 [ 1694.419336] protocol 88fb is buggy, dev hsr_slave_0 [ 1694.424468] protocol 88fb is buggy, dev hsr_slave_1 02:31:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:36 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x5, 0x2000) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000180)={r1, 0x3}) ioctl$TIOCCONS(r0, 0x541d) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000040)={0x2, {{0xa, 0x4e23, 0x9, @mcast1, 0x7}}}, 0x84) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000001300)={0x8, 0x101, 0x1, {0xf, @win={{0x3f, 0xc05e, 0x401, 0xa5d}, 0x4, 0x0, &(0x7f00000002c0)={{0x4, 0x1, 0x200000000000000, 0x4}, &(0x7f0000000280)={{0xd358, 0x9, 0x9, 0x8}, &(0x7f0000000240)={{0x8001, 0xffff, 0x6, 0x1}}}}, 0xffffffffffff287c, &(0x7f0000000300)="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", 0x9}}}) dup(r0) r2 = getpgrp(0xffffffffffffffff) prctl$PR_SET_ENDIAN(0x14, 0x3) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x1f, 0x1, @tid=r2}, &(0x7f0000000200)) 02:31:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0xc0189436, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\xc3\xff\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x53, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x6c000000}], 0x0, 0x0, 0x0}) [ 1696.853098] binder: 9854:9856 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1811939328 [ 1696.888934] binder: BINDER_SET_CONTEXT_MGR already set 02:31:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x3c6, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\xfe\xff\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1696.906254] binder: 9854:9856 ioctl 40046207 0 returned -16 02:31:36 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140)) r1 = userfaultfd(0x800) r2 = dup(0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2022}, {r2, 0x2000}, {r3, 0x4}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={0x1000}, 0x8) clock_getres(0xf380ebf78eaf5710, 0x0) 02:31:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0xc020660b, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0x3, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:37 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = dup(0xffffffffffffff9c) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) [ 1697.125584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1698.579219] net_ratelimit: 14 callbacks suppressed [ 1698.579226] protocol 88fb is buggy, dev hsr_slave_0 [ 1698.589258] protocol 88fb is buggy, dev hsr_slave_1 [ 1698.594350] protocol 88fb is buggy, dev hsr_slave_0 [ 1698.599440] protocol 88fb is buggy, dev hsr_slave_1 [ 1698.739178] protocol 88fb is buggy, dev hsr_slave_0 [ 1698.744290] protocol 88fb is buggy, dev hsr_slave_1 [ 1698.979167] protocol 88fb is buggy, dev hsr_slave_0 [ 1698.984265] protocol 88fb is buggy, dev hsr_slave_1 02:31:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x74000000}], 0x0, 0x0, 0x0}) 02:31:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:39 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x101, 0x40, 0x78, 0x1f, 0x0, 0x4, 0x24002, 0x4, 0x9, 0x3, 0xc91, 0x100000003, 0x0, 0x522, 0x5, 0x8, 0x31e3c00000000000, 0x7, 0xffffffffffffc953, 0x2, 0x2, 0x401, 0x0, 0x1ff, 0x6, 0x7fffffff, 0x81, 0x100000000, 0xffff, 0x92, 0x9, 0x80000000, 0x30, 0x626efcb1, 0x6, 0x800, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x8282c0954ef9c091, 0x0, 0x7d1, 0x7, 0xc39, 0x97, 0x7}, r1, 0xa, r0, 0x8) 02:31:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0x7, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x10\x12\b\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1699.905510] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1699.915549] binder: 9886:9894 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1946157056 02:31:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1699.948883] binder: BINDER_SET_CONTEXT_MGR already set 02:31:39 executing program 2: clock_getres(0xf380ebf78eaf5710, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), 0x4) [ 1699.981785] binder: 9886:9898 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1946157056 [ 1699.993278] binder: 9886:9894 ioctl 40046207 0 returned -16 [ 1700.003636] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 02:31:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0x10, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:40 executing program 2: [ 1700.659221] protocol 88fb is buggy, dev hsr_slave_0 [ 1700.664356] protocol 88fb is buggy, dev hsr_slave_1 02:31:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x7a000000}], 0x0, 0x0, 0x0}) 02:31:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0x14, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:42 executing program 2: open$dir(&(0x7f0000000180)='./file0\x00', 0x396783d9bd871ceb, 0x3) 02:31:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x60fb) ftruncate(r1, 0x8200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) [ 1702.993670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1702.993881] binder: 9931:9932 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2046820352 02:31:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0x18, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1703.096138] binder: BINDER_SET_CONTEXT_MGR already set 02:31:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1703.124289] binder: 9931:9932 ioctl 40046207 0 returned -16 02:31:43 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-control\x00', 0x4002, 0x0) [ 1703.165019] binder: 9931:9932 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2046820352 02:31:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0xfdfdffff}], 0x0, 0x0, 0x0}) [ 1703.322140] binder: 9957:9958 BC_REQUEST_DEATH_NOTIFICATION invalid ref -33685505 [ 1703.377124] binder: BINDER_SET_CONTEXT_MGR already set [ 1703.404719] binder: 9957:9958 ioctl 40046207 0 returned -16 [ 1703.415440] binder: 9957:9960 BC_REQUEST_DEATH_NOTIFICATION invalid ref -33685505 [ 1704.829187] net_ratelimit: 14 callbacks suppressed [ 1704.829194] protocol 88fb is buggy, dev hsr_slave_0 [ 1704.839223] protocol 88fb is buggy, dev hsr_slave_1 [ 1704.844855] protocol 88fb is buggy, dev hsr_slave_0 [ 1704.849928] protocol 88fb is buggy, dev hsr_slave_1 [ 1704.989183] protocol 88fb is buggy, dev hsr_slave_0 [ 1704.994350] protocol 88fb is buggy, dev hsr_slave_1 [ 1705.219292] protocol 88fb is buggy, dev hsr_slave_0 [ 1705.224402] protocol 88fb is buggy, dev hsr_slave_1 02:31:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0x25, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) chdir(&(0x7f00000002c0)='./file0\x00') read$FUSE(r1, 0x0, 0x0) 02:31:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00 \x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0xfffffdfd}], 0x0, 0x0, 0x0}) [ 1706.081382] binder: 9963:9964 BC_REQUEST_DEATH_NOTIFICATION invalid ref -515 [ 1706.091703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1706.118128] binder: BINDER_SET_CONTEXT_MGR already set [ 1706.133524] binder: 9963:9964 ioctl 40046207 0 returned -16 [ 1706.144860] binder: 9963:9975 BC_REQUEST_DEATH_NOTIFICATION invalid ref -515 02:31:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x100000000000000}], 0x0, 0x0, 0x0}) 02:31:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0x34, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1706.285810] binder: 9984:9986 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1706.295036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1706.312498] binder: BINDER_SET_CONTEXT_MGR already set [ 1706.322509] binder: 9984:9986 ioctl 40046207 0 returned -16 02:31:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0x39, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1706.335746] binder: 9984:9989 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1706.418702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1706.899214] protocol 88fb is buggy, dev hsr_slave_0 [ 1706.904362] protocol 88fb is buggy, dev hsr_slave_1 02:31:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x200000000000000}], 0x0, 0x0, 0x0}) 02:31:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0x53, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:49 executing program 2: r0 = open(&(0x7f0000000140)='.\x00', 0x143042, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) write$P9_RLINK(r0, 0x0, 0x0) [ 1709.159461] binder: 10003:10007 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1709.170170] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1709.181691] binder: BINDER_SET_CONTEXT_MGR already set [ 1709.187007] binder: 10003:10007 ioctl 40046207 0 returned -16 02:31:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0x3e0, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1709.219118] binder: 10003:10013 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:31:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x300000000000000}], 0x0, 0x0, 0x0}) 02:31:49 executing program 2: recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0), 0x2000000000000116) [ 1709.327600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:31:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00 \x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1709.423602] binder: 10025:10026 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1709.521496] binder: BINDER_SET_CONTEXT_MGR already set [ 1709.526847] binder: 10025:10026 ioctl 40046207 0 returned -16 [ 1709.570111] binder: 10025:10037 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1711.059202] net_ratelimit: 14 callbacks suppressed [ 1711.059209] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.069289] protocol 88fb is buggy, dev hsr_slave_1 [ 1711.074387] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.079446] protocol 88fb is buggy, dev hsr_slave_1 [ 1711.229191] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.234279] protocol 88fb is buggy, dev hsr_slave_1 [ 1711.459187] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.464280] protocol 88fb is buggy, dev hsr_slave_1 02:31:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x2, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x400000000000000}], 0x0, 0x0, 0x0}) [ 1712.214181] binder: 10048:10049 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:31:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x3, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1712.296926] binder: BINDER_SET_CONTEXT_MGR already set 02:31:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1712.331089] binder: 10048:10049 ioctl 40046207 0 returned -16 02:31:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x5, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x500000000000000}], 0x0, 0x0, 0x0}) 02:31:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1712.543910] binder: 10069:10070 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1712.610026] binder: BINDER_SET_CONTEXT_MGR already set [ 1712.631685] binder: 10069:10070 ioctl 40046207 0 returned -16 [ 1712.686997] binder: 10069:10073 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1713.139201] protocol 88fb is buggy, dev hsr_slave_0 [ 1713.144347] protocol 88fb is buggy, dev hsr_slave_1 02:31:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x8, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x600000000000000}], 0x0, 0x0, 0x0}) 02:31:55 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 1715.300913] binder: 10082:10089 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1715.332219] binder: BINDER_SET_CONTEXT_MGR already set 02:31:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x9, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1715.368241] binder: 10082:10089 ioctl 40046207 0 returned -16 02:31:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x700000000000000}], 0x0, 0x0, 0x0}) 02:31:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x10, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1715.609973] binder: 10102:10103 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:31:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 1715.660698] binder: BINDER_SET_CONTEXT_MGR already set [ 1715.697633] binder: 10102:10103 ioctl 40046207 0 returned -16 [ 1715.728088] binder: 10102:10106 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:31:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x2000000000000000}], 0x0, 0x0, 0x0}) 02:31:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\xff\xff\xfd\xfd\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1715.903183] binder: 10119:10120 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1715.932137] binder: BINDER_SET_CONTEXT_MGR already set [ 1715.950274] binder: 10119:10120 ioctl 40046207 0 returned -16 [ 1717.299199] net_ratelimit: 14 callbacks suppressed [ 1717.299206] protocol 88fb is buggy, dev hsr_slave_0 [ 1717.309340] protocol 88fb is buggy, dev hsr_slave_1 [ 1717.314483] protocol 88fb is buggy, dev hsr_slave_0 [ 1717.319590] protocol 88fb is buggy, dev hsr_slave_1 [ 1717.459201] protocol 88fb is buggy, dev hsr_slave_0 [ 1717.464296] protocol 88fb is buggy, dev hsr_slave_1 [ 1717.699248] protocol 88fb is buggy, dev hsr_slave_0 [ 1717.704436] protocol 88fb is buggy, dev hsr_slave_1 02:31:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x14, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\xfd\xfd\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x3f00000000000000}], 0x0, 0x0, 0x0}) [ 1718.337810] binder: 10135:10136 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:31:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x25, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1718.405483] binder: BINDER_SET_CONTEXT_MGR already set [ 1718.418217] binder: 10135:10136 ioctl 40046207 0 returned -16 02:31:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00 \x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1718.499650] binder: 10135:10136 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:31:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x34, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x4800000000000000}], 0x0, 0x0, 0x0}) 02:31:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x39, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1718.794991] binder: 10160:10165 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1718.847715] binder: BINDER_SET_CONTEXT_MGR already set 02:31:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1718.871044] binder: 10160:10165 ioctl 40046207 0 returned -16 [ 1718.896168] binder: 10160:10168 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:31:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x53, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x4c00000000000000}], 0x0, 0x0, 0x0}) 02:31:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x9a, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1719.170721] binder: 10182:10183 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1719.231025] binder: BINDER_SET_CONTEXT_MGR already set 02:31:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1719.260221] binder: 10182:10183 ioctl 40046207 0 returned -16 02:31:59 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200, 0x0) getresuid(0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00\x06\x00\x00\x00\x01\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, &(0x7f0000000140)=0x54) 02:31:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x6000000000000000}], 0x0, 0x0, 0x0}) [ 1719.379345] protocol 88fb is buggy, dev hsr_slave_0 [ 1719.384480] protocol 88fb is buggy, dev hsr_slave_1 02:31:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x103, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1719.558488] binder: 10208:10209 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1719.645146] binder: BINDER_SET_CONTEXT_MGR already set [ 1719.666220] binder: 10208:10209 ioctl 40046207 0 returned -16 [ 1719.673025] binder: 10208:10215 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:31:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:31:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:31:59 executing program 2: r0 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @rand_addr="ab25899de34ca79c823d924c68c25f2f"}}}, 0x90) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) tkill(r0, 0x1000000000016) 02:31:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:31:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x300, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:31:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x6800000000000000}], 0x0, 0x0, 0x0}) 02:31:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x301, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1720.019570] binder: 10221:10227 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:00 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000240)={0x0, 0x1, 0x0, [0xffe7], &(0x7f00000000c0)={0x98f905, 0x7, [0xffe7], @value64=0x400000}}) [ 1720.070111] binder: BINDER_SET_CONTEXT_MGR already set [ 1720.079948] binder: 10221:10231 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1720.103569] binder: 10221:10227 ioctl 40046207 0 returned -16 02:32:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\xff\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x30c, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x6c00000000000000}], 0x0, 0x0, 0x0}) [ 1720.396530] binder: 10251:10252 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1720.450457] binder: BINDER_SET_CONTEXT_MGR already set [ 1720.485760] binder: 10251:10252 ioctl 40046207 0 returned -16 02:32:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x7c00, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x7400000000000000}], 0x0, 0x0, 0x0}) 02:32:00 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000380)={0x1d, r1}, 0x10) 02:32:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf000}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="f2ff0f000a000200aaaaaaaaaa26eed3"], 0x1}}, 0x0) 02:32:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\xff\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1720.903608] binder: BINDER_SET_CONTEXT_MGR already set [ 1720.923547] binder: 10258:10260 ioctl 40046207 0 returned -16 02:32:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x7a00000000000000}], 0x0, 0x0, 0x0}) 02:32:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x7ffffff9, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:01 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) bind$can_raw(r0, &(0x7f0000000380)={0x1d, r1}, 0x10) getpid() stat(0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) [ 1721.124818] binder: BINDER_SET_CONTEXT_MGR already set 02:32:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\xfd\xfd\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0xffffff1f, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1721.158272] binder: 10281:10283 ioctl 40046207 0 returned -16 [ 1721.189807] binder: 10281:10287 Acquire 1 refcount change on invalid ref 0 ret -22 02:32:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\xc3\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1721.242877] binder: 10281:10287 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:32:01 executing program 2: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) socket$xdp(0x2c, 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x4e22, @multicast1}, 0x200, 0x7, 0x3, 0x0, 0x0, 0x0, 0x2, 0x7, 0xceb}) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x7) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000340)=""/60) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000100)=0x3c, 0x4) 02:32:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x80\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, '\np6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0xfdfdffff00000000}], 0x0, 0x0, 0x0}) 02:32:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\xfe\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1ba) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) getresuid(0x0, 0x0, 0x0) r3 = dup3(r1, r2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x831, r3, 0x0) [ 1721.524611] binder: BINDER_SET_CONTEXT_MGR already set 02:32:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, '%p6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1721.576693] binder: 10322:10323 ioctl 40046207 0 returned -16 02:32:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x2, 0x0, 0x0}) 02:32:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'i\n6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1721.839647] binder: 10359:10362 ioctl c0306201 20008fd0 returned -14 02:32:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1721.893705] binder: BINDER_SET_CONTEXT_MGR already set [ 1721.946578] binder: 10359:10362 ioctl 40046207 0 returned -16 02:32:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'i%6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x3, 0x0, 0x0}) 02:32:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\xff\xff\xfd\xfd\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 1722.381017] binder: 10463:10466 ioctl c0306201 20008fd0 returned -14 [ 1722.410525] binder: BINDER_SET_CONTEXT_MGR already set [ 1722.429483] binder: 10463:10466 ioctl 40046207 0 returned -16 [ 1722.440172] binder: 10463:10467 ioctl c0306201 20008fd0 returned -14 02:32:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) 02:32:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip\ntnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x4, 0x0, 0x0}) 02:32:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\xff\xff\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1722.650133] binder: 10485:10486 ioctl c0306201 20008fd0 returned -14 02:32:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip#tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1722.747300] binder: BINDER_SET_CONTEXT_MGR already set 02:32:02 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = gettid() bind$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) open$dir(0x0, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) tkill(r0, 0x2001000000000016) [ 1722.804453] binder: 10485:10486 ioctl 40046207 0 returned -16 02:32:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip+tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5, 0x0, 0x0}) 02:32:03 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40440, 0x0) 02:32:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip-tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:03 executing program 2: munmap(&(0x7f0000552000/0x4000)=nil, 0x4000) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) fdatasync(r0) [ 1723.323738] binder: 10518:10519 ioctl c0306201 20008fd0 returned -14 [ 1723.340508] binder: BINDER_SET_CONTEXT_MGR already set [ 1723.345836] binder: 10518:10519 ioctl 40046207 0 returned -16 02:32:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip0tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x6, 0x0, 0x0}) [ 1723.539172] net_ratelimit: 14 callbacks suppressed [ 1723.539181] protocol 88fb is buggy, dev hsr_slave_0 [ 1723.549332] protocol 88fb is buggy, dev hsr_slave_1 [ 1723.554465] protocol 88fb is buggy, dev hsr_slave_0 [ 1723.559583] protocol 88fb is buggy, dev hsr_slave_1 02:32:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1723.699215] protocol 88fb is buggy, dev hsr_slave_0 [ 1723.704426] protocol 88fb is buggy, dev hsr_slave_1 [ 1723.735162] binder_thread_write: 10 callbacks suppressed [ 1723.735173] binder: 10549:10551 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1723.798450] binder: 10549:10551 ioctl c0306201 20008fd0 returned -14 [ 1723.840994] binder: BINDER_SET_CONTEXT_MGR already set [ 1723.874941] binder: 10549:10551 ioctl 40046207 0 returned -16 [ 1723.939247] protocol 88fb is buggy, dev hsr_slave_0 [ 1723.944375] protocol 88fb is buggy, dev hsr_slave_1 02:32:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00 \x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ipStnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x7, 0x0, 0x0}) 02:32:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) 02:32:04 executing program 2: [ 1724.246676] binder: 10565:10568 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1724.293216] binder: 10565:10568 ioctl c0306201 20008fd0 returned -14 [ 1724.326235] binder: BINDER_SET_CONTEXT_MGR already set [ 1724.359861] binder: 10565:10568 ioctl 40046207 0 returned -16 02:32:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6\nnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1724.400250] binder: 10565:10568 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1724.430933] binder: 10565:10568 ioctl c0306201 20008fd0 returned -14 02:32:04 executing program 2: 02:32:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x48, 0x0, 0x0}) [ 1724.690471] binder: 10587:10588 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1724.732206] binder: 10587:10588 ioctl c0306201 20008fd0 returned -14 [ 1724.772029] binder: BINDER_SET_CONTEXT_MGR already set [ 1724.826436] binder: 10587:10588 ioctl 40046207 0 returned -16 [ 1724.863496] binder: 10587:10596 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1724.896656] binder: 10587:10596 ioctl c0306201 20008fd0 returned -14 02:32:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:05 executing program 2: 02:32:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6%nl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x4c, 0x0, 0x0}) 02:32:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:05 executing program 2: [ 1725.117984] binder: 10602:10606 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1725.148173] binder: 10602:10606 ioctl c0306201 20008fd0 returned -14 02:32:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1725.191176] binder: BINDER_SET_CONTEXT_MGR already set 02:32:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00 \x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6t\nl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1725.228478] binder: 10602:10606 ioctl 40046207 0 returned -16 02:32:05 executing program 2: 02:32:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x60, 0x0, 0x0}) [ 1725.426462] binder: 10628:10629 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1725.449621] binder: 10628:10629 ioctl c0306201 20008fd0 returned -14 [ 1725.515517] binder: BINDER_SET_CONTEXT_MGR already set [ 1725.531158] binder: 10628:10629 ioctl 40046207 0 returned -16 [ 1725.556640] binder: 10628:10634 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1725.599410] binder: 10628:10634 ioctl c0306201 20008fd0 returned -14 [ 1725.624157] protocol 88fb is buggy, dev hsr_slave_0 [ 1725.629311] protocol 88fb is buggy, dev hsr_slave_1 02:32:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:05 executing program 2: 02:32:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x03', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6t%l\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x68, 0x0, 0x0}) 02:32:05 executing program 2: [ 1726.043419] binder: 10643:10644 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x0f', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tn\n\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1726.090768] binder: 10643:10644 ioctl c0306201 20008fd0 returned -14 [ 1726.128249] binder: BINDER_SET_CONTEXT_MGR already set [ 1726.166607] binder: 10643:10644 ioctl 40046207 0 returned -16 [ 1726.202726] binder: 10643:10654 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:06 executing program 2: 02:32:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1726.234804] binder: 10643:10654 ioctl c0306201 20008fd0 returned -14 02:32:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00?', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x6c, 0x0, 0x0}) 02:32:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tn%\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:06 executing program 2: 02:32:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00@', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:06 executing program 2: 02:32:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1726.949551] binder: 10673:10677 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1726.970809] binder: 10673:10677 ioctl c0306201 20008fd0 returned -14 [ 1727.002722] binder: BINDER_SET_CONTEXT_MGR already set 02:32:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tn.\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1727.058402] binder: 10673:10677 ioctl 40046207 0 returned -16 02:32:07 executing program 2: 02:32:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1727.117397] binder: 10673:10690 ioctl c0306201 20008fd0 returned -14 02:32:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x74, 0x0, 0x0}) 02:32:07 executing program 2: 02:32:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\xff\xff\xfd\xfd\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnL\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:07 executing program 2: socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 1727.869349] binder: 10713:10715 ioctl c0306201 20008fd0 returned -14 [ 1727.900444] binder: BINDER_SET_CONTEXT_MGR already set 02:32:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\xfd\xfd\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1727.918289] binder: 10713:10715 ioctl 40046207 0 returned -16 02:32:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnu\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1727.948194] binder: 10713:10722 ioctl c0306201 20008fd0 returned -14 02:32:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x7a, 0x0, 0x0}) 02:32:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1728.120657] binder: 10737:10738 ioctl c0306201 20008fd0 returned -14 [ 1728.168354] binder: BINDER_SET_CONTEXT_MGR already set [ 1728.205047] binder: 10737:10738 ioctl 40046207 0 returned -16 02:32:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x02'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00 \x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x300, 0x0, 0x0}) [ 1728.690327] binder: 10746:10747 ioctl c0306201 20008fd0 returned -14 [ 1728.718076] binder: BINDER_SET_CONTEXT_MGR already set [ 1728.740514] binder: 10746:10747 ioctl 40046207 0 returned -16 [ 1728.763892] binder_thread_write: 5 callbacks suppressed [ 1728.763904] binder: 10746:10757 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1728.796336] binder: 10746:10757 ioctl c0306201 20008fd0 returned -14 02:32:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@flushpolicy={0x10, 0x1d, 0x311}, 0x10}}, 0x0) 02:32:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x03'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x500, 0x0, 0x0}) 02:32:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x04'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1729.091397] binder: 10774:10777 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1729.146458] binder: 10774:10777 ioctl c0306201 20008fd0 returned -14 [ 1729.166793] binder: BINDER_SET_CONTEXT_MGR already set [ 1729.200946] binder: 10774:10777 ioctl 40046207 0 returned -16 02:32:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x20000000007b, 0x0, [0x40000004]}) 02:32:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x0f', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x05'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x600, 0x0, 0x0}) 02:32:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1729.573477] binder: 10794:10795 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1729.601807] kvm [10790]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000004 [ 1729.614754] binder: 10794:10795 ioctl c0306201 20008fd0 returned -14 [ 1729.664289] binder: BINDER_SET_CONTEXT_MGR already set 02:32:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x06'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00?', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1729.691011] binder: 10794:10795 ioctl 40046207 0 returned -16 02:32:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x700, 0x0, 0x0}) 02:32:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\xfd\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1729.780533] net_ratelimit: 14 callbacks suppressed [ 1729.780542] protocol 88fb is buggy, dev hsr_slave_0 [ 1729.790646] protocol 88fb is buggy, dev hsr_slave_1 [ 1729.795800] protocol 88fb is buggy, dev hsr_slave_0 [ 1729.800930] protocol 88fb is buggy, dev hsr_slave_1 02:32:09 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) flistxattr(r0, &(0x7f00000011c0)=""/157, 0x1f) 02:32:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\a'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00@', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1729.939193] protocol 88fb is buggy, dev hsr_slave_0 [ 1729.944326] protocol 88fb is buggy, dev hsr_slave_1 [ 1729.950812] binder: 10819:10821 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\xc3\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1730.044953] binder: 10819:10821 ioctl c0306201 20008fd0 returned -14 02:32:10 executing program 2: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000800)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000007c0)={0x4, 0x80000001, 0x1}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) wait4(r2, &(0x7f00000002c0), 0x0, 0x0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r2, 0x10000) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) r3 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000680)={{{@in, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@local}}, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000840)=[@in6={0xa, 0x4e23, 0x0, @dev, 0x1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x100000000, @mcast2, 0x1}, @in6={0xa, 0x4e20, 0xffff, @loopback, 0x7fffffff}, @in={0x2, 0x4e24}], 0x74) setxattr$security_capability(0x0, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000780)=@v2={0x2000000, [{0xe24, 0xffff}, {0x2}]}, 0x14, 0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000280)={0x8001001, 0x3cb, 0x3}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1730.115710] binder: BINDER_SET_CONTEXT_MGR already set 02:32:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\b'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\xfe\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1730.162323] binder: 10819:10821 ioctl 40046207 0 returned -16 [ 1730.179249] protocol 88fb is buggy, dev hsr_slave_0 [ 1730.184417] protocol 88fb is buggy, dev hsr_slave_1 02:32:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 1730.223835] binder: 10819:10838 Acquire 1 refcount change on invalid ref 0 ret -22 02:32:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1730.309633] binder: 10819:10838 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:32:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x2000, 0x0, 0x0}) 02:32:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x80', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\n'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 1730.576269] binder: 10874:10875 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1730.624263] binder: 10874:10875 ioctl c0306201 20008fd0 returned -14 02:32:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\f'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1730.680430] binder: BINDER_SET_CONTEXT_MGR already set [ 1730.685773] binder: 10874:10875 ioctl 40046207 0 returned -16 02:32:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\xff\xff\xfd\xfd', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1730.798001] binder: 10874:10890 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 02:32:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e, 0x7400000000000000}], 0x0, 0x0, 0x0}) [ 1730.876704] binder: 10874:10890 ioctl c0306201 20008fd0 returned -14 [ 1730.982108] binder: 10898:10899 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x0e'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x3f00, 0x0, 0x0}) 02:32:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:11 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\xff\xff\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1731.174650] binder: 10910:10913 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x0f'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1731.229604] binder: 10910:10913 ioctl c0306201 20008fd0 returned -14 [ 1731.265366] binder: BINDER_SET_CONTEXT_MGR already set 02:32:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1731.292672] binder: 10910:10913 ioctl 40046207 0 returned -16 [ 1731.325485] binder: 10910:10919 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1731.400266] binder: 10910:10919 ioctl c0306201 20008fd0 returned -14 02:32:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x10'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x4800, 0x0, 0x0}) [ 1731.693887] binder: 10940:10941 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1731.734281] binder: 10940:10941 ioctl c0306201 20008fd0 returned -14 [ 1731.746055] binder: BINDER_SET_CONTEXT_MGR already set [ 1731.780891] binder: 10940:10941 ioctl 40046207 0 returned -16 [ 1731.796919] binder: 10940:10943 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1731.814710] binder: 10940:10943 ioctl c0306201 20008fd0 returned -14 [ 1731.859182] protocol 88fb is buggy, dev hsr_slave_0 [ 1731.864350] protocol 88fb is buggy, dev hsr_slave_1 02:32:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnlH'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x4c00, 0x0, 0x0}) 02:32:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnlL'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 1734.207598] binder: 10964:10966 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1734.269391] binder: 10964:10966 ioctl c0306201 20008fd0 returned -14 02:32:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl`'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1734.331169] binder: BINDER_SET_CONTEXT_MGR already set [ 1734.412871] binder: 10964:10978 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1734.413218] binder: 10964:10966 ioctl 40046207 0 returned -16 [ 1734.456653] binder: 10964:10978 ioctl c0306201 20008fd0 returned -14 02:32:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00 \x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x6000, 0x0, 0x0}) 02:32:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnlh'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1734.733112] binder: 10988:10991 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1734.776224] binder: 10988:10991 ioctl c0306201 20008fd0 returned -14 [ 1734.801292] binder: BINDER_SET_CONTEXT_MGR already set [ 1734.842845] binder: 10988:10991 ioctl 40046207 0 returned -16 02:32:14 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnll'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x6800, 0x0, 0x0}) 02:32:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 1735.103066] binder: 11003:11005 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1735.136406] binder: 11003:11005 ioctl c0306201 20008fd0 returned -14 [ 1735.167592] binder: BINDER_SET_CONTEXT_MGR already set 02:32:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnlt'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1735.198734] binder: 11003:11005 ioctl 40046207 0 returned -16 02:32:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x6c00, 0x0, 0x0}) [ 1735.396834] binder: 11024:11025 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x03', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnlz'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1735.445371] binder: 11024:11025 ioctl c0306201 20008fd0 returned -14 [ 1735.512232] binder: BINDER_SET_CONTEXT_MGR already set [ 1735.555409] binder: 11024:11025 ioctl 40046207 0 returned -16 [ 1735.600780] binder: 11024:11030 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1735.635364] binder: 11024:11030 ioctl c0306201 20008fd0 returned -14 [ 1736.019175] net_ratelimit: 14 callbacks suppressed [ 1736.019182] protocol 88fb is buggy, dev hsr_slave_0 [ 1736.029231] protocol 88fb is buggy, dev hsr_slave_1 [ 1736.034327] protocol 88fb is buggy, dev hsr_slave_0 [ 1736.039419] protocol 88fb is buggy, dev hsr_slave_1 [ 1736.179201] protocol 88fb is buggy, dev hsr_slave_0 [ 1736.184367] protocol 88fb is buggy, dev hsr_slave_1 [ 1736.419230] protocol 88fb is buggy, dev hsr_slave_0 [ 1736.424377] protocol 88fb is buggy, dev hsr_slave_1 [ 1738.099159] protocol 88fb is buggy, dev hsr_slave_0 [ 1738.104264] protocol 88fb is buggy, dev hsr_slave_1 02:32:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00 \x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x04', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x7400, 0x0, 0x0}) 02:32:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x99'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 1738.190870] binder: 11040:11041 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x0f', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1738.247383] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 1738.272474] binder: 11040:11041 ioctl c0306201 20008fd0 returned -14 02:32:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1738.318449] binder: BINDER_SET_CONTEXT_MGR already set 02:32:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\xf0'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:18 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) getuid() ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 1738.362710] binder: 11040:11055 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1738.441631] binder: 11040:11041 ioctl 40046207 0 returned -16 [ 1738.476417] binder: 11040:11055 ioctl c0306201 20008fd0 returned -14 02:32:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x7a00, 0x0, 0x0}) 02:32:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x03'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1738.694482] binder: 11073:11075 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1738.754697] binder: 11073:11075 ioctl c0306201 20008fd0 returned -14 [ 1738.784215] binder: BINDER_SET_CONTEXT_MGR already set 02:32:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1738.810279] binder: 11073:11075 ioctl 40046207 0 returned -16 [ 1738.842122] binder: 11073:11081 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1738.876191] binder: 11073:11081 ioctl c0306201 20008fd0 returned -14 [ 1738.997347] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:32:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x1000000, 0x0, 0x0}) 02:32:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1739.149216] binder: 11093:11094 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1739.192115] binder: 11093:11094 ioctl c0306201 20008fd0 returned -14 [ 1739.219309] binder: BINDER_SET_CONTEXT_MGR already set [ 1739.228959] binder: 11093:11094 ioctl 40046207 0 returned -16 02:32:21 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) getuid() ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x01'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x2000000, 0x0, 0x0}) 02:32:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 1741.548708] binder: 11110:11111 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1741.602127] binder: 11110:11111 ioctl c0306201 20008fd0 returned -14 02:32:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\xff\xff\xfd\xfd\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1741.650966] binder: BINDER_SET_CONTEXT_MGR already set [ 1741.656309] binder: 11110:11111 ioctl 40046207 0 returned -16 [ 1741.686056] binder: 11110:11123 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1741.719422] binder: 11110:11123 ioctl c0306201 20008fd0 returned -14 02:32:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\xfd\xfd\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x3000000, 0x0, 0x0}) 02:32:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1741.912178] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1741.935067] binder: 11132:11137 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1742.049509] binder: 11132:11137 ioctl c0306201 20008fd0 returned -14 [ 1742.064328] binder: BINDER_SET_CONTEXT_MGR already set [ 1742.107395] binder: 11132:11142 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1742.152631] binder: 11132:11137 ioctl 40046207 0 returned -16 [ 1742.166422] binder: 11132:11142 ioctl c0306201 20008fd0 returned -14 [ 1742.259197] net_ratelimit: 14 callbacks suppressed [ 1742.259205] protocol 88fb is buggy, dev hsr_slave_0 [ 1742.269384] protocol 88fb is buggy, dev hsr_slave_1 [ 1742.274544] protocol 88fb is buggy, dev hsr_slave_0 [ 1742.279678] protocol 88fb is buggy, dev hsr_slave_1 [ 1742.419155] protocol 88fb is buggy, dev hsr_slave_0 [ 1742.424249] protocol 88fb is buggy, dev hsr_slave_1 [ 1742.659192] protocol 88fb is buggy, dev hsr_slave_0 [ 1742.664295] protocol 88fb is buggy, dev hsr_slave_1 [ 1744.339228] protocol 88fb is buggy, dev hsr_slave_0 [ 1744.344338] protocol 88fb is buggy, dev hsr_slave_1 02:32:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00 ', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:24 executing program 2 (fault-call:0 fault-nth:0): setitimer(0x1, 0x0, 0x0) 02:32:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x4000000, 0x0, 0x0}) [ 1744.691184] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1744.714284] binder: 11153:11154 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1744.769212] binder: 11153:11154 ioctl c0306201 20008fd0 returned -14 [ 1744.794438] binder: BINDER_SET_CONTEXT_MGR already set 02:32:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:24 executing program 2: setitimer(0x1, 0x0, 0x0) [ 1744.823838] binder: 11153:11154 ioctl 40046207 0 returned -16 02:32:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1744.919722] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:32:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x5000000, 0x0, 0x0}) 02:32:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:24 executing program 2: setitimer(0x2, 0x0, 0x0) 02:32:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1745.106545] binder: 11176:11178 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1745.126201] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1745.131409] binder: 11176:11178 ioctl c0306201 20008fd0 returned -14 [ 1745.199706] binder: BINDER_SET_CONTEXT_MGR already set [ 1745.229556] binder: 11176:11178 ioctl 40046207 0 returned -16 02:32:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:25 executing program 2: setitimer(0x0, 0x0, 0x0) 02:32:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x6000000, 0x0, 0x0}) [ 1745.549911] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1745.557615] binder: 11195:11196 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:25 executing program 2: setitimer(0xfffffffffffffffd, 0x0, 0x0) [ 1745.597160] binder: 11195:11196 ioctl c0306201 20008fd0 returned -14 02:32:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1745.649185] binder: BINDER_SET_CONTEXT_MGR already set [ 1745.654530] binder: 11195:11196 ioctl 40046207 0 returned -16 02:32:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:25 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x840) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x20, 0x1000, 0x4, 0x4, 0xffffffffffffffff, 0x1a0d}) setitimer(0x1, 0x0, 0x0) 02:32:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x7000000, 0x0, 0x0}) 02:32:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1745.813753] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:32:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1746.040878] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1746.063213] binder: 11224:11228 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:26 executing program 2: setitimer(0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x620, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}}, 0x8000) 02:32:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\xff', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1746.098428] binder: 11224:11228 ioctl c0306201 20008fd0 returned -14 [ 1746.132871] binder: BINDER_SET_CONTEXT_MGR already set [ 1746.162646] binder: 11224:11228 ioctl 40046207 0 returned -16 [ 1746.201358] binder: 11224:11231 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1746.227734] binder: 11224:11231 ioctl c0306201 20008fd0 returned -14 02:32:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:26 executing program 2: setitimer(0x0, 0x0, 0x0) 02:32:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x20000000, 0x0, 0x0}) [ 1746.412851] binder: 11247:11248 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1746.425001] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:32:26 executing program 2: setitimer(0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) getpgrp(r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xf9, 0x100, 0x7f, 0xc4, 0x8, 0x7ff, 0x8, {0x0, @in6={{0xa, 0x4e22, 0x4, @remote, 0x100000000}}, 0x74e, 0x1f, 0x1, 0x3ff, 0x20}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, 0x4) [ 1746.454023] binder: 11247:11248 ioctl c0306201 20008fd0 returned -14 [ 1746.479803] binder: BINDER_SET_CONTEXT_MGR already set [ 1746.494509] binder: 11247:11248 ioctl 40046207 0 returned -16 02:32:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\xc3', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1746.505725] binder: 11247:11256 ioctl c0306201 20008fd0 returned -14 02:32:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\xba'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:26 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10800, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41001400}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d8, r1, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffffff9d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7a2}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa7c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="1b000000190081ace4051cecff091ffa1c4f99a61cfe7084bce26a", 0x1b}], 0x1}, 0x0) setitimer(0x1, 0x0, 0x0) 02:32:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x3f000000, 0x0, 0x0}) [ 1746.746653] binder_thread_write: 1 callbacks suppressed [ 1746.746664] binder: 11273:11275 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1746.812116] binder: 11273:11275 ioctl c0306201 20008fd0 returned -14 [ 1746.858188] binder: BINDER_SET_CONTEXT_MGR already set [ 1746.886690] binder: 11273:11275 ioctl 40046207 0 returned -16 02:32:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\xfe', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:27 executing program 2: setitimer(0x5, 0x0, 0x0) 02:32:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x48000000, 0x0, 0x0}) 02:32:27 executing program 2: setitimer(0x1, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000040)={0x81, 0x2, 0x20, "e053705746db5b26c2d0afe7e92b2f2cc19da580d13a3efbd66aab23207ff82430bc8724844721d00b092698e0d0b7ba7687c32a73b51efc12a2ee8b", 0x2, "31033b200c71656d69470fa688d6d5a2e13313dd7c5c03adbae8a09b73acce01a81edd1bfaaf1c31480410d0be273d18d09bb92616b530f180def727", 0x80}) [ 1747.273838] binder: 11287:11289 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1747.306442] binder: 11287:11289 ioctl c0306201 20008fd0 returned -14 [ 1747.325064] binder: BINDER_SET_CONTEXT_MGR already set [ 1747.330753] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1747.349336] binder: 11287:11289 ioctl 40046207 0 returned -16 [ 1747.365502] binder: 11287:11298 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:27 executing program 2: setitimer(0x3, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x501dc0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000180)={0x1000000000000017, 0x170, &(0x7f00000004c0)="0260f578a81cce2ec5d06038e9c18b8c3f432cc8d960320a4ab00164b4239831e88ba663a528c5e3e23bcf869d728cdeb910b2d8fef2c398dd8d1de8d73e12ae02527ae066fbb4ecd98d5382bf155f81cbf696e46248b6cd3178fba3c3350e789883003811ec58753f36f323e65b272ad909b403677c96d5607dac753f9b30899ca2f41fadae2b3812ffe206dcc0d539a94d16d40e26360a9213a51833e43394beba3f239c09fa7a35303e0867bf90925d4a678aa99c5027c9776d448d3cfae3d6c2755f574d67dc07b675e4177aef3c0f1c1d21265ec4e613fbcc7f366f01dbcb498622859bf70b02d913f27a4e90c51cec07704dfb9329e678d2c5b885b8e7b7e42bdb5a575da19c177302744379bdff178c77343889bb27596ecb154b0500c6845911b24a22d387004e9b80f177f22bbc5f1caa25ceb699b0c268729284ce5429953136a9dac3f04ceb3007516ade398f676698e2685a37cfddb1b8e78ced8469513d27fa7cf5ccbf9cf59e84f3f9"}) 02:32:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1747.401463] binder: 11287:11298 ioctl c0306201 20008fd0 returned -14 02:32:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\xff\xff\xff', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x4c000000, 0x0, 0x0}) [ 1747.548578] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1747.600613] binder: 11316:11317 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1747.634507] binder: 11316:11317 ioctl c0306201 20008fd0 returned -14 [ 1747.706947] binder: BINDER_SET_CONTEXT_MGR already set [ 1747.715010] binder: 11316:11317 ioctl 40046207 0 returned -16 [ 1747.727386] binder: 11316:11321 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1747.743412] binder: 11316:11321 ioctl c0306201 20008fd0 returned -14 02:32:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:28 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) setitimer(0x3, 0x0, 0x0) 02:32:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x60000000, 0x0, 0x0}) [ 1748.148328] binder: 11329:11331 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1748.180829] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1748.186659] binder: 11329:11331 ioctl c0306201 20008fd0 returned -14 02:32:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:28 executing program 2: setitimer(0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x100) [ 1748.226057] binder: BINDER_SET_CONTEXT_MGR already set 02:32:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1748.263848] binder: 11329:11331 ioctl 40046207 0 returned -16 02:32:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1748.306761] binder: 11329:11337 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1748.342146] binder: 11329:11337 ioctl c0306201 20008fd0 returned -14 02:32:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:28 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x24000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8001006, 0x6c, 0x1}) setitimer(0x1, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 02:32:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x68000000, 0x0, 0x0}) 02:32:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnle'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1748.499207] net_ratelimit: 14 callbacks suppressed [ 1748.499216] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.509394] protocol 88fb is buggy, dev hsr_slave_1 [ 1748.514549] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.519705] protocol 88fb is buggy, dev hsr_slave_1 02:32:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1748.588600] binder: 11357:11358 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1748.628905] binder: 11357:11358 ioctl c0306201 20008fd0 returned -14 [ 1748.659181] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.664367] protocol 88fb is buggy, dev hsr_slave_1 02:32:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 02:32:28 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) setitimer(0x0, 0x0, 0x0) [ 1748.692004] binder: BINDER_SET_CONTEXT_MGR already set 02:32:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1748.736380] binder: 11357:11358 ioctl 40046207 0 returned -16 [ 1748.799381] binder: 11357:11372 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:28 executing program 2: setitimer(0x1, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x2000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000e40)=ANY=[@ANYBLOB="010000000100000001000000000000000400000000000091f962a600010000000100000000000000000000000907000100000000000000000000001d000015000053a10000000000000000000000000000000000f28a3e042bef7152fc7c0476ad5067a7c580eea00eed9ced324f8bfe0caa8cdd962dd55452d825d45f6ee6dcc314b5db60f95a5c63887bd1a246a179cb87b008c41af8ac208ff04b44fa91d4cf14ab41839b1566be40d5b0bbe50e98b5e75249628468101eb84977ed"]) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x8}}, 0xfffffeae) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) 02:32:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1748.860529] binder: 11357:11372 ioctl c0306201 20008fd0 returned -14 [ 1748.899222] protocol 88fb is buggy, dev hsr_slave_0 [ 1748.904347] protocol 88fb is buggy, dev hsr_slave_1 02:32:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00 \x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x6c000000, 0x0, 0x0}) 02:32:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 02:32:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnlX'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1748.991532] QAT: Invalid ioctl [ 1748.998794] QAT: Invalid ioctl 02:32:29 executing program 2: setitimer(0x4002, 0x0, 0x0) personality(0x404000a) [ 1749.079453] binder: 11403:11404 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) [ 1749.148870] binder: 11403:11404 ioctl c0306201 20008fd0 returned -14 [ 1749.174330] binder: BINDER_SET_CONTEXT_MGR already set 02:32:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:29 executing program 2: setitimer(0x200000000000001, 0x0, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', '^\x00'}) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$netlink(r0, 0x10e, 0xf, &(0x7f0000000000)=""/176, &(0x7f00000000c0)=0xb0) [ 1749.215833] binder: 11403:11404 ioctl 40046207 0 returned -16 02:32:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x74000000, 0x0, 0x0}) 02:32:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:29 executing program 2: setitimer(0xfffffffffffffffe, 0x0, 0x0) [ 1749.413298] binder: 11428:11431 ioctl c0306201 20008fd0 returned -14 [ 1749.444661] binder: BINDER_SET_CONTEXT_MGR already set [ 1749.498453] binder: 11428:11431 ioctl 40046207 0 returned -16 02:32:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) 02:32:29 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0445609, &(0x7f00000000c0)={0xff2, 0x0, 0x4, 0x400, {0x0, 0x2710}, {0x3, 0xc, 0x4, 0xffff, 0x7, 0xff, "89a7dbcc"}, 0x73d74980, 0x2, @userptr=0xfffffffffffffffe, 0x4}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'erspan0\x00', {0x2, 0x4e24, @rand_addr=0x2}}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000140)) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18, 0xb8121a907278118e, 0x8, {0x7ff}}, 0x18) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-', 0x4b1c}, 0x28, 0x3) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x9) setitimer(0x1, 0x0, 0x0) 02:32:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x7a000000, 0x0, 0x0}) 02:32:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:29 executing program 2: setitimer(0x1, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="820000002800000000000000ffff0000010000005fb400000200000002020000000000000100000002000000ff030000"]) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000080), 0x4) 02:32:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 1749.743780] binder: 11454:11456 ioctl c0306201 20008fd0 returned -14 [ 1749.795774] validate_nla: 5 callbacks suppressed [ 1749.795785] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1749.809441] binder: BINDER_SET_CONTEXT_MGR already set [ 1749.842929] binder: 11454:11456 ioctl 40046207 0 returned -16 [ 1749.876653] binder: 11454:11461 ioctl c0306201 20008fd0 returned -14 02:32:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:29 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x88010, r0, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/143, 0x2b0, 0x10001, 0x0) signalfd4(r0, &(0x7f00000000c0)={0x6}, 0x8, 0x80000) write$P9_RWRITE(r0, &(0x7f0000000340)={0xb, 0x77, 0x2, 0x200}, 0xb) setitimer(0x1, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x800, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000c}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x710, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c011}, 0x40090) 02:32:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x4}}) 02:32:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0xfdfdffff, 0x0, 0x0}) [ 1750.080791] binder: 11476:11478 ioctl c0306201 20008fd0 returned -14 [ 1750.098909] binder: BINDER_SET_CONTEXT_MGR already set [ 1750.106609] binder: 11476:11478 ioctl 40046207 0 returned -16 [ 1750.112949] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1750.129237] binder: 11476:11482 ioctl c0306201 20008fd0 returned -14 02:32:30 executing program 0 (fault-call:5 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00 \x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:30 executing program 2: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00004aa000/0x4000)=nil, 0x3) setitimer(0x1, 0x0, 0x0) 02:32:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x5}}) 02:32:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0xfffffdfd, 0x0, 0x0}) 02:32:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1750.443825] binder: 11488:11494 ioctl c0306201 20008fd0 returned -14 [ 1750.452193] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1750.461126] binder: BINDER_SET_CONTEXT_MGR already set [ 1750.467525] binder: 11488:11494 ioctl 40046207 0 returned -16 02:32:30 executing program 2: setitimer(0xffffffffffffffff, 0x0, 0x0) 02:32:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x6}}) [ 1750.489877] binder: 11488:11500 ioctl c0306201 20008fd0 returned -14 [ 1750.501356] FAULT_INJECTION: forcing a failure. [ 1750.501356] name failslab, interval 1, probability 0, space 0, times 0 02:32:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x02\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1750.579185] protocol 88fb is buggy, dev hsr_slave_0 [ 1750.584339] protocol 88fb is buggy, dev hsr_slave_1 [ 1750.609324] CPU: 1 PID: 11499 Comm: syz-executor.0 Not tainted 5.0.0+ #14 [ 1750.616284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1750.625642] Call Trace: [ 1750.628253] dump_stack+0x172/0x1f0 [ 1750.631902] should_fail.cold+0xa/0x15 [ 1750.635810] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1750.640945] ? ___might_sleep+0x163/0x280 [ 1750.645135] __should_failslab+0x121/0x190 [ 1750.649394] should_failslab+0x9/0x14 [ 1750.653209] kmem_cache_alloc_trace+0x2d1/0x760 [ 1750.653217] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1750.665385] snd_pcm_oss_change_params_locked+0x1a7/0x3750 [ 1750.671041] ? __mutex_lock+0x3cd/0x1310 [ 1750.675116] ? aa_file_perm+0x432/0xeb0 [ 1750.679118] ? retint_kernel+0x2d/0x2d [ 1750.683028] ? __fget+0x35a/0x550 [ 1750.686504] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 1750.692353] ? mutex_trylock+0x1e0/0x1e0 [ 1750.696432] ? lock_release+0x4c1/0xa00 [ 1750.700431] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1750.705428] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1750.710194] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1750.714788] ? retint_kernel+0x2d/0x2d [ 1750.718699] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 1750.723904] snd_pcm_oss_write+0x42b/0x8f0 [ 1750.728175] __vfs_write+0x8d/0x110 [ 1750.731816] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 1750.736669] vfs_write+0x20c/0x580 [ 1750.740226] ksys_write+0xea/0x1f0 [ 1750.743796] ? __ia32_sys_read+0xb0/0xb0 [ 1750.747909] ? do_fast_syscall_32+0xd1/0xc98 [ 1750.752331] ? entry_SYSENTER_compat+0x70/0x7f [ 1750.756921] ? do_fast_syscall_32+0xd1/0xc98 [ 1750.761358] __ia32_sys_write+0x71/0xb0 [ 1750.765703] do_fast_syscall_32+0x281/0xc98 [ 1750.770047] entry_SYSENTER_compat+0x70/0x7f [ 1750.774571] RIP: 0023:0xf7f09869 [ 1750.777947] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1750.796871] RSP: 002b:00000000f5d050cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1750.804597] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1750.811875] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 1750.819155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 02:32:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl#'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x100000000000000, 0x0, 0x0}) [ 1750.826434] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1750.833706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1750.869018] binder: 11513:11518 ioctl c0306201 20008fd0 returned -14 [ 1750.888940] binder: BINDER_SET_CONTEXT_MGR already set [ 1750.894470] binder: 11513:11518 ioctl 40046207 0 returned -16 [ 1750.901576] binder: 11513:11519 ioctl c0306201 20008fd0 returned -14 02:32:30 executing program 0 (fault-call:5 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:30 executing program 2: setitimer(0x1ffffffffe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x3d, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000040)={'bcsh0\x00', {0x2, 0x4e21, @loopback}}) 02:32:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7}}) 02:32:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x200000000000000, 0x0, 0x0}) [ 1751.046596] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1751.048163] binder: 11525:11526 ioctl c0306201 20008fd0 returned -14 [ 1751.082642] binder: BINDER_SET_CONTEXT_MGR already set [ 1751.088260] binder: 11525:11526 ioctl 40046207 0 returned -16 02:32:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9}}) [ 1751.102794] binder: 11525:11538 ioctl c0306201 20008fd0 returned -14 [ 1751.116858] FAULT_INJECTION: forcing a failure. [ 1751.116858] name failslab, interval 1, probability 0, space 0, times 0 02:32:31 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x202000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/bnep\x00') ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1, r2}) 02:32:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x300000000000000, 0x0, 0x0}) [ 1751.181588] CPU: 1 PID: 11537 Comm: syz-executor.0 Not tainted 5.0.0+ #14 [ 1751.188568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1751.188576] Call Trace: [ 1751.188603] dump_stack+0x172/0x1f0 [ 1751.188636] should_fail.cold+0xa/0x15 [ 1751.208081] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1751.213210] ? ___might_sleep+0x163/0x280 [ 1751.217384] __should_failslab+0x121/0x190 [ 1751.221636] should_failslab+0x9/0x14 [ 1751.221655] kmem_cache_alloc_trace+0x2d1/0x760 [ 1751.221693] snd_pcm_oss_change_params_locked+0x1df/0x3750 [ 1751.221720] ? __mutex_lock+0x3cd/0x1310 [ 1751.221750] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 1751.221765] ? mutex_trylock+0x1e0/0x1e0 [ 1751.221780] ? find_held_lock+0x35/0x130 [ 1751.221797] ? __fget+0x35a/0x550 [ 1751.257257] ? lock_downgrade+0x880/0x880 [ 1751.261421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1751.266996] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 1751.272207] snd_pcm_oss_write+0x42b/0x8f0 [ 1751.276456] ? apparmor_file_permission+0x25/0x30 [ 1751.281321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1751.286912] __vfs_write+0x8d/0x110 [ 1751.290551] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 1751.290573] vfs_write+0x20c/0x580 [ 1751.290596] ksys_write+0xea/0x1f0 [ 1751.290616] ? __ia32_sys_read+0xb0/0xb0 [ 1751.290637] ? do_fast_syscall_32+0xd1/0xc98 [ 1751.290654] ? entry_SYSENTER_compat+0x70/0x7f [ 1751.290667] ? do_fast_syscall_32+0xd1/0xc98 [ 1751.290690] __ia32_sys_write+0x71/0xb0 [ 1751.299090] do_fast_syscall_32+0x281/0xc98 [ 1751.299126] entry_SYSENTER_compat+0x70/0x7f [ 1751.299140] RIP: 0023:0xf7f09869 [ 1751.299156] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1751.299165] RSP: 002b:00000000f5d050cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1751.299180] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1751.299189] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 02:32:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\xff'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1751.299198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1751.299207] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1751.299221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1751.378966] binder: 11545:11546 ioctl c0306201 20008fd0 returned -14 [ 1751.457164] binder: BINDER_SET_CONTEXT_MGR already set 02:32:31 executing program 2: setitimer(0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/llc\x00') ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0xfffffffffffffff8) 02:32:31 executing program 0 (fault-call:5 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa}}) [ 1751.477766] binder: 11545:11546 ioctl 40046207 0 returned -16 [ 1751.509745] binder: 11545:11555 ioctl c0306201 20008fd0 returned -14 02:32:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\x00\x00\x00@\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x0f'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x400000000000000, 0x0, 0x0}) 02:32:31 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000040)) setitimer(0x1, 0x0, 0x0) 02:32:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xb}}) 02:32:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\xfe'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1751.787785] binder_thread_write: 13 callbacks suppressed [ 1751.787796] binder: 11580:11581 BC_REQUEST_DEATH_NOTIFICATION death notification already set 02:32:31 executing program 2: setitimer(0x1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) [ 1751.838268] binder: 11580:11581 ioctl c0306201 20008fd0 returned -14 [ 1751.860831] binder: BINDER_SET_CONTEXT_MGR already set 02:32:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd}}) [ 1751.893314] binder: 11580:11581 ioctl 40046207 0 returned -16 02:32:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\xff\xff\xfd\xfd\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1751.955172] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1752.158824] FAULT_INJECTION: forcing a failure. [ 1752.158824] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.178520] CPU: 1 PID: 11605 Comm: syz-executor.0 Not tainted 5.0.0+ #14 [ 1752.185475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.194849] Call Trace: [ 1752.197472] dump_stack+0x172/0x1f0 [ 1752.201132] should_fail.cold+0xa/0x15 [ 1752.205036] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1752.210144] ? ___might_sleep+0x163/0x280 [ 1752.214285] __should_failslab+0x121/0x190 [ 1752.218512] should_failslab+0x9/0x14 [ 1752.222331] kmem_cache_alloc_trace+0x2d1/0x760 [ 1752.227007] snd_pcm_oss_change_params_locked+0x217/0x3750 [ 1752.232623] ? __mutex_lock+0x3cd/0x1310 [ 1752.236676] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1752.241438] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 1752.247223] ? mutex_trylock+0x1e0/0x1e0 [ 1752.251285] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1752.256045] ? retint_kernel+0x2d/0x2d [ 1752.259947] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 1752.265136] snd_pcm_oss_write+0x42b/0x8f0 [ 1752.269364] ? apparmor_file_permission+0x25/0x30 [ 1752.274198] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1752.279751] __vfs_write+0x8d/0x110 [ 1752.283409] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 1752.288287] vfs_write+0x20c/0x580 [ 1752.291818] ksys_write+0xea/0x1f0 [ 1752.295379] ? __ia32_sys_read+0xb0/0xb0 [ 1752.299469] ? do_fast_syscall_32+0xd1/0xc98 [ 1752.303880] ? entry_SYSENTER_compat+0x70/0x7f [ 1752.308446] ? do_fast_syscall_32+0xd1/0xc98 [ 1752.312859] __ia32_sys_write+0x71/0xb0 [ 1752.316839] do_fast_syscall_32+0x281/0xc98 [ 1752.321154] entry_SYSENTER_compat+0x70/0x7f [ 1752.325553] RIP: 0023:0xf7f09869 [ 1752.328908] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1752.347832] RSP: 002b:00000000f5d050cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 02:32:32 executing program 0 (fault-call:5 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x500000000000000, 0x0, 0x0}) 02:32:32 executing program 2: setitimer(0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x3, &(0x7f0000000040)={{r0, r1/1000+30000}}, &(0x7f0000000080)) 02:32:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe}}) 02:32:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00\x00\xfd\xfd\xff\xff\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) [ 1752.355529] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1752.362788] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.370047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1752.377301] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1752.384567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.435856] binder: 11608:11609 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1752.440647] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1752.467460] binder: 11608:11609 ioctl c0306201 20008fd0 returned -14 02:32:32 executing program 2: setitimer(0x1, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xa791, 0x400) ioctl$KDMKTONE(r0, 0x4b30, 0x400) [ 1752.493638] binder: BINDER_SET_CONTEXT_MGR already set [ 1752.511146] binder: 11608:11609 ioctl 40046207 0 returned -16 02:32:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf}}) 02:32:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1752.541787] FAULT_INJECTION: forcing a failure. [ 1752.541787] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.562188] binder: 11608:11620 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1752.601156] binder: 11608:11620 ioctl c0306201 20008fd0 returned -14 [ 1752.609652] CPU: 0 PID: 11618 Comm: syz-executor.0 Not tainted 5.0.0+ #14 [ 1752.616598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.625964] Call Trace: [ 1752.628577] dump_stack+0x172/0x1f0 [ 1752.632236] should_fail.cold+0xa/0x15 [ 1752.636151] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1752.641277] ? ___might_sleep+0x163/0x280 [ 1752.645448] __should_failslab+0x121/0x190 [ 1752.649699] should_failslab+0x9/0x14 [ 1752.653519] __kmalloc+0x2dc/0x740 [ 1752.657089] ? mark_held_locks+0xa4/0xf0 [ 1752.661169] ? constrain_params_by_rules+0x118/0x1180 [ 1752.666389] constrain_params_by_rules+0x118/0x1180 [ 1752.671413] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1752.675564] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1752.676357] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1752.676383] ? snd_pcm_mmap_status_fault+0x240/0x240 [ 1752.676400] ? retint_kernel+0x2d/0x2d [ 1752.697590] ? debug_smp_processor_id+0x10/0x280 [ 1752.702355] ? __sanitizer_cov_trace_pc+0x2b/0x50 [ 1752.702379] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1752.702394] ? snd_interval_refine+0x42a/0x720 [ 1752.702418] snd_pcm_hw_refine+0xbf9/0xf20 [ 1752.722378] ? retint_kernel+0x2d/0x2d [ 1752.726284] ? constrain_params_by_rules+0x1180/0x1180 [ 1752.726305] ? retint_kernel+0x2d/0x2d [ 1752.735474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1752.741029] ? _snd_pcm_hw_param_min+0x29d/0x560 [ 1752.745811] snd_pcm_oss_change_params_locked+0x6c2/0x3750 [ 1752.751454] ? __mutex_lock+0x3cd/0x1310 [ 1752.755551] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 1752.761356] ? mutex_trylock+0x1e0/0x1e0 [ 1752.765429] ? find_held_lock+0x35/0x130 [ 1752.769514] ? lock_downgrade+0x880/0x880 [ 1752.769532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1752.769557] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 1752.769575] snd_pcm_oss_write+0x42b/0x8f0 [ 1752.779258] ? apparmor_file_permission+0x25/0x30 [ 1752.779276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1752.779302] __vfs_write+0x8d/0x110 [ 1752.802689] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 1752.807553] vfs_write+0x20c/0x580 [ 1752.811201] ksys_write+0xea/0x1f0 [ 1752.814756] ? __ia32_sys_read+0xb0/0xb0 [ 1752.818861] ? do_fast_syscall_32+0xd1/0xc98 [ 1752.823284] ? entry_SYSENTER_compat+0x70/0x7f [ 1752.827876] ? do_fast_syscall_32+0xd1/0xc98 [ 1752.832302] __ia32_sys_write+0x71/0xb0 [ 1752.836523] do_fast_syscall_32+0x281/0xc98 [ 1752.840861] entry_SYSENTER_compat+0x70/0x7f [ 1752.845274] RIP: 0023:0xf7f09869 [ 1752.848647] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1752.867579] RSP: 002b:00000000f5d050cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1752.875324] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1752.875335] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.875345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 02:32:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 02:32:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\xff'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:32 executing program 0 (fault-call:5 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:32 executing program 2: setitimer(0x2, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2bc, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x190, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd36a}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x26}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @rand_addr="4e133b5704e241c0a315175a5035516b", 0x3f}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x22}, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x444}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa45}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd99}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff9281}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @rand_addr="6b300e88526115d0ccf3fd70885cea56", 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @mcast1, 0xfffffffffffffff9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_MEDIA={0x100, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4930}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40}, 0x8810) 02:32:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x600000000000000, 0x0, 0x0}) [ 1752.875353] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1752.875365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 02:32:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11}}) [ 1752.960892] binder: 11640:11641 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1752.997055] binder: 11640:11641 ioctl c0306201 20008fd0 returned -14 02:32:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x10000, 0x5, [0xff, 0x4, 0x8, 0x8, 0x100000001]}, &(0x7f0000000140)=0x12) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x7fffffff}, 0x8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x0, &(0x7f0000000040)={@empty, @local}, &(0x7f0000000080)=0x8) setitimer(0x1, 0x0, 0x0) 02:32:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1753.023900] FAULT_INJECTION: forcing a failure. [ 1753.023900] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.045102] binder: BINDER_SET_CONTEXT_MGR already set [ 1753.113001] binder: 11640:11641 ioctl 40046207 0 returned -16 [ 1753.129379] CPU: 0 PID: 11646 Comm: syz-executor.0 Not tainted 5.0.0+ #14 [ 1753.136354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1753.145713] Call Trace: [ 1753.148326] dump_stack+0x172/0x1f0 [ 1753.151993] should_fail.cold+0xa/0x15 [ 1753.155933] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1753.161065] ? ___might_sleep+0x163/0x280 [ 1753.165233] __should_failslab+0x121/0x190 [ 1753.169485] should_failslab+0x9/0x14 [ 1753.173303] kmem_cache_alloc_trace+0x2d1/0x760 [ 1753.177996] ? memset+0x32/0x40 [ 1753.181300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1753.186847] ? _snd_pcm_hw_param_min+0x29d/0x560 [ 1753.191621] snd_pcm_oss_change_params_locked+0x75c/0x3750 [ 1753.194438] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1753.197261] ? mark_held_locks+0xa4/0xf0 [ 1753.197285] ? lockdep_hardirqs_on+0x418/0x5d0 02:32:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12}}) [ 1753.197314] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 1753.197336] ? retint_kernel+0x2d/0x2d [ 1753.213422] ? snd_pcm_oss_make_ready_locked+0xb4/0x130 [ 1753.228448] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 1753.233650] snd_pcm_oss_write+0x42b/0x8f0 [ 1753.237909] ? apparmor_file_permission+0x25/0x30 [ 1753.242765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1753.242792] __vfs_write+0x8d/0x110 [ 1753.242808] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 1753.257000] vfs_write+0x20c/0x580 02:32:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1753.260570] ksys_write+0xea/0x1f0 [ 1753.264131] ? __ia32_sys_read+0xb0/0xb0 [ 1753.268209] ? do_fast_syscall_32+0xd1/0xc98 [ 1753.272630] ? entry_SYSENTER_compat+0x70/0x7f [ 1753.277225] ? do_fast_syscall_32+0xd1/0xc98 [ 1753.281655] __ia32_sys_write+0x71/0xb0 [ 1753.285651] do_fast_syscall_32+0x281/0xc98 [ 1753.289998] entry_SYSENTER_compat+0x70/0x7f [ 1753.294423] RIP: 0023:0xf7f09869 02:32:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x25}}) [ 1753.297799] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1753.316710] RSP: 002b:00000000f5d050cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1753.324427] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1753.331703] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 1753.338995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1753.346290] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1753.346300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1753.400940] netlink: 'syz-executor.5': attribute type 15 has an invalid length. 02:32:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x700000000000000, 0x0, 0x0}) 02:32:33 executing program 2: prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/77) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0x7ff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x80203, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={r1, 0x80000, r2}) setitimer(0x1, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000000100)) fsync(r3) [ 1753.701385] binder: 11772:11773 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1753.739174] binder: 11772:11773 ioctl c0306201 20008fd0 returned -14 [ 1753.757087] binder: BINDER_SET_CONTEXT_MGR already set [ 1753.762662] binder: 11772:11773 ioctl 40046207 0 returned -16 [ 1753.775703] binder: 11772:11780 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1753.786480] binder: 11772:11780 ioctl c0306201 20008fd0 returned -14 [ 1754.899177] net_ratelimit: 14 callbacks suppressed [ 1754.899184] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.909258] protocol 88fb is buggy, dev hsr_slave_1 [ 1754.914357] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.919438] protocol 88fb is buggy, dev hsr_slave_1 [ 1754.979185] protocol 88fb is buggy, dev hsr_slave_0 [ 1754.984402] protocol 88fb is buggy, dev hsr_slave_1 [ 1755.139204] protocol 88fb is buggy, dev hsr_slave_0 [ 1755.144443] protocol 88fb is buggy, dev hsr_slave_1 02:32:35 executing program 0 (fault-call:5 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7f4}}) 02:32:35 executing program 2: setitimer(0x1, 0x0, 0x0) 02:32:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x2000000000000000, 0x0, 0x0}) 02:32:36 executing program 2: setitimer(0x3, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 1756.033888] binder: 11788:11790 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1756.066816] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1756.070647] binder: 11788:11790 ioctl c0306201 20008fd0 returned -14 02:32:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa54}}) [ 1756.113660] FAULT_INJECTION: forcing a failure. [ 1756.113660] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.115623] binder: BINDER_SET_CONTEXT_MGR already set [ 1756.168902] CPU: 1 PID: 11794 Comm: syz-executor.0 Not tainted 5.0.0+ #14 [ 1756.175895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1756.177698] binder: 11788:11790 ioctl 40046207 0 returned -16 [ 1756.185272] Call Trace: [ 1756.185303] dump_stack+0x172/0x1f0 [ 1756.185335] should_fail.cold+0xa/0x15 [ 1756.185362] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1756.185391] ? ___might_sleep+0x163/0x280 [ 1756.206437] __should_failslab+0x121/0x190 [ 1756.206460] should_failslab+0x9/0x14 [ 1756.206478] __kmalloc+0x2dc/0x740 [ 1756.222258] ? unwind_get_return_address+0x61/0xa0 [ 1756.227196] ? __save_stack_trace+0x8a/0xf0 [ 1756.227219] ? constrain_params_by_rules+0x118/0x1180 [ 1756.227243] constrain_params_by_rules+0x118/0x1180 [ 1756.227267] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1756.246518] ? retint_kernel+0x2d/0x2d [ 1756.250425] ? snd_pcm_mmap_status_fault+0x240/0x240 [ 1756.250450] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1756.250472] ? retint_kernel+0x2d/0x2d [ 1756.250498] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1756.250511] ? snd_interval_refine+0x42a/0x720 [ 1756.250532] snd_pcm_hw_refine+0xbf9/0xf20 [ 1756.278599] ? constrain_params_by_rules+0x1180/0x1180 [ 1756.283881] ? snd_interval_refine+0x42a/0x720 [ 1756.283904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1756.283925] ? _snd_pcm_hw_param_set.constprop.0+0x282/0x590 [ 1756.299822] ? snd_pcm_oss_change_params_locked+0x75c/0x3750 [ 1756.305672] ? rcu_read_lock_sched_held+0x110/0x130 [ 1756.310698] ? snd_pcm_oss_open+0x60/0x60 [ 1756.314865] ? memcmp+0x74/0xc0 [ 1756.318169] snd_pcm_oss_change_params_locked+0xc99/0x3750 [ 1756.323887] ? common_interrupt+0x7/0xf [ 1756.327883] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 1756.333689] ? mutex_trylock+0x1e0/0x1e0 [ 1756.333705] ? find_held_lock+0x35/0x130 [ 1756.333735] ? lock_downgrade+0x880/0x880 [ 1756.333752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1756.333775] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 1756.356743] snd_pcm_oss_write+0x42b/0x8f0 [ 1756.361001] ? apparmor_file_permission+0x25/0x30 [ 1756.365857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1756.371417] __vfs_write+0x8d/0x110 [ 1756.375076] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 1756.379941] vfs_write+0x20c/0x580 [ 1756.383502] ksys_write+0xea/0x1f0 [ 1756.387066] ? __ia32_sys_read+0xb0/0xb0 [ 1756.391149] ? do_fast_syscall_32+0xd1/0xc98 [ 1756.395574] ? entry_SYSENTER_compat+0x70/0x7f [ 1756.400169] ? do_fast_syscall_32+0xd1/0xc98 [ 1756.404597] __ia32_sys_write+0x71/0xb0 [ 1756.408591] do_fast_syscall_32+0x281/0xc98 [ 1756.412935] entry_SYSENTER_compat+0x70/0x7f 02:32:36 executing program 2: setitimer(0x4, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x323800) sendmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="6da6855f9da924299865d781f7ac6502f81ce417c6fdbd236b89aeadc3770970b5a0170fe6cf1345ac7b672ee77c8f1b8e5d7b6fcd1c2d6d5a2e1cc017f1a445e72fa2ef79d27bace2a70fc50545e5e0382fe3fbbf450453cdb0bb6e99adad76baebdf928517c10f1123365d73181f346e01e10f4dcdb10d654870fbf723c7ac552cbd293e59db0cf669c039c904e300dcdbde9c45e2d3361bf16d7591a6719a720002749b4adb48bc8ca6e7cba39ddd0919864aeb7a56ce46887ced143d2b41996a367a52aad99b498e90a3b583269474374c2d7f4478bd2e256c36e2fb64277d6c4cabde484e9eb091fd25805585e221044e728031a8", 0xf7}, {&(0x7f0000001140)="e0ea80ab195616d114324e73b3d7b3c6459c150b5dec68d7b416e2a4b97ffe69fc24c558274a7185a899387a40129ee283ed35b6", 0x34}, {&(0x7f0000001180)="3129155f579f9c1f057c6757ca2244e59a831916ad23d2e4e171446624b8db62203c9c3ed415172a210f95a68ceff4e81fa1829dabd2d8943ab1f78697b43574d642449659f4a37043f17c94f4aedb8c941de10e9c2c15523c9c7d0b832b91", 0x5f}], 0x4, &(0x7f0000001240)=[{0xb4, 0x19f, 0x1, "05f63cfcc4658a5c63b2cc8306302de973d856ac5eb9369385d9e7e7910ca7d3245e98bc3ebeebf1c490a4eba86a9a4b46c1e7703440a48eb87713de2de69ddfcbf3f074604259a8b54a81648710ef0e02b8ed1324f7b14770769aa54e45b95226b51337dfad831337125afa42855bb3a764850d953ef811e4335b5d61c0feb26ab46b11db4c3bd8e53ec635a81035f48c2fa178f34358de5e4101a4070a1a942013f24d5834e9"}], 0xb4}, 0x9}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001300)="b2dd346496c531768bd03c1b2582e780da4663fead7c02a206420b8ee810cc3668805bcf3d6142e8756f900869d68be52913a99fa01ed7", 0x37}, {&(0x7f0000001340)="24103d380703eafe3c0987436ffcb46fb0c912c074500888238a2e5a85a79f2a5e6cba6baca3c43c404f911646cafc5f79fac11b0c7cf9f018bc70dc6cf1f9f2061cff0e89e2722b4ac9a3075bedbcb46c97fd975875851ac37c2ba965c7817cf7df09c27b7b11d5c3aa7b34c71e46f0f2fef910f2839d03c85ce083572f3b193783585e409c122f6a06263500004c50863bdbef912efa0f5ea8decd89b59ab682f1d6f84be0e9f9e4cf0972a70fc73a2a5c267c81a06a78ef17a3d45503df978787280f6806a0459b412d69c9cd2a5618c5b97d6ef18526900b175c0bce8b962d2883fc37fe627e00e3fd167926675f6956006db9656fe3", 0xf8}, {&(0x7f0000001440)="1fe52f1d2ca685689bffa14480b345bea69b3fc9a31b68f6d7bc211a98210fee69b5b363d8278b2b33fd118fdc9d3bb54f6a1a4d2b195254d90d2e41700e19e3ccc83d519413af6e975e501253e4bb2cb3cee885eda1e1a8942b6af00e585f1be0a3d9f840e0fe695e260e1d63", 0x6d}, {&(0x7f00000014c0)="0d434a410dfd33a7b0c772b70d9a2934d7977aeac9f7222ce384cad94a6282927408311623ab432a2c839e35ce6e29f117fa90a537f9f1d6273653156a449f4d6d8600c978e4698fb5c43ed05d592628b227f1902bc13b4c357f3a8d7e9de6c8eb45cc9e84e6cc417b361e19d82448c441a0dc2824989e216d24d37793bbce0329403f29e9f7ee273666ec69745a4c1ed6fcb8ec9c087a8cf5f9e907e7d603c54b7e2731c233b1a0fcbb129391d8e82fa250453f3847c7c3b50e6efe4efcb7d51fdf40839ff44d0e12b4d758f2db4ab7b7f2715c59ba0263211075af9c3f4c7b25b43eade29c7d85f97c8864bcf285d90425", 0xf2}, {&(0x7f00000015c0)="fede19b09815682d18e0a38bdd5849a809f2bfdeaf2e9641ee95d177b4e3759f79b79e53538baef85c2c407aa294d964c4b83e385f7ebbf106d25eff6501241c3fab52b30ef6ca809812304d05b64512cef7892e9cbb6ed9e76f49b335087dc058ed2b0a31d5149408d55af0d06de28329bb4c3eb81d3d56db7e6a201b80e5d5083f2b8117484e84df4b7dc441ed2cae60748eb39b1fe2d63c9a9c8cdedbf6acdacee6721750e54e43", 0xa9}], 0x5, &(0x7f00000016c0)=[{0x70, 0x0, 0x7ff, "f7fe7ad81b4f5dbfb84a5cc008025b572ed30651f9707a9b58fe004532a794958f591414e0ed6bd7b1c878494510165658d5d86130de5ad0c6b0bb6f1c877f586f0aac6c6155d26a53680418849ac1081801b12c7444ef4bfc12f4b6d5d2b2ae8a"}, {0xfc, 0x103, 0x20, "3e0b347ca3e53b92020f8ff2ce91ab8294fcbd1140f809b8f428ed13324f9d8972d1a0ad32862ce7ebefc5fee83f7d1eff0523dfb4f2d426fdf725103856af3dba1ed54fd97d8dfe76167bf3ff9ef37de9e2aebe3cadf26bbb37daa6569ed00992679fd86df2725232a39019326baf204d17bcadd0627855e724269f369bc407b18926758908228da753da166983aab0e7ae3f756c16e5b776eeb4524563764822e3ffddc7651de7ede2a5858bd7f7271c347c769847f2d5989f33f6206e69061e27505e5c3d541f1754cf9fefaeb0317a8bb0a4f4ae5de9cbf6d8403db069058e672e73cff8eb8886959e040801d3"}, {0xb8, 0x107, 0x9, "c444d100aa4112272999c2e025be4247da944831e67e335ad7acef5bc99155efa22131313b098d66ad4766d6c56a982ccc25ed2ec3258737abd4c895eda41799d793872c1e03833fd02c70a60018cf1605ddd3fb0c6b2051327073168f329253f27f2ce13fdaffb74f86441ffb92e58efe4fc4846e72376c5874764ee33b6be679a5ebcdb0cfde1e672e9bf9f31d28653880758a7196bf3d3d2a0b68acc74274b47fc57cb614d05de7"}, {0x8c, 0x1ff, 0x5, "47e8819ecdc3eae5b00def4075a013c7f45c89df0246ffa885d40989e9f463ebfae91c3015c42f9d8562c60117c8cf1463b99420dbe2f007374b45ce678566a84ceb4748473fdffac511032fef5b26e8532ac3f755db269309085059da6059be55f315957174a89d078758f1eba007bee06439317cb60b850171772179"}, {0xc8, 0x29, 0x2, "3eca831dc68e2e06307452fc7b9b1fc5a8e25aed6b8941116a254ddc7e105de1da353f8c0644e90777b0505be3348002085ec43ed6877be9f380d3087044af32332ee2821770206431a1f8635444643c4dcb7be90579aa0ead64c2b2456526c1092b73d8a2f29e4ad94a134d3bb440865bac6535f19d62733af3c2c2c8a38a74a06e0e6f8eaffb26512b70ba3ab3415edc1d505f2d3c58324de42a6cb2700428e636434adbba130f6aedf31d77c484f0da99213012aeaf563e"}, {0xbc, 0x117, 0x1, "9468b166632d0e69d3352bedc46bd2bd381f646cd2bf3045005b9689d24701730f6f802abfb6fbaa132de94013984cb8b9d37d9b45fb6d3e4d042855f648356a770589a7140be06176431550be47cb57b4f4e2100761c8ceb6fec2b2897e8b1f323c8aeb527c4c777640f0839f1c7d19204e75cf86ab0a2808d38f49935d4e665f07b8b6f380e68050d61a759dcc5aaea8059fe48ab8d8a4381dd952e16464537c8ca6c81230a492dfb50b26dad8"}, {0x100c, 0x0, 0x9, "45bdaecad0b9edff57b41d7fa24e3aab12490dc3860685fd0cbe533369988898c82fb102259a4804ca05180a08012c02929b4e69f7450f9b7cca504584a6292b3148832c30b71d0ed6b0d72a666b0e99139c0b0427ffd3bb87421ae16fe3ab168f08a0f816d37578c1fdadbf7733c61cb92502a29631571b0bfcf863e416b9a017da29f119dd99fa12b9d09c4cb0a8b5015f29e6195c2e947a39de8bef5060f728aabe82f44b8358cf86a35009f85a8c8bc50cdae9469387dc780c9de4aaa870610ce7b49820a7a4d50b0bef7c8d6710435a85899ace94cfc588d8a8f49f696ea201028f594020e9213dd70ccf58dcb4533f58e281343c52d0ddbd9d10ee5f0d22a23d96e55c196449bd9f7e655b07567f7a3db1d22f7d2bd6de2f07722221431b56f93ff6b5e808147ddfb8650a90eced0d93ee4ff015310944b027b86dc3de47f7c10f7222b9e73e6e699b1fceba7666e5880988dc1d520073124b65592dd161b6277fa4960d4349363d41329b546651434affd53424d5a6fe56e00d5c5e33ce29292b88cc75a1f6c60f07ced209d718db5e19ccb3feca0cc06826da88dcf1260c6eb91b4fc7dd28e2ea44ef1d5fcaca5dd5ac465f1d4090eeeb0f22c828a08ce75c95ac304806964bf9375c9aa553848ef627c8316d5f5da888a73578fba55e4883da80e304ff46cb1180bdff80cbe5e516534da00c779d151fe7133121ab6b51020a6c00c05b840d67a9f08d3ad6846293c03602d9338597336e0511662f5e520987452f7de48bde97e6faf309a293f1716edcc20f97b11a1dc3421ee335240ae6e6cfb45569ae96ea7939e91156befc03e7e94b65329db55c1452196a003415af59c275dc74061ef3b4999f043f1a6f79ad862a931a029c6aa7d9ba341d9503456f991d38efdabf095fe1395ef1ce1c9320709768f16c470b94aef8fd3a1f9b088fd1e9c1d47ae4eacf91e821ef8e311196b8ef0a4f1f43c35a289b34efd26b56ec7fbcd8df3e3eae6243e9e4e2c58f89f2c7044c53038eafde4d163bbd2ead800f05622b7f182d45d458dd2dfc04872e9c37ae777f38245701d11df6a975a4680a9ed1f9dbfe416528e06dbeac71772ceb5100879cd491aa4b5399fd9ce36b172ce1dda6ae3e9187b0fc6c21aa8ae3dba456d9fe426c64868b856461aca39681cbaefdac30d58826ed1c1fd336747ced681a0b0625466c33fa6799f633f8fc93e94403b0aeef3d34c1705970ea7a72c6828840a1b253362566d7bbe2209613ae70626f32a898e154cfb26aa6212a29f1945faf4f42338ae6c1cca518a6e98f2c0643297fa660d5e32a63686f6420a7a5906bee3cc1488c305029bfba83a5b5b0b52cc63353855d84f6f57c0185321c6a2b20a3917ede951ebbbea21cb30cefba11bf3da5421912967db157ed53998dc74cc2042c384081531f5d34cf530973404aecff8ca0622369461e30e8c1074a50af6abc1289c9e95088f0090d4a93cd0dd81c99061de8cec807e6f9ec812ad993df5d4e3d0357c739bc28f7127ff20dbe5b875ad9450e7ee4448b062f4792b9eacf6cbb754946f46f3a1e3dca3e8877875a68db678b33ad152487a2707a968cbdcaeb1d36364623ac39d2d688ce3c83fa0bb105252d90ea1d2059e05d761107828a337206e3c2b5a497ed959fcb2c100fc048b518fed81d0320aadefbd7a2ec771651a95c1d5cbce93544cd69a479d0016806476243df3c41c9f02effd4f21f6336e0bfe135f0ef055eb02a9a9788778b044959926b3de7f400f51d93ebcf9f0f2ba9272f118a25a74475af920cefa11c983684d8a61c2b50e5087e235d851a09f93af64eace3267d92e15320ba2c5d37d06b429c50c7774c9472d4ebd3da1dc0d4dc68ed09ac97ac151e21b61b2fabe8994188ce55309c9c919a56f4160721aaf50affd9116a6580b66182afa4ebfac489a06596738aab1c50a8dcea3bb5b462d85aef773b1cdef969bd853e53e6aeb89ea891cb75c7ced3a8a6f48013b2182851e5b04891911776a285bb8c000d93d33188dfa2dc6ce9a2c0b6c0cb14471a782acc4fdb5e6a0c176bb9a112f4d336d5bb1902574c5a907e598fb4b7e416405289a8a7fab67905a21984d24e95e8a08fc6a51267791644bfb7c8574cc4c0790cebb3999cc5f624a9c1a50dc37c7afca5535529ce8fe76e500aade413b2b494328786724521334d7b79a4c201c91236d035c06d4ad40a681c720fe3d852d796885774fcc17ae6e6330b368f87f7c2942f7f1282ab071c42155e6d0b7450a8f7f7ab9d6dc00ed784bcf9c569aafd89476b96f597a03b34d4ac9fe74a43b6ef3ca92f45b2ee605ddb340d59b6277e09c38c7f72610d600ae5e5df62aa06692c7a8d15ede595233c008afba0b97373207174b0abbff65710755b01a9b5021fbaf8623fecfd29e9d0dc24c1fe81ff548bcf74e00533da0e0c7f309f0d2a1ca8809000c0d84f399e6f06ca51301783f467114c048fcdd48aa19625fbfae249609d6a2bc238acf62a2ebbdbac4d672378d4d03a55a0cc9774e3fa45539fa0e46669f112f7fcb1462a4cd0a494d817888d82b5fc38cfe9b5255d75166ba7a497f4e8756cb0f5a1a23bc40fc6cd9ca97a61ca639bd2b00768fe62dae62828ca7a5796d2c0d9a74194362cc4878b0dff1863f2c58f2e2f7614dd39276ac478e9c72f189341a58d43438361b2668ef207046f13260c1471e103b6d8aa6fa7e14489019bca9769e75f6bb9f8b6fb030119c536141513cf9ebb3bc6bfd992245195cf7a94ca667fb085d160bc902cbd84585aee197f8102a48371b394ed2ccc9ee8bcb408eea7ced07d6ff7ec05e9ed244c7d0256382fa852a4c5006c42af7145b02b350c906232b4d85f65a21739abb787e257f3709bb3a1db886214d17c926d187b6a934dfa06a47c2a0181fb66fff5b195b89c3ead2bfa54fda1bbcb2a33498ffb9fcdd43fa5e0c99f2f2aff8e9b3ef6397f95783b12c35d1bb97f83c78e25e96d3bdad74f4e6b4ccd5f230b9c8b36eb46f4533c25150275d17ba47dce357020b1cdf8244d16a17597472ab5a10f877ab3d965e8c80212d7184dec7e257671ca5adc069c7e8111325ce99c0bb5a636693b4c96ca4aaaec936788fc0d14680f76696e2d0cc0b13d5fca124b7cd3578efc9359c2ff605b1650c10534692f1307c70e4a2ac3aec6b593e3cf8fc9fa8582c566c677956d1a30dddd79dcd2e54b972bb5a97de44e1c8ee8c80201f63e4f2ab9234ba681400ef1aa2f70dbfe19e260b9a69d4f55af87b1cac4593f38927a136c6d0739072e003a7f8a3781b19a7329115a15489dff867b33f26ca8851d5b4bcc8463b019d9ce73b55440c650fb887d8856d6e9c13a74bfb9884a745b3014f64861420c152cf01a02c1b05a695f3b2c1b52b0e6663322c7489f1e4c4911a64df9ad3483f45c1cff579af4bc412049b31e6e9b4fd298bea3b512dc5db24bc120ec2b243fa16e2f887a31bec48234de70b0c0d21e56a3f1eb80c9944c8498226727da5b33bd3bf027513c033ab5404b41562babed04a5ed9f59d323b89bf7211a0c37217037d820a8b84abc79ff70dcca0cc702910fff557a9b97d630d7d5e6645d62cabf90b4ecd8c9af88db931b90e5fa34b8160d00f094c20beb0007bb9d3abaa7bf1cd158540b227e59466b053063d02176f5e1d6fe7ea976763d6a9fbfbfa614b14e7746522a40345eaf57f7620b760291f3134c8ea6d31bf65800fbb30f60e049478574dc4f481c9c1bf1ed9d2d72b3f490071cd06c450442abc06854edc1d3efef94922e76c5ea5ae9777c5a3648987b09c2993ce69f87c5f44add5f3fed9d03148be45c1bbe6f9260244170aa8e2806fc8ff0da7b55d955ca600e6bcab7a5140f446ca566bdfc6e111ab9084218f5d27f80d3dc65be9867b9dcc4c7c5f4309094b606b8c5b7a7c0a2dd1169ec74e83ebeefb8e95204a2e6c82fa6a64506585eccdbb9ebe8e12393e3453fe55ccecb8fd68041f14ba2dcfa04aeebaa8c7854f7b77769164056c83f55301ac3644904d282cb980de7eef10e2241f088f6ca96990b62fc06dc5b22534822b637ea755091969d94d43bf2423555eda7211c2fc2a91234213d38d643f6f471e25c6cb5fe2f9ff60d25a714a15bd5ae6c01099a79ecfcbe075650f67d85f44633916647d71c8cef1a0d61693292e006d2c727baab4995e2910cf13be04d15f0d35ae795c487c44fffa415a308e4ee903837b80cd0341b287f0bdd3d0533be299c3b861c678b7b436633ee06db48b723c00601f04c78c6dc9dd33300b355a8d92578e634907f622d74aa6ed8940473ed9f3255179928e02d1e416484c36769fc0d165706d877b570cca56bb2756f177c67a60d362afe4d1170684388a617af44fa2d00b72341fb5d65096f147980db4c5235cf9c6b75095aeb40c631ab6a0d931dbb94bdcc28a80bb776a27431522b1e091b944c3f10224a8a6d9eea7a1dc9717d8c1c51e7d8b71225b6ff44c244feb00f1d1614751b01f74a1848266de8c7dbdecfd12a106eced3bd85ffc76dbaf09405f3387af92694d342454d95c8e1e9d769de3e294c9f5de17038df0c32394d11a3e3bbc7df0b0c392b4fec324024d5dc2d66aa6b01603b37f9eb51e180b1f3267e89fc590b57200d71ddf9d961c5bf337ef64f9a6b563a60188373bac5a8a0863964658438a40b47899068dd6bf428b45e4ac07e1e95b7d0079a963dda8dc87768d8cefc1be8bb2116336267208789d184aabf0209aa7f20eed627dcf060f3740cbf213048b8f701152ac117d41b5decb53eaab8da2964c2443e456918739ab33962c1ed1c980362f6a057c50715986b0466e960dc1690633cd6107be47eccb51b090470489f4f2129660cc7831774197373671be6f8e69905320739359029b863d59968c31cd1cad999e1221ab6dda6cbf068890b8fc328a87d3790cb1dcf90f9860e00d35ed47f1ea90e230327aa306e1098b9f77e02195fd3638e8e16d241dd37002358fd1f438e4ae1ce6775f727b8e5d1d47698463a1bd2472b6b41cc92fba5b1fbe40138cb6d0abf5308db9973e120fa290bfdf40aec9f3371c1598461ec165691b239be37dce4d79c7198b764b3eef43688962b225505393eb0d7aa4ad8869a0c7acf861cf421d6db31993918edf3f3b2b0abe56cab8303551b4809fc1f0b5544e1ba568303a8c209d18170a8ca91699964d109d0086252cd341f91ff12119d135f292800cc7f5eb79294c3c6e21cc128b143fdb42a997a86475e63c64f430fd290f052d1d9cc64b2a443234773f89365906c2789417b0d137546d4e7c1603da8992dda4e964667b2ae958e4c1d15d7f6d88a71f9351dedd06701d7b94e84250ed4f8764d32a8fad07755f1b110ae61119227d1dcc88e114f895709fc1bf05fcafb0a6b887f69680f0c5419367039cffd9a41e2a8034d16f18c55ed3c579ce8d93418361f5ad9d173969635b2c7968258f1ee71b8222dc6584d65bf36eeb048008da8a49c004ede9b03700b284127210662b4309fa067dc9c83d11f737d52772c57bbf36efc14606e4944fc6746df8973da998b5e1d9ae69d9699f9d880988d848120f21f046bca7355bef116a9d113a6bede4a16d7f45b4f178509d086044c09e0a94512dfebb04fa1a54b1905f9fceafbf5b3970f1f367c253ef75daa34e5affe93cf1e29994115280db1d84dabc119be29911624a6c14c317b4aaa5621851f9528ab9a5f41e571e7dc1b4b2db5a00c06bb927c7f39e12f60a10d5486aa16252d63"}, {0x88, 0x106, 0x100, "6b5abe331305b7f9342cdbe513bc7e3aa25c6fc0015112701a1837865b4def56e058363296f3bd685f8968d813e9c8badb561031000204fc2dcd448d771bc084be98d3e2bf6f477949dcd00206cef22206079a809da95fbbe4771c450093777b82294bc6df0d2f8622c8cea5e97e9d703cad98d06743f5365835"}], 0x14c8}, 0x7}], 0x2, 0x80) 02:32:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x3f00000000000000, 0x0, 0x0}) [ 1756.417356] RIP: 0023:0xf7f09869 [ 1756.417437] binder: 11812:11813 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1756.420731] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1756.420740] RSP: 002b:00000000f5d050cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1756.420757] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 02:32:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1756.420767] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 1756.420777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1756.420786] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1756.420795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1756.544148] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1756.567274] binder: 11812:11813 ioctl c0306201 20008fd0 returned -14 [ 1756.590302] binder: BINDER_SET_CONTEXT_MGR already set [ 1756.610226] binder: 11812:11813 ioctl 40046207 0 returned -16 [ 1756.636946] binder: 11812:11819 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1756.686127] binder: 11812:11819 ioctl c0306201 20008fd0 returned -14 [ 1756.979179] protocol 88fb is buggy, dev hsr_slave_0 [ 1756.984276] protocol 88fb is buggy, dev hsr_slave_1 02:32:38 executing program 0 (fault-call:5 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 02:32:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xaec}}) 02:32:38 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x4, 0x4) setitimer(0x1, 0x0, 0x0) 02:32:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x8121000, 0x0, 0x2}}) 02:32:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x4800000000000000, 0x0, 0x0}) [ 1758.921968] binder: 11830:11832 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1758.929768] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1758.932288] binder: 11830:11832 ioctl c0306201 20008fd0 returned -14 02:32:38 executing program 2: setitimer(0xb, 0x0, 0x0) 02:32:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xaf4}}) 02:32:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) [ 1758.972888] FAULT_INJECTION: forcing a failure. [ 1758.972888] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.028016] binder: BINDER_SET_CONTEXT_MGR already set [ 1759.068693] CPU: 0 PID: 11835 Comm: syz-executor.0 Not tainted 5.0.0+ #14 [ 1759.075677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1759.081601] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1759.085039] Call Trace: [ 1759.095083] dump_stack+0x172/0x1f0 [ 1759.098760] should_fail.cold+0xa/0x15 [ 1759.102687] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1759.107818] ? ___might_sleep+0x163/0x280 [ 1759.111996] __should_failslab+0x121/0x190 [ 1759.116245] should_failslab+0x9/0x14 [ 1759.120060] kmem_cache_alloc_trace+0x2d1/0x760 [ 1759.124744] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1759.126294] binder: 11830:11832 ioctl 40046207 0 returned -16 [ 1759.129521] snd_pcm_hw_param_near.constprop.0+0xec/0x890 [ 1759.129541] ? snd_pcm_oss_change_params_locked+0x2b1c/0x3750 [ 1759.129565] ? snd_pcm_oss_release_file.part.0+0xa0/0xa0 [ 1759.129583] ? kfree+0x186/0x230 [ 1759.129607] snd_pcm_oss_change_params_locked+0xa0a/0x3750 [ 1759.129637] ? lockdep_hardirqs_on+0x357/0x5d0 [ 1759.141151] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 1759.141171] ? mutex_trylock+0x1e0/0x1e0 [ 1759.141187] ? find_held_lock+0x35/0x130 [ 1759.152606] ? lock_downgrade+0x880/0x880 [ 1759.152623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1759.152648] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 1759.178902] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1759.180106] snd_pcm_oss_write+0x42b/0x8f0 [ 1759.180129] ? apparmor_file_permission+0x25/0x30 [ 1759.180148] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1759.180178] __vfs_write+0x8d/0x110 [ 1759.220730] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 1759.225628] vfs_write+0x20c/0x580 [ 1759.229192] ksys_write+0xea/0x1f0 [ 1759.232758] ? __ia32_sys_read+0xb0/0xb0 [ 1759.236837] ? do_fast_syscall_32+0xd1/0xc98 [ 1759.241261] ? entry_SYSENTER_compat+0x70/0x7f [ 1759.245847] ? do_fast_syscall_32+0xd1/0xc98 [ 1759.245870] __ia32_sys_write+0x71/0xb0 [ 1759.254247] do_fast_syscall_32+0x281/0xc98 [ 1759.258586] entry_SYSENTER_compat+0x70/0x7f [ 1759.263012] RIP: 0023:0xf7f09869 02:32:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 02:32:39 executing program 2: setitimer(0x803, 0x0, 0x0) [ 1759.266398] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1759.266835] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1759.285307] RSP: 002b:00000000f5d050cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1759.285323] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1759.285331] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 1759.285341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1759.285350] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1759.285360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1759.320694] ================================================================== [ 1759.345272] BUG: KASAN: slab-out-of-bounds in default_write_copy_kernel+0xdc/0x130 [ 1759.345287] Read of size 64 at addr ffff8880a8aa53c0 by task syz-executor.0/11835 [ 1759.345294] [ 1759.362254] CPU: 0 PID: 11835 Comm: syz-executor.0 Not tainted 5.0.0+ #14 [ 1759.369179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1759.378537] Call Trace: [ 1759.381140] dump_stack+0x172/0x1f0 [ 1759.384786] ? default_write_copy_kernel+0xdc/0x130 [ 1759.389826] print_address_description.cold+0x7c/0x20d [ 1759.395116] ? default_write_copy_kernel+0xdc/0x130 [ 1759.400147] ? default_write_copy_kernel+0xdc/0x130 [ 1759.405181] kasan_report.cold+0x1b/0x40 [ 1759.409253] ? default_write_copy_kernel+0xdc/0x130 [ 1759.409273] check_memory_region+0x123/0x190 [ 1759.409291] memcpy+0x24/0x50 [ 1759.421820] default_write_copy_kernel+0xdc/0x130 [ 1759.426677] ? default_write_copy_kernel+0x1/0x130 [ 1759.431615] ? __bpf_trace_applptr+0x40/0x40 [ 1759.436033] interleaved_copy+0xd0/0x100 [ 1759.440119] __snd_pcm_lib_xfer+0xea3/0x1cfa [ 1759.444545] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1759.449317] ? snd_pcm_hw_rule_step+0x440/0x440 [ 1759.449336] ? __bpf_trace_applptr+0x40/0x40 [ 1759.449360] ? pcm_lib_apply_appl_ptr+0x440/0x440 [ 1759.449382] ? check_memory_region+0x106/0x190 [ 1759.458469] ? memcpy+0x46/0x50 [ 1759.471135] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1759.476165] ? linear_transfer+0x74f/0x970 [ 1759.480436] snd_pcm_oss_write3+0xee/0x230 [ 1759.484691] io_playback_transfer+0x280/0x330 [ 1759.489207] snd_pcm_plug_write_transfer+0x30c/0x400 [ 1759.494330] ? snd_pcm_plug_client_channels_buf+0x450/0x450 [ 1759.500053] ? snd_pcm_format_physical_width+0x75/0x90 [ 1759.505340] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1759.510360] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 1759.510384] snd_pcm_oss_write2+0x250/0x410 [ 1759.510406] ? snd_pcm_oss_write3+0x230/0x230 [ 1759.510432] snd_pcm_oss_write+0x6c2/0x8f0 [ 1759.529180] ? apparmor_file_permission+0x25/0x30 [ 1759.534058] __vfs_write+0x8d/0x110 [ 1759.537699] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 1759.542563] vfs_write+0x20c/0x580 [ 1759.546130] ksys_write+0xea/0x1f0 [ 1759.549690] ? __ia32_sys_read+0xb0/0xb0 [ 1759.553767] ? do_fast_syscall_32+0xd1/0xc98 [ 1759.558195] ? entry_SYSENTER_compat+0x70/0x7f [ 1759.562789] ? do_fast_syscall_32+0xd1/0xc98 [ 1759.567219] __ia32_sys_write+0x71/0xb0 [ 1759.571216] do_fast_syscall_32+0x281/0xc98 [ 1759.575558] entry_SYSENTER_compat+0x70/0x7f [ 1759.579976] RIP: 0023:0xf7f09869 [ 1759.583360] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1759.602250] RSP: 002b:00000000f5d050cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1759.609944] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1759.617200] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 1759.624456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1759.631714] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1759.638975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1759.646260] [ 1759.647878] Allocated by task 11835: [ 1759.651597] save_stack+0x45/0xd0 [ 1759.655039] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1759.659955] kasan_kmalloc+0x9/0x10 [ 1759.663579] __kmalloc_node+0x4e/0x70 [ 1759.667380] kvmalloc_node+0x68/0x100 [ 1759.671168] snd_pcm_plugin_alloc+0x585/0x770 [ 1759.675646] snd_pcm_plug_alloc+0x212/0x330 [ 1759.679992] snd_pcm_oss_change_params_locked+0x2118/0x3750 [ 1759.685690] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 1759.693383] snd_pcm_oss_write+0x42b/0x8f0 [ 1759.697606] __vfs_write+0x8d/0x110 [ 1759.701216] vfs_write+0x20c/0x580 [ 1759.704742] ksys_write+0xea/0x1f0 [ 1759.708266] __ia32_sys_write+0x71/0xb0 [ 1759.712243] do_fast_syscall_32+0x281/0xc98 [ 1759.716552] entry_SYSENTER_compat+0x70/0x7f [ 1759.720940] [ 1759.722552] Freed by task 7731: [ 1759.725819] save_stack+0x45/0xd0 [ 1759.729280] __kasan_slab_free+0x102/0x150 [ 1759.733500] kasan_slab_free+0xe/0x10 [ 1759.737287] kfree+0xcf/0x230 [ 1759.740379] shmem_destroy_callback+0xa2/0xc0 [ 1759.744861] rcu_core+0x928/0x1390 [ 1759.748402] __do_softirq+0x266/0x95a [ 1759.752181] [ 1759.753795] The buggy address belongs to the object at ffff8880a8aa53c0 [ 1759.753795] which belongs to the cache kmalloc-32 of size 32 [ 1759.766257] The buggy address is located 0 bytes inside of [ 1759.766257] 32-byte region [ffff8880a8aa53c0, ffff8880a8aa53e0) [ 1759.777849] The buggy address belongs to the page: [ 1759.782763] page:ffffea0002a2a940 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff8880a8aa5fc1 [ 1759.792190] flags: 0x1fffc0000000200(slab) [ 1759.796414] raw: 01fffc0000000200 ffffea0002692ec8 ffffea000292abc8 ffff88812c3f01c0 [ 1759.804303] raw: ffff8880a8aa5fc1 ffff8880a8aa5000 000000010000003c 0000000000000000 [ 1759.812169] page dumped because: kasan: bad access detected [ 1759.817860] [ 1759.819481] Memory state around the buggy address: [ 1759.824393] ffff8880a8aa5280: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 1759.831735] ffff8880a8aa5300: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 1759.839081] >ffff8880a8aa5380: fb fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 1759.846421] ^ [ 1759.852900] ffff8880a8aa5400: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 1759.860243] ffff8880a8aa5480: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 1759.867579] ================================================================== [ 1759.874915] Disabling lock debugging due to kernel taint [ 1759.883603] Kernel panic - not syncing: panic_on_warn set ... [ 1759.889511] CPU: 0 PID: 11835 Comm: syz-executor.0 Tainted: G B 5.0.0+ #14 [ 1759.897828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1759.907180] Call Trace: [ 1759.909778] dump_stack+0x172/0x1f0 [ 1759.913413] panic+0x2cb/0x65c [ 1759.916608] ? __warn_printk+0xf3/0xf3 [ 1759.920491] ? retint_kernel+0x2d/0x2d [ 1759.924388] ? trace_hardirqs_on+0x5e/0x230 [ 1759.928710] ? default_write_copy_kernel+0xdc/0x130 [ 1759.933728] end_report+0x47/0x4f [ 1759.937180] ? default_write_copy_kernel+0xdc/0x130 [ 1759.942200] kasan_report.cold+0xe/0x40 [ 1759.946178] ? default_write_copy_kernel+0xdc/0x130 [ 1759.951193] check_memory_region+0x123/0x190 [ 1759.955602] memcpy+0x24/0x50 [ 1759.958710] default_write_copy_kernel+0xdc/0x130 [ 1759.963573] ? default_write_copy_kernel+0x1/0x130 [ 1759.968515] ? __bpf_trace_applptr+0x40/0x40 [ 1759.972922] interleaved_copy+0xd0/0x100 [ 1759.976993] __snd_pcm_lib_xfer+0xea3/0x1cfa [ 1759.981404] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1759.986167] ? snd_pcm_hw_rule_step+0x440/0x440 [ 1759.990847] ? __bpf_trace_applptr+0x40/0x40 [ 1759.995266] ? pcm_lib_apply_appl_ptr+0x440/0x440 [ 1760.000110] ? check_memory_region+0x106/0x190 [ 1760.004698] ? memcpy+0x46/0x50 [ 1760.008013] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1760.013039] ? linear_transfer+0x74f/0x970 [ 1760.017289] snd_pcm_oss_write3+0xee/0x230 [ 1760.021531] io_playback_transfer+0x280/0x330 [ 1760.026030] snd_pcm_plug_write_transfer+0x30c/0x400 [ 1760.031139] ? snd_pcm_plug_client_channels_buf+0x450/0x450 [ 1760.036845] ? snd_pcm_format_physical_width+0x75/0x90 [ 1760.042122] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1760.047136] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 1760.052848] snd_pcm_oss_write2+0x250/0x410 [ 1760.057171] ? snd_pcm_oss_write3+0x230/0x230 [ 1760.061672] snd_pcm_oss_write+0x6c2/0x8f0 [ 1760.065905] ? apparmor_file_permission+0x25/0x30 [ 1760.070751] __vfs_write+0x8d/0x110 [ 1760.074378] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 1760.079219] vfs_write+0x20c/0x580 [ 1760.082764] ksys_write+0xea/0x1f0 [ 1760.086311] ? __ia32_sys_read+0xb0/0xb0 [ 1760.090374] ? do_fast_syscall_32+0xd1/0xc98 [ 1760.094782] ? entry_SYSENTER_compat+0x70/0x7f [ 1760.099360] ? do_fast_syscall_32+0xd1/0xc98 [ 1760.103771] __ia32_sys_write+0x71/0xb0 [ 1760.107749] do_fast_syscall_32+0x281/0xc98 [ 1760.112077] entry_SYSENTER_compat+0x70/0x7f [ 1760.116491] RIP: 0023:0xf7f09869 [ 1760.119857] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1760.138755] RSP: 002b:00000000f5d050cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1760.146463] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1760.153725] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 1760.161000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1760.168265] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1760.175527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1760.183604] Kernel Offset: disabled [ 1760.187227] Rebooting in 86400 seconds..